Arch Linux

dalu

Member

Registered: 2014-04-16

Posts: 96

Accessing smb via nemo aka gvfsd smb_signing_good: BAD SIG: seq 1

I've been in another country for 1 1/2 years and returned.

In the other country I had a laptop with arch on it and connected to home via vpn and accessed the smb shares of an old "Medion Lifebook" via nemo/gvfsd.
I had an issue where I could not access the share and I resolved the issue, somehow.

I remember there was an issue before and I had to edit /etc/samba/smb.conf
to

[global]
client min protocol = NT1

Since power in the, now, remote location is turned off I can't access the laptop there and can't backtrack to what I did there.

I do have the line from above in my smb.conf

I can't modify the smb.conf of the server.

The solution is to disable signature checking.

gensec_update_send: ntlmssp[0x7f5e58021ee0]: subreq: 0x7f5e58065820
gensec_update_send: spnego[0x7f5e5805dc60]: subreq: 0x7f5e58068f10
gensec_update_done: ntlmssp[0x7f5e58021ee0]: NT_STATUS_OK tevent_req[0x7f5e58065820/../../auth/ntlmssp/ntlmssp.c:180]: state[2] error[0 (0x0)]  state[struct gensec_ntlmssp_update_state (0x7f5e580659e0)] timer[(nil)] finish[../../auth/ntlmssp/ntlmssp.c:222]
gensec_update_done: spnego[0x7f5e5805dc60]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x7f5e58068f10/../../auth/gensec/spnego.c:1631]: state[2] error[0 (0x0)]  state[struct gensec_spnego_update_state (0x7f5e580690d0)] timer[(nil)] finish[../../auth/gensec/spnego.c:2116]
smb_signing_sign_pdu: sent SMB signature of
[0000] 42 53 52 53 50 59 4C 20                             BSRSPYL  
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x62088215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
  NTLMSSP_NEGOTIATE_VERSION
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
dump_arc4_state: NTLMSSP send seal arc4 state:

dump_arc4_state: NTLMSSP recv seal arc4 state:

gensec_update_send: spnego[0x7f5e5805dc60]: subreq: 0x7f5e5806d4b0
gensec_update_done: spnego[0x7f5e5805dc60]: NT_STATUS_OK tevent_req[0x7f5e5806d4b0/../../auth/gensec/spnego.c:1631]: state[2] error[0 (0x0)]  state[struct gensec_spnego_update_state (0x7f5e5806d670)] timer[(nil)] finish[../../auth/gensec/spnego.c:2116]
smb_signing_activate: user_session_key
[0000] CF 90 9E CE 46 21 E8 23   7D B6 83 EB 90 00 72 47   ....F!.# }.....rG
smb_signing_activate: NULL response_data
smb_signing_md5: sequence number 1
smb_signing_check_pdu: BAD SIG: wanted SMB signature of
[0000] 11 F1 CD 6C 89 52 ED 9C                             ...l.R.. 
smb_signing_check_pdu: BAD SIG: got SMB signature of
[0000] 00 00 00 00 00 00 00 00                             ........ 
smb_signing_md5: sequence number 4294967292
smb_signing_md5: sequence number 4294967293
smb_signing_md5: sequence number 4294967294
smb_signing_md5: sequence number 4294967295
smb_signing_md5: sequence number 0
smb_signing_md5: sequence number 1
smb_signing_md5: sequence number 2
smb_signing_md5: sequence number 3
smb_signing_md5: sequence number 4
smb_signing_md5: sequence number 5
smb_signing_good: BAD SIG: seq 1
SPNEGO login failed: {Access Denied} A process has requested access to an object but has not been granted those access rights.
smb: do_mount - [smb://dalu0/mylibrary; 3] res = -1, cancelled = 0, errno = [1] 'Operation not permitted' 
smb: do_mount - try #4 
smbc_stat(smb://dalu0/mylibrary)
smb: auth_callback - normal pass
smb: auth_callback - asking for password...

How do I disable signature checking for gvfsd?