OpenSolaris

Printable Version Enter a New Search
Bug ID 6753251
Synopsis server signing: wrong signature is generated for the NetShareEnum reply
State 10-Fix Delivered (Fix available in build)
Category:Subcategory kernel:cifs
Keywords
Responsible Engineer Natalie Li
Reported Against snv_96 , snv_98
Duplicate Of
Introduced In solaris_nevada
Commit to Fix snv_103
Fixed In snv_103
Release Fixed solaris_nevada(snv_103)
Related Bugs 6582158 , 6750230
Submit Date 26-September-2008
Last Update Date 19-November-2008
Description
While requesting share enumeration, Solaris CIFS client dectects invalid signature in the NetEnumShare reply sent by the Solaris CIFS server.
In cifs server side(firekey.prc.sun.com;root password:l1admin),I set the
signing parameter as "signing=required".

bash-3.2# more /etc/motd
Sun Microsystems Inc. SunOS 5.11 gate-hg Sep. 13, 2008
SunOS Internal Development: gwr 2008-09-13 [gate-hg]
bfu'ed from /net/sekhmet.east/export/smbfs/gate-hg/archives/i386/sign1
on 2008-09-17
Sun Microsystems Inc. SunOS 5.11 snv_95 January 2008
bash-3.2# svcs -a|grep smb
online Sep_17 svc:/network/smb/client:default
online 11:19:24 svc:/network/smb/server:default
bash-3.2# sharectl get smb
system_comment=
max_workers=64
netbios_scope=
lmauth_level=4
keep_alive=5400
wins_server_1=
wins_server_2=
wins_exclude=
signing_enabled=true
signing_required=true
restrict_anonymous=false
pdc=
ads_site=
ddns_enable=false
autohome_map=/etc
bash-3.2# sharemgr show
default
zfs
cifsclient
/export/public
/export/a_share
/export/b_share

In cifs client side(ironcore.prc.sun.com;root password:l1admin),I set the signing parameter as "signing=required"

bash-3.2# more /etc/motd
Sun Microsystems Inc. SunOS 5.11 gate-hg Sep. 13, 2008
SunOS Internal Development: gwr 2008-09-13 [gate-hg]
bfu'ed from /net/sekhmet.east/export/smbfs/gate-hg/archives/i386/sign1
on 2008-09-17
Sun Microsystems Inc. SunOS 5.11 snv_86 January 2008
bash-3.2# sharectl set -p section=default -p signing=required smbfs
bash-3.2# sharectl get smbfs
[default]
signing=required
bash-3.2# mount -F smbfs //cifs_user:cifs_use@firekey/public /export/mnt
bash-3.2# smbutil view //cifs_user:cifs_use@firekey
Share Type Comment
-------------------------------
smbutil: unable to list resources: syserr = remote call failed
Work Around
N/A
Comments
Verification of this fix is simple:
1: Ensure that SMB signing is in use by putting
   these two lines in the test user's .nsmbrc file
	[default]
	signing=required
2: Run the command: smbutil view //user@server

Before this fix, the smbutil command would fail
with an error: remote call failed.
After the fix, you see the share list.