search for: simple_packet_signatur

...or a user of site A tries to log on site A domain from a site B machine. This problem disappears if server signing is set to No in smb.conf. I could make a level 10 log of smbd process while the problem appears, and could isolate the following lines : [2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285) simple_packet_signature: sequence number 2 [2008/08/15 12:24:29, 0] libsmb/smb_signing.c:srv_check_incoming_message(754) srv_check_incoming_message: BAD SIG: seq 2 wanted SMB signature of [2008/08/15 12:24:29, 5] lib/util.c:dump_data(2226) [000] 52 70 FA 2C 55 E1 28 A4...

...imple_set_signing(492) cli_simple_set_signing: response_data [2007/04/04 17:00:16, 10] lib/util.c:dump_data(2222) [000] 83 DF D1 94 32 64 EF 3D 6D A3 34 B3 F5 25 EB A9 ....2d.= m.4..%.. [010] 94 16 E3 35 CD AD 98 01 ...5.... [2007/04/04 17:00:16, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 0 [2007/04/04 17:00:16, 10] libsmb/smb_signing.c:client_sign_outgoing_message(348) client_sign_outgoing_message: sent SMB signature of [2007/04/04 17:00:16, 10] lib/util.c:dump_data(2222) [000] E9 6F CB EA A4 15 B6 91 .o........

...9; Enter WIN\henson's password: signing_good: BAD SIG: seq 1 session setup failed: NT_STATUS_OK ----- If I enable debugging for smbclient it spits out: ----- Mandatory SMB signing enabled! SMB signing enabled! cli_simple_set_signing: user_session_key cli_simple_set_signing: NULL response_data simple_packet_signature: sequence number 0 client_sign_outgoing_message: sent SMB signature of [0000] 1E F5 1B 99 6C D0 80 5A ....l..Z store_sequence_for_reply: stored seq = 1 mid = 3 get_sequence_for_reply: found seq = 1 mid = 3 simple_packet_signature: sequence number 1 client_check_incoming_...

...28:07, 0] libsmb/smb_signing.c:srv_check_incoming_message(661) srv_check_incoming_message: BAD SIG: seq 798 got SMB signature of [2006/08/05 03:28:07, 5] lib/util.c:dump_data(2237) [000] FA B5 F7 8E 38 76 3C EA ....8v<. [2006/08/05 03:28:07, 10] libsmb/smb_signing.c:simple_packet_signature(262) simple_packet_signature: sequence number 793 [2006/08/05 03:28:07, 10] libsmb/smb_signing.c:simple_packet_signature(262) simple_packet_signature: sequence number 794 [2006/08/05 03:28:07, 10] libsmb/smb_signing.c:simple_packet_signature(262) simple_packet_signature: sequence number 795...

...on_key [2005/02/28 13:24:27, 10] lib/util.c:dump_data(1990) [000] A7 13 04 B5 B0 92 49 5D ......I] [2005/02/28 13:24:27, 10] libsmb/smb_signing.c:cli_simple_set_signing(479) cli_simple_set_signing: NULL response_data [2005/02/28 13:24:27, 10] libsmb/smb_signing.c:simple_packet_signature(267) simple_packet_signature: sequence number 0 [2005/02/28 13:24:27, 10] libsmb/smb_signing.c:client_sign_outgoing_message(334) client_sign_outgoing_message: sent SMB signature of [2005/02/28 13:24:27, 10] lib/util.c:dump_data(1990) [000] 82 0D ED F9 F7 85 A4 E6...

...cache (MEMORY:cliconnect) is valid until: (Thu, 24 Apr 2008 02:05:49 MSD - 1208988349) Got KRB5 session key of length 16 SMB signing enabled! cli_simple_set_signing: user_session_key [000] C4 29 D1 54 F5 BB 85 84 6D C3 D6 D7 EE 1C A3 68 .).T.... m......h cli_simple_set_signing: NULL response_data simple_packet_signature: sequence number 0 client_sign_outgoing_message: sent SMB signature of [000] 6B CE 18 18 6F D6 84 B7 k...o... store_sequence_for_reply: stored seq = 1 mid = 2 write_socket(13,1246) write_socket(13,1246) wrote 1246 got smb length of 143 size=143 smb_com=0x73 smb_rcls=0 sm...

...cli_simple_set_signing: user_session_key [000] 1F C6 32 8B 0A F1 88 B6 93 E2 27 26 44 B3 E7 61 ..2..... ..'&D..a cli_simple_set_signing: response_data [000] 5C 31 A2 1A E5 2D D4 9B CA 21 CF 62 EC A5 D4 A7 \1...-.. .!.b.... [010] 6D 54 5A BC DC 0A 5D AB mTZ...]. simple_packet_signature: sequence number 0 client_sign_outgoing_message: sent SMB signature of [000] 79 EB 83 07 D1 EC 8C ED y....... store_sequence_for_reply: stored seq = 1 mid = 2 write_socket(4,144) write_socket(4,144) wrote 144 got smb length of 101 size=101 smb_com=0x73 smb_rcls=0 smb_reh=...

...I turn on more debugging, you see this: === 3.0.7: /usr/bin/winbind -i -d10 === ... Got KRB5 session key of length 16 SMB signing enabled! cli_simple_set_signing: user_session_key [000] C1 6D 83 5F 6A 94 6B 73 57 46 0B CB 16 03 CB B1 .m._j.ks WF...... cli_simple_set_signing: NULL response_data simple_packet_signature: sequence number 0 client_sign_outgoing_message: sent SMB signature of [000] CD 85 93 7F A1 A8 34 22 ......4" store_sequence_for_reply: stored seq = 1 mid = 2 ... client_check_incoming_message: seq 1: got good SMB signature of [000] 9D E9 1B CC 6F 48 42 92...

...achine spn, but got no results. What else could I try ? Some more debug info: -d 10 output (replaced domain and domain sid): [2008/06/30 13:38:10, 10] libsmb/smb_signing.c:get_sequence_for_reply(80) get_sequence_for_reply: found seq = 41 mid = 23 [2008/06/30 13:38:10, 10] libsmb/smb_signing.c:simple_packet_signature(270) simple_packet_signature: sequence number 41 [2008/06/30 13:38:10, 10] libsmb/smb_signing.c:client_check_incoming_message(419) client_check_incoming_message: seq 41: got good SMB signature of [2008/06/30 13:38:10, 10] lib/util.c:dump_data(2179) [000] AE ED 75 69 D2 DB B3 41...

I recently came into this troube, when i use some acl edit script to update ACL information for the files hosted in samba server, the winbind server suddenly got panic, the related log file looks like this: [2006/04/21 18:24:02, 10] libsmb/smb_signing.c:simple_packet_signature(270) simple_packet_signature: sequence number 5112 [2006/04/21 18:24:02, 10] libsmb/smb_signing.c:client_sign_outgoing_message(340) client_sign_outgoing_message: sent SMB signature of [2006/04/21 18:24:02, 10] lib/util.c:dump_data(2075) [000] 88 E6 84 4E 8C 53 3F 27...