samba-3.0.14a-r2, trying to mount Win2k3 share, error: cli_negprot: SMB signing is mandatory and we have disabled it. 29844: protocol negotiation failed SMB connection failed I'm trying to play with (as were adviced in bug #54640): client singing client use spnego but results are the same. smbclient - all's right, I can do everything with share, but the smbmount fails to mount. Reproducible: Always Steps to Reproduce: 1. smbmount //win2k3server/share /mnt/share -o username=user,password=pass Actual Results: error reported: cli_negprot: SMB signing is mandatory and we have disabled it. 29844: protocol negotiation failed SMB connection failed Expected Results: successful share win2000 server share mounting with smbmount is all right, if I try to mount win2003 server share with smbclient - it's all right, but smbmount with win2003 server share fails.
Gentoo Base System version 1.6.13 Portage 2.0.51.22-r3 (default-linux/x86/no-nptl/2.4, gcc-3.3.6, glibc-2.3.5-r2, 2.4.30-grsec-2.1.5 i686) ================================================================= System uname: 2.4.30-grsec-2.1.5 i686 Pentium III (Coppermine) dev-lang/python: 2.3.5-r2, 2.4.2 sys-apps/sandbox: 1.2.12 sys-devel/autoconf: 2.13, 2.59-r6 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 sys-devel/binutils: 2.15.92.0.2-r10 sys-devel/libtool: 1.4.3-r3, 1.5.20 virtual/os-headers: 2.4.22-r1 ACCEPT_KEYWORDS="" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-O3 -march=pentium3 -fomit-frame-pointer" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb /var/bind" CONFIG_PROTECT_MASK="/etc/terminfo /usr/X11R6/bin/startx /etc/env.d" CXXFLAGS="-O3 -march=pentium3 -fomit-frame-pointer" DISTDIR="/usr/portage/distfiles" FEATURES="distlocks sandbox" GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/Linux/distributions/gentoo" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="mmx pam sse ssl tcpd" Unset: ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTDIR_OVERLAY *** This bug has been marked as a duplicate of 54640 ***
bug #54640 returned on samba 3.0.14a-r2
*** This bug has been marked as a duplicate of 54640 ***
*** Bug 54640 has been marked as a duplicate of this bug. ***
continuing here: bug #54640 had a slightly different reason for this bug
Info collection: your client: linux kernel is 2.4.x, with grsec your server: win2k3 server (probably PDC, possibly ADS) your protocol: smbfs The error seems to be "not a bug, but a feature" (Bill's Statement of Rights (TM)) server side: you can play with policy editor and registry keys, but I'm not very confident on this, provided its security implications [3] and these considerations: client side: kernel smbfs API is a bit outdated (last year improvements were made on 2.6.x: 2.4 VFS layer doesn't support many features by design). This is anyway not the killer answer, since: protocol involved: this is a known flag of smbfs vs cifs debate. CIFS is the filesystem of choice where speaking with win2k3 ([1] and [2]) and XP sp2 or better. smbfs is simply not designed to support these type of authentication: your vendor of choice (Ms, that is) changed in various occasions the protocol API of its network services, and in some cases the fallback behaviours are discarded. Long thing short: lower your server security settings, or better CIFS and updated VFS api (maybe your kernel version suffices) 'man mount; mount -t cifs //srv/share /mnt/point -o ...' To me, this bug marks as WONTFIX and innocent, unless the accuse provides more proofs :-) [1] http://lists.samba.org/archive/samba/2003-December/076388.html (Andrew Bartlett is one of the core same devs) [2] http://lists.samba.org/archive/samba/2005-March/102460.html [3] http://wiki.colinux.org/cgi-bin/AccessingWindowsDrivesWithSamba
This works for me w/ CIFS (and 2.6 kernel); getting it work with smbfs *requires* tweaking of security settings on server side (not really worth the hassle, honestly). I'd say - WONTFIX or UPSTREAM.
no news, so closing