I'm trying to use a Samba (3.0.37) share on my ASUS RT-ac66R router as a
destination for scans from my Kodak Office Hero 6.1 all-in-one printer. I'm
currently getting an invalid User ID or Password error message. I have been
unable to increase the Samba log level at all even after editing the log level
in smb.conf. Before an old router running DDWRT (including Samba) failed,
scanning to the share worked flawlessly.
This seems to demonstrate that it is possible to connect from the printer to
Samba.
I have put the printer and my laptop onto a hub and am using Wireshark to see
what's going on. From the captures, it appears that printer is using a
product called BlueShare 3.0 (http://www.bluepeach.com/BlueShareDataSheet.pdf).
It sounded as if tweaking smb.conf might address the problem so I've spent
much of the day experimenting with changing things like the smb.conf security=,
use spnego =, client use spnego=, (server, domain names) without any luck.
Here's the wireshark decoded output for a test, the error is reported right
after frame 8:
Frame 4: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) on
interface 0
Ethernet II, Src: EastmanK_2e:5f:f0 (00:07:5c:2e:5f:f0), Dst: AsustekC_be:14:60
(08:60:6e:be:14:60)
Internet Protocol Version 4, Src: 192.168.11.91 (192.168.11.91), Dst:
192.168.11.1 (192.168.11.1)
Transmission Control Protocol, Src Port: 4758 (4758), Dst Port: microsoft-ds
(445), Seq: 1, Ack: 1, Len:
51
NetBIOS Session Service
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
[Response in: 6]
SMB Command: Negotiate Protocol (0x72)
NT Status: STATUS_SUCCESS (0x00000000)
Flags: 0x00
0... .... = Request/Response: Message is a request to the server
.0.. .... = Notify: Notify client only on open
..0. .... = Oplocks: OpLock not requested/granted
...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized
.... 0... = Case Sensitivity: Path names are case sensitive
.... ..0. = Receive Buffer Posted: Receive buffer has not been posted
.... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported
Flags2: 0xc841
1... .... .... .... = Unicode Strings: Strings are Unicode
.1.. .... .... .... = Error Code Type: Error codes are NT error codes
..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only
...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs
.... 1... .... .... = Extended Security Negotiation: Extended security
negotiation is
supported
.... .0.. .... .... = Reparse Path: The request does not use a @GMT reparse path
.... .... .1.. .... = Long Names Used: Path names in request are long file names
.... .... ...0 .... = Security Signatures Required: Security signatures are not
required
.... .... .... 0... = Compressed: Compression is not requested
.... .... .... .0.. = Security Signatures: Security signatures are not supported
.... .... .... ..0. = Extended Attributes: Extended attributes are not supported
.... .... .... ...1 = Long Names Allowed: Long file names are allowed in the
response
Process ID High: 0
Signature: 0000000000000000
Reserved: 0000
Tree ID: 0
Process ID: 0
User ID: 0
Multiplex ID: 344
Negotiate Protocol Request (0x72)
Word Count (WCT): 0
Byte Count (BCC): 12
Requested Dialects
Dialect: NT LM 0.12
Buffer Format: Dialect (2)
Name: NT LM 0.12
No. Time Source Destination Protocol Length Info
5 19:12:25.736790000 192.168.11.1 192.168.11.91 TCP 60 microsoft-ds >
4758 [ACK] Seq=1 Ack=52 Win=5840 Len=0
Frame 5: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface
0
Ethernet II, Src: AsustekC_be:14:60 (08:60:6e:be:14:60), Dst: EastmanK_2e:5f:f0
(00:07:5c:2e:5f:f0)
Internet Protocol Version 4, Src: 192.168.11.1 (192.168.11.1), Dst:
192.168.11.91 (192.168.11.91)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 4758
(4758), Seq: 1, Ack: 52, Len:
0
No. Time Source Destination Protocol Length Info
6 19:12:25.738224000 192.168.11.1 192.168.11.91 SMB 153 Negotiate Protocol
Response
Frame 6: 153 bytes on wire (1224 bits), 153 bytes captured (1224 bits) on
interface 0
Ethernet II, Src: AsustekC_be:14:60 (08:60:6e:be:14:60), Dst: EastmanK_2e:5f:f0
(00:07:5c:2e:5f:f0)
Internet Protocol Version 4, Src: 192.168.11.1 (192.168.11.1), Dst:
192.168.11.91 (192.168.11.91)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 4758
(4758), Seq: 1, Ack: 52, Len:
99
NetBIOS Session Service
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
[Response to: 4]
[Time from request: 0.001692000 seconds]
SMB Command: Negotiate Protocol (0x72)
NT Status: STATUS_SUCCESS (0x00000000)
