[Pkg-samba-maint] Bug#883939: smbclient failing to connect with default protocol SMB3_11

Matthew Foulkes m.foulkes at blueyonder.co.uk
Sat Dec 9 17:58:03 UTC 2017


Package: smbclient
Version: 2:4.7.3+dfsg-1
Severity: important

Dear Maintainer,

Today, for the first time for years, I tried to use smbclient 
to access files on a Windows file server at work. After 
discovering that the Thunar file manager was unable to connect,
I tried smbclient. The command

  smbclient -d 10 -W IC -U wmcfoulkes //icnas2.cc.ic.ac.uk/wmcfoulkes

failed with the error message

  protocol negotiation failed: NT_STATUS_INVALID_NETWORK_RESPONSE

as did:

  smbclient -m SMB3 -d 10 -W IC -U wmcfoulkