[Bug 656112] New: Samba client packet signature check error
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c0 Summary: Samba client packet signature check error Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: x86-64 OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Samba AssignedTo: samba-maintainers@SuSE.de ReportedBy: mail@andreas-demmer.de QAContact: samba-maintainers@SuSE.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:2.0b7) Gecko/20100101 Firefox/4.0b7 When I copy a file to a network share of a Microsoft Windows server, which requires packet signing (Microsoft network server: Digitally sign communications = Enabled), copying fails and only 32KB of file copied. This happens with kio_smb and KDE 4.x, but also with smbclient and is therefore caused by Samba. Samba debug option shows the following error: "SMB Signature verification failed on incoming packet!" Reproducible: Always Steps to Reproduce: 1. Turn on mandatory packet signing on windows server (Microsoft network server: Digitally sign communications (always) = Enabled in security policy/security options). 2. Mount windows shares using fusesmb -o large_read,big_writes or connect to share via dolphin. 3. Try to copy file (size > 32KB) to share. Actual Results: Error occured and only 32KB of file were copied. Expected Results: File should be copied successfully. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c David Disseldorp <ddiss@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ddiss@novell.com, | |samba-maintainers@SuSE.de AssignedTo|samba-maintainers@SuSE.de |ddiss@novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c1 David Disseldorp <ddiss@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |mail@andreas-demmer.de --- Comment #1 from David Disseldorp <ddiss@novell.com> 2010-11-29 12:35:49 UTC --- Thanks for the report Andreas. Which Microsoft Windows Server version are you using? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c2 Andreas Demmer <mail@andreas-demmer.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW CC| |mail@andreas-demmer.de InfoProvider|mail@andreas-demmer.de | --- Comment #2 from Andreas Demmer <mail@andreas-demmer.de> 2010-11-29 12:40:35 UTC --- Microsoft Windows Server 2008 Standard. Thx for engaging! Please do not hesitate to ask for more details if needed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c3 --- Comment #3 from David Disseldorp <ddiss@novell.com> 2010-11-29 13:54:09 UTC --- OK, I'm able to reproduce this using dolphin however with smbclient the signed transfer completes successfully: ddiss@d115:~> smbclient -S off -U'LURCH\Administrator' //nue-lurch-1.lurch.suse.de/Home Enter LURCH\Administrator's password: cli_negprot: SMB signing is mandatory and we have disabled it. protocol negotiation failed: NT_STATUS_ACCESS_DENIED ddiss@d115:~> smbclient -S on -U'LURCH\Administrator' //nue-lurch-1.lurch.suse.de/Home Enter LURCH\Administrator's password: Domain=[LURCH] OS=[Windows Server (R) 2008 Enterprise 6002 Service Pack 2] Server=[Windows Server (R) 2008 Enterprise 6.0] smb: \> put 1mfile putting file 1mfile as \1mfile (10556.7 kb/s) (average 10556.7 kb/s) smb: \> ls 1mfile 1mfile A 1048576 Tue Nov 30 00:50:36 2010 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c4 --- Comment #4 from Andreas Demmer <mail@andreas-demmer.de> 2010-11-29 14:26:45 UTC --- Ah, indeed the copying with smbclient works, I must have done sth. wrong during my tests. But copying with kio_smb and dolphin still fails. So maybe you should reassign the bug to the KDE dolphin team? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c5 David Disseldorp <ddiss@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|ddiss@novell.com |kde-maintainers@suse.de Summary|Samba client packet |Dolphin fails to copy files |signature check error |to CIFS servers with SMB | |signatures enabled --- Comment #5 from David Disseldorp <ddiss@novell.com> 2010-11-29 14:38:27 UTC --- (In reply to comment #4)
But copying with kio_smb and dolphin still fails. So maybe you should reassign the bug to the KDE dolphin team?
Assigning to KDE guys for now. I don't mind taking a look if someone can point me at the KDE src / package that implements CIFS client behaviour. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c6 --- Comment #6 from David Disseldorp <ddiss@novell.com> 2010-11-29 14:48:38 UTC --- One further comment, Windows Active Directory domain controllers have SMB signatures enabled by default. This bug likely effects quite a few people. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c7 --- Comment #7 from Andreas Demmer <mail@andreas-demmer.de> 2010-11-30 12:24:51 UTC --- @David: Heres the package: ademmer@envy:~> rpm -q --whatprovides /usr/lib64/kde4/kio_smb.so kdebase4-runtime-4.5.80-258.1.x86_64 Is this of any use for you? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c8 David Disseldorp <ddiss@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |mail@andreas-demmer.de AssignedTo|kde-maintainers@suse.de |ddiss@novell.com --- Comment #8 from David Disseldorp <ddiss@novell.com> 2010-11-30 14:26:21 UTC --- So turns out the problem for this one is in libsmbclient. The good news is Jeremy has already fixed it with: 0afb2995a2177afa2eb7b8f99887a39cdaf23a15 Fix bug #7791 - gvfsd-smb (Gnome vfs) fails to copy files from a SMB share using SMB signing. ac0ffba004160693ea5829775d732146ef261c47 Add test that detects problems in the SMB signing code when run through cli_write() (which doesn't use the new async methods). Please try the new libsmbclient RPM at: http://download.opensuse.org/repositories/home:/dmdiss:/branches:/network:/s... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c9 Andreas Demmer <mail@andreas-demmer.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|mail@andreas-demmer.de | --- Comment #9 from Andreas Demmer <mail@andreas-demmer.de> 2010-11-30 15:11:03 UTC --- I can confirm that it is working with the libsmbclient version from the repository above! I upgraded: libsmbclient0 openSUSE -> obs://build.opensuse.org/home:dmdiss:branches:network:samba:656112 libsmbclient0-32bit openSUSE -> obs://build.opensuse.org/home:dmdiss:branches:network:samba:656112 libsmbclient-devel openSUSE -> obs://build.opensuse.org/home:dmdiss:branches:network:samba:656112 When will the versions hit the official repos? Just in case that the OBS repo will be killed later... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c12 David Disseldorp <ddiss@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution| |FIXED --- Comment #12 from David Disseldorp <ddiss@novell.com> 2010-12-01 15:53:18 UTC --- (In reply to comment #9)
I can confirm that it is working with the libsmbclient version from the repository above! I upgraded:
Glad to hear, thanks for testing.
