While requesting share enumeration, Solaris CIFS client dectects invalid signature in the NetEnumShare reply sent by the Solaris CIFS server.
In cifs server side(firekey.prc.sun.com;root password:l1admin),I set the
signing parameter as "signing=required".
bash-3.2# more /etc/motd
Sun Microsystems Inc. SunOS 5.11 gate-hg Sep. 13, 2008
SunOS Internal Development: gwr 2008-09-13 [gate-hg]
bfu'ed from /net/sekhmet.east/export/smbfs/gate-hg/archives/i386/sign1
on 2008-09-17
Sun Microsystems Inc. SunOS 5.11 snv_95 January 2008
bash-3.2# svcs -a|grep smb
online Sep_17 svc:/network/smb/client:default
online 11:19:24 svc:/network/smb/server:default
bash-3.2# sharectl get smb
system_comment=
max_workers=64
netbios_scope=
lmauth_level=4
keep_alive=5400
wins_server_1=
wins_server_2=
wins_exclude=
signing_enabled=true
signing_required=true
restrict_anonymous=false
pdc=
ads_site=
ddns_enable=false
autohome_map=/etc
bash-3.2# sharemgr show
default
zfs
cifsclient
/export/public
/export/a_share
/export/b_share
In cifs client side(ironcore.prc.sun.com;root password:l1admin),I set the signing parameter as "signing=required"
bash-3.2# more /etc/motd
Sun Microsystems Inc. SunOS 5.11 gate-hg Sep. 13, 2008
SunOS Internal Development: gwr 2008-09-13 [gate-hg]
bfu'ed from /net/sekhmet.east/export/smbfs/gate-hg/archives/i386/sign1
on 2008-09-17
Sun Microsystems Inc. SunOS 5.11 snv_86 January 2008
bash-3.2# sharectl set -p section=default -p signing=required smbfs
bash-3.2# sharectl get smbfs
[default]
signing=required
bash-3.2# mount -F smbfs //cifs_user:cifs_use@firekey/public /export/mnt
bash-3.2# smbutil view //cifs_user:cifs_use@firekey
Share Type Comment
-------------------------------
smbutil: unable to list resources: syserr = remote call failed
Work Around
N/A
Comments
Verification of this fix is simple:
1: Ensure that SMB signing is in use by putting
these two lines in the test user's .nsmbrc file
[default]
signing=required
2: Run the command: smbutil view //user@server
Before this fix, the smbutil command would fail
with an error: remote call failed.
After the fix, you see the share list.