Flags: 0x80
1... .... = Request/Response: Message is a response to the client/redirector
.0.. .... = Notify: Notify client only on open
..0. .... = Oplocks: OpLock not requested/granted
...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized
.... 0... = Case Sensitivity: Path names are case sensitive
.... ..0. = Receive Buffer Posted: Receive buffer has not been posted
.... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported
Flags2: 0xc001
1... .... .... .... = Unicode Strings: Strings are Unicode
.1.. .... .... .... = Error Code Type: Error codes are NT error codes
..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only
...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs
.... 0... .... .... = Extended Security Negotiation: Extended security
negotiation is not supported
.... .0.. .... .... = Reparse Path: The request does not use a @GMT reparse path
.... .... .0.. .... = Long Names Used: Path names in request are not long file
names
.... .... ...0 .... = Security Signatures Required: Security signatures are not
required
.... .... .... 0... = Compressed: Compression is not requested
.... .... .... .0.. = Security Signatures: Security signatures are not supported
.... .... .... ..0. = Extended Attributes: Extended attributes are not supported
.... .... .... ...1 = Long Names Allowed: Long file names are allowed in the
response
Process ID High: 0
Signature: 0000000000000000
Reserved: 0000
Tree ID: 0
Process ID: 0
User ID: 0
Multiplex ID: 344
Negotiate Protocol Response (0x72)
Word Count (WCT): 17
Dialect Index: 0: NT LM 0.12
Security Mode: 0x03
Max Mpx Count: 50
Max VCs: 1
Max Buffer Size: 16644
Max Raw Buffer: 65536
Session Key: 0x000002e0
Capabilities: 0x0080e3fd
System Time: Mar 23, 2013 19:12:29.000000000 Eastern Daylight Time
Server Time Zone: 240 min from UTC
Key Length: 8
Byte Count (BCC): 26
Encryption Key: 09cc5aa135fac1f2
Primary Domain: RAINTREE
No. Time Source Destination Protocol Length Info
7 19:12:25.741633000 192.168.11.91 192.168.11.1 SMB 192 Session Setup AndX
Request, NTLMSSP_NEGOTIATE
Frame 7: 192 bytes on wire (1536 bits), 192 bytes captured (1536 bits) on
interface 0
Ethernet II, Src: EastmanK_2e:5f:f0 (00:07:5c:2e:5f:f0), Dst: AsustekC_be:14:60
(08:60:6e:be:14:60)
Internet Protocol Version 4, Src: 192.168.11.91 (192.168.11.91), Dst:
192.168.11.1 (192.168.11.1)
Transmission Control Protocol, Src Port: 4758 (4758), Dst Port: microsoft-ds
(445), Seq: 52, Ack: 100,
Len: 138
NetBIOS Session Service
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
[Response in: 8]
SMB Command: Session Setup AndX (0x73)
NT Status: STATUS_SUCCESS (0x00000000)
Flags: 0x00
0... .... = Request/Response: Message is a request to the server
.0.. .... = Notify: Notify client only on open
..0. .... = Oplocks: OpLock not requested/granted
...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized
.... 0... = Case Sensitivity: Path names are case sensitive
.... ..0. = Receive Buffer Posted: Receive buffer has not been posted
.... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported
Flags2: 0xc841
1... .... .... .... = Unicode Strings: Strings are Unicode
.1.. .... .... .... = Error Code Type: Error codes are NT error codes
..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only
...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs
.... 1... .... .... = Extended Security Negotiation: Extended security
negotiation is supported
.... .0.. .... .... = Reparse Path: The request does not use a @GMT reparse path
.... .... .1.. .... = Long Names Used: Path names in request are long file names
.... .... ...0 .... = Security Signatures Required: Security signatures are not
required
.... .... .... 0... = Compressed: Compression is not requested
.... .... .... .0.. = Security Signatures: Security signatures are not supported
.... .... .... ..0. = Extended Attributes: Extended attributes are not supported
.... .... .... ...1 = Long Names Allowed: Long file names are allowed in the
response
Process ID High: 0
Signature: 0000000000000000
Reserved: 0000
Tree ID: 0
Process ID: 0
User ID: 0
Multiplex ID: 345
Session Setup AndX Request (0x73)
Word Count (WCT): 12
AndXCommand: No further commands (0xff)
Reserved: 00
AndXOffset: 134
Max Buffer: 32767
Max Mpx Count: 6
VC Number: 1
Session Key: 0x000002e0
Security Blob Length: 32
Reserved: 00000000
Capabilities: 0x8000005c
Byte Count (BCC): 75
Security Blob: 4e544c4d5353500001000000070200000000000020000000...
GSS-API Generic Security Service Application Program Interface
NTLM Secure Service Provider
NTLMSSP identifier: NTLMSSP
NTLM Message Type: NTLMSSP_NEGOTIATE (0x00000001)
Flags: 0x00000207
Calling workstation domain: NULL
Calling workstation name: NULL
Native OS: Win32
Native LAN Manager: BlueShare 3.0
Primary Domain:
No. Time Source Destination Protocol Length Info
8 19:12:25.742623000 192.168.11.1 192.168.11.91 SMB 93 Session Setup AndX
Response, Error: Access denied
Frame 8: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) on interface
0
Ethernet II, Src: AsustekC_be:14:60 (08:60:6e:be:14:60), Dst: EastmanK_2e:5f:f0
(00:07:5c:2e:5f:f0)
Internet Protocol Version 4, Src: 192.168.11.1 (192.168.11.1), Dst:
192.168.11.91 (192.168.11.91)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 4758
(4758), Seq: 100, Ack: 190,
Len: 39
NetBIOS Session Service
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
[Response to: 7]
[Time from request: 0.000990000 seconds]
SMB Command: Session Setup AndX (0x73)
Error Class: DOS Error (0x01)
Reserved: 00
Error Code: Access denied
Flags: 0x80
1... .... = Request/Response: Message is a response to the client/redirector
.0.. .... = Notify: Notify client only on open
..0. .... = Oplocks: OpLock not requested/granted
...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized
.... 0... = Case Sensitivity: Path names are case sensitive
.... ..0. = Receive Buffer Posted: Receive buffer has not been posted
.... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported
Flags2: 0x8001
1... .... .... .... = Unicode Strings: Strings are Unicode
.0.. .... .... .... = Error Code Type: Error codes are DOS error codes
..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only
...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs
.... 0... .... .... = Extended Security Negotiation: Extended security
negotiation is not supported
.... .0.. .... .... = Reparse Path: The request does not use a @GMT reparse path
.... .... .0.. .... = Long Names Used: Path names in request are not long file
names
.... .... ...0 .... = Security Signatures Required: Security signatures are not
required
.... .... .... 0... = Compressed: Compression is not requested
.... .... .... .0.. = Security Signatures: Security signatures are not supported
.... .... .... ..0. = Extended Attributes: Extended attributes are not supported
.... .... .... ...1 = Long Names Allowed: Long file names are allowed in the
response
Process ID High: 0
Signature: 0000000000000000
Reserved: 0000
Tree ID: 0
Process ID: 0
User ID: 0
Multiplex ID: 345
Session Setup AndX Response (0x73)
Word Count (WCT): 0
Byte Count (BCC): 0
Can anyone see what the problem might be?
In case it's useful, here's my smb.conf:
[global]
workgroup = raintree
netbios name = raintree
server string = raintree
unix charset = UTF8
display charset = UTF8
log file = /var/log.samba
log level = 0
max log size = 5
security = USER
guest ok = no
map to guest = Bad User
encrypt passwords = yes
pam password change = no
null passwords = yes
force directory mode = 0777
force create mode = 0777
max connections = 5
socket options = TCP_NODELAY SO_KEEPALIVE SO_RCVBUF=32768 SO_SNDBUF=32768
obey pam restrictions = no
use spnego = no
client use spnego = no
disable spoolss = yes
host msdfs = no
strict allocate = No
bind interfaces only = yes
interfaces = lo br0
use sendfile = no
map archive = no
map hidden = no
map read only = no
map system = no
store dos attributes = yes
dos filemode = yes
dos filetimes = yes
dos filetime resolution = yes
[mbk]
comment = sambap's mbk in WD My Passport 0748
path = /tmp/mnt/sambap/mbk
valid users = admin, mbk, new
invalid users =
read list = admin, mbk, new
write list = admin, mbk, new
Thanks
Mike