When will the versions hit the official repos? Just in case that the OBS repo will be killed later...
The fix is now available from the STABLE samba build repository at: http://download.opensuse.org/repositories/network:/samba:/STABLE/ -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c13 Volker Barth <volker.barth@ltm.uni-erlangen.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |volker.barth@ltm.uni-erlang | |en.de --- Comment #13 from Volker Barth <volker.barth@ltm.uni-erlangen.de> 2011-01-12 12:42:41 UTC --- Are there any plans to upload these patches to the official 11.3 update repo? And if so when? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c14 David Disseldorp <ddiss@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |axel.braun@gmx.de --- Comment #14 from David Disseldorp <ddiss@novell.com> 2011-01-13 14:28:20 UTC --- *** Bug 664243 has been marked as a duplicate of this bug. *** http://bugzilla.novell.com/show_bug.cgi?id=664243 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c15 --- Comment #15 from David Disseldorp <ddiss@novell.com> 2011-01-13 14:49:02 UTC --- (In reply to comment #13)
Are there any plans to upload these patches to the official 11.3 update repo? And if so when?
Yes, we intend to publish the fix in the official OpenSUSE 11.3 repository this month. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c16 Lars Müller <lmuelle@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |REOPENED Resolution|FIXED | --- Comment #16 from Lars Müller <lmuelle@novell.com> 2011-01-25 10:39:43 CET --- Reopen to start maintenance work flow communication. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c17 Lars Müller <lmuelle@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |NEEDINFO InfoProvider| |maintenance@opensuse.org --- Comment #17 from Lars Müller <lmuelle@novell.com> 2011-01-25 10:42:51 CET --- We like to publish the openSUSE Build Service submit request 59082 to openSUSE 11.3 as several issues got fixed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c18 --- Comment #18 from Marcus Meissner <meissner@novell.com> 2011-01-26 16:54:58 UTC --- if you are confident with the fixes, I am to... +1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c19 Swamp Workflow Management <swamp@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard| |maint:running:38443:low --- Comment #19 from Swamp Workflow Management <swamp@suse.com> 2011-01-27 17:12:45 UTC --- The SWAMPID for this issue is 38443. This issue was rated as low. Please submit fixed packages until 2011-02-24. Also create a patchinfo file using this link: https://swamp.suse.de/webswamp/wf/38443 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c20 --- Comment #20 from Lars Müller <lmuelle@novell.com> 2011-01-31 14:10:14 CET --- http://download.opensuse.org/pub/opensuse/update/11.3-test/ got the fix. Please test and provide feedback if these Samba packages fix the issue for you. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c21 Christian Dengler <cdengler@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |REOPENED CC| |cdengler@novell.com InfoProvider|maintenance@opensuse.org | --- Comment #21 from Christian Dengler <cdengler@novell.com> 2011-02-02 17:35:00 UTC --- update process was triggered, so removing NEEDINFO maintenance ;-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c22 Swamp Workflow Management <swamp@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:38443:low |maint:running:38443:low | |maint:released:11.3:38486 --- Comment #22 from Swamp Workflow Management <swamp@suse.com> 2011-02-09 17:55:30 UTC --- Update released for: cifs-mount, ldapsmb, libldb-devel, libldb0, libldb0-debuginfo, libnetapi-devel, libnetapi0, libnetapi0-debuginfo, libsmbclient, libsmbclient-devel, libsmbclient0, libsmbclient0-debuginfo, libsmbsharemodes, libsmbsharemodes-devel, libsmbsharemodes0, libsmbsharemodes0-debuginfo, libtalloc-devel, libtalloc2, libtalloc2-debuginfo, libtdb-devel, libtdb1, libtdb1-debuginfo, libtevent-devel, libtevent0, libtevent0-debuginfo, libwbclient-devel, libwbclient0, libwbclient0-debuginfo, samba, samba-client, samba-client-debuginfo, samba-debuginfo, samba-debugsource, samba-devel, samba-doc, samba-krb-printing, samba-krb-printing-debuginfo, samba-winbind, samba-winbind-debuginfo Products: openSUSE 11.3 (debug, i586, x86_64) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c Swamp Workflow Management <swamp@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:38443:low |. |maint:released:11.3:38486 | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=656112 https://bugzilla.novell.com/show_bug.cgi?id=656112#c23 David Disseldorp <ddiss@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |CLOSED Resolution| |FIXED --- Comment #23 from David Disseldorp <ddiss@novell.com> 2011-02-10 16:02:42 UTC --- Fix released. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com