Re: [linux-cifs-client] Linux CIFS NTLMSSP mount failing against win2k8

Andrew Bartlett <[email protected]> Tue, 29 Jun 2010 09:25:20 +1000
Newsgroups gmane.network.samba.internals,gmane.linux.file-systems.cifs
Message-ID <1277767520.2276.41.camel@ruth>
--=-6t39tPEjMX2rHL9njVrV
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Mon, 2010-06-28 at 17:47 -0500, Shirish Pargaonkar wrote:

> When I look at Windows - Windows smb2 traces, the (16 bytes) signature
> looks nothing like
> version (which is 1), ciphertext of 8 bytes of hmac-md5, sequence number

SMB2 SMB Signing does not use the NTLMSSP packet signing algorithm.
Instead, like SMB, it takes the session key already calculated and
applies a unique-to-SMB2 algorithm to it.  This involves sha256 I
think. =20

Andrew Bartlett

--=20
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

--=-6t39tPEjMX2rHL9njVrV
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iD8DBQBMKS9gz4A8Wyi0NrsRAhn3AJ4i/Esaixg1Lkc7ZziRFmiEPgxAHwCcCFmD
DcE39fP1S7WnI1tLXOBSksw=
=/r1y
-----END PGP SIGNATURE-----

--=-6t39tPEjMX2rHL9njVrV--