Tompkins, Michael
2019-Dec-16 17:39 UTC
[Samba] Negotiate NTLM Version with smblient 4.7.5 and Windows 2016 Server fails
We are trying to connect to a Windows 2016 Samba server and are getting denied running samba-4.7.5 smbclient. I believe what is happening is we do a NTLMSSP_NEGOTIATE packet and it returns: Version 10.0 (Build 14393); NTLM Current Revision 15 Major Version: 10 Minor Version: 0 Build Number: 14393 NTLM Current Revision: 15 Then we send a Session Setup Request with: .... ..1. .... .... .... .... .... .... = Negotiate Version: Set Version 6.1 (Build 0); NTLM Current Revision 15 Major Version: 6 Minor Version: 1 Build Number: 0 NTLM Current Revision: 15 MIC: d7cd676d79c0d0124209d8787ec97ef7 mechListMIC: 01000000a93bb7dfb796bf2400000000 We are getting a STATUS_ACCESS_DENIED message. Is this because the server is saying it support Version 10, and we are trying to talk Version 6.1 ? Is the min version something that can be set on the server side, or can we prevent this from being sent from the smbclient ? We have an early version of 4.1 that does not send the NTLM version in the Session Setup Request .... ..0. .... .... .... .... .... .... = Negotiate Version: Not set and it works to the same server. I've searched the internet and I cannot find anything on this issue. Any assistance would be greatly appreciated. Mike Tompkins