SMB3 Session Setup

SMB3 Session Setup

[Steve French]

I noticed some odd differences between Samba 4 (current master) and
Windows 8 in SMB3 session setup handling (both fail for different
reasons at the moment from the linux cifs client, while smb2.1 works).

negotiate protocol to both (Samba and Windows 8) look similar.  In
this case I am requesting only one dialect smb3
session setup phase 1 (raw ntlmssp) looks similar.
three cases for session setup phase two
1) if bad password:  then I get STATUS_LOGON_FAILURE as expected
2) if good password (which worked with smb2.1) then to Samba server I
get Samba sending back a signed response (success), even though I
didn't ask for signing
3) if good password (which worked with smb2.1) then to Windows 8
server I get Windows 8 sending back an error response
"STATUS_USER_SESSION_DELETED"
Any idea what that error means?





-- 
Thanks,

Steve

Re: SMB3 Session Setup

[Jeremy Allison]

On Tue, Oct 02, 2012 at 11:39:46PM -0500, Steve French wrote:
> I noticed some odd differences between Samba 4 (current master) and
> Windows 8 in SMB3 session setup handling (both fail for different
> reasons at the moment from the linux cifs client, while smb2.1 works).
> 
> negotiate protocol to both (Samba and Windows 8) look similar.  In
> this case I am requesting only one dialect smb3
> session setup phase 1 (raw ntlmssp) looks similar.
> three cases for session setup phase two
> 1) if bad password:  then I get STATUS_LOGON_FAILURE as expected
> 2) if good password (which worked with smb2.1) then to Samba server I
> get Samba sending back a signed response (success), even though I
> didn't ask for signing

I think you're running into:

[Bug 9222] New: smbd ignores the "server signing = no" setting for SMB2.

https://bugzilla.samba.org/show_bug.cgi?id=9222

which I just fixed in master. Re-checkout the git
tree and try again.

> 3) if good password (which worked with smb2.1) then to Windows 8
> server I get Windows 8 sending back an error response
> "STATUS_USER_SESSION_DELETED"
> Any idea what that error means?

Crypto stuff has changed (again :-) ?

Jeremy.

Re: SMB3 Session Setup

[Stefan (metze) Metzmacher]

[-- Attachment #1: Type: text/plain, Size: 1397 bytes --]

Hi Steve,

> I noticed some odd differences between Samba 4 (current master) and
> Windows 8 in SMB3 session setup handling (both fail for different
> reasons at the moment from the linux cifs client, while smb2.1 works).
> 
> negotiate protocol to both (Samba and Windows 8) look similar.  In
> this case I am requesting only one dialect smb3
> session setup phase 1 (raw ntlmssp) looks similar.
> three cases for session setup phase two
> 1) if bad password:  then I get STATUS_LOGON_FAILURE as expected
> 2) if good password (which worked with smb2.1) then to Samba server I
> get Samba sending back a signed response (success), even though I
> didn't ask for signing

That is expected, the final session setup response is always signed,
if the session is not anonymous.

> 3) if good password (which worked with smb2.1) then to Windows 8
> server I get Windows 8 sending back an error response
> "STATUS_USER_SESSION_DELETED"
> Any idea what that error means?

I also got something like that, but I think only
I tried to negotiate SMB 2.1 against a Windows 2012 server.
(I think it's a bug in windows as it worked with Windows 2012 server RC).
And there's otherwise no difference.

However a Win 7 client seems to work. It uses some more advanced NTLMSSP
stuff, where even the final session setup response returns a blob.

Please include captures...

metze


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 259 bytes --]