I will spend more time later tonight/tomorrow but it could be related to cifs client not using Target received in NTLMSSP Challenge response from the server (since the bit Target Type Domain in flags is set) while constructing NTLMSSP Authenticate message. Just a guess.
On Mon, Jan 20, 2014 at 11:34 AM, Amit Haval (India Bangalore) <[email protected]> wrote: > Adding nic-dl... > > -----Original Message----- > From: Shirish Pargaonkar [mailto:[email protected]] > Sent: Monday, January 20, 2014 9:24 PM > To: Ben Greear > Cc: linux-cifs; Amit Haval (India Bangalore) > Subject: Re: Problem with connecting to SMB server in 3.9.11 kernel. > > yes, this looks like a authentication failure. > It probably is a NetApp server. Can any other client (e.g. Windows, > smbclient etc.) authenticate using ntlmv2/ntlmssp to this server? > > SMB servers do not typically point_out/log what part of the request is > invalid, so it is little harder to figure out how the request is incorrect. > > > On Sat, Jan 18, 2014 at 11:17 AM, Ben Greear <[email protected]> wrote: >> Hello! >> >> A customer reported problems connecting our CIFS traffic generation >> test gear to their SMB server. >> We are using the 3.9.11+ kernel, and though it is patched, we do not >> have any patches to cifs. >> >> The OS is Fedora 14, 64-bit. >> >> A similar system on Fedora 14, with a 3.7.10+ kernel was working, but >> when we tried the 3.7.10+ kernel on the broken machine, it also failed to >> work. >> So, it could be the SMB server itself is having issues. (In the >> 3.7.10+ failure, the server just failed to respond after "Setup andX >> Request AUTH message", though we did get the TCP ack so it looks like >> the message was received by the >> server.) >> >> I'm attaching a capture taken on the SMB server. >> >> From looking at this page: >> >> http://msdn.microsoft.com/en-us/library/ff469913.aspx >> >> It appears the problem (STATUS_UNSUCCESSFUL) is: >> >> "The size of the extended attribute list is not correct. Check the >> EaErrorOffset field for the address of the SMB_GEA structure at which >> the error was detected." >> >> I did not see anything about extended attribute list in the capture, >> but if someone else with more knowledge could take a look and see if >> they notice any problems I would be grateful. >> >> Thanks! >> Ben >> >> -- >> Ben Greear <[email protected]> >> Candela Technologies Inc http://www.candelatech.com >> > > ______________________________________________________________________ > This email has been scanned by the Boundary Defense for Email Security > System. For more information please visit > http://www.apptix.com/email-security/antispam-virus > ______________________________________________________________________ > > ______________________________________________________________________ > This email has been scanned by the Boundary Defense for Email Security > System. For more information please visit > http://www.apptix.com/email-security/antispam-virus > ______________________________________________________________________ -- To unsubscribe from this list: send the line "unsubscribe linux-cifs" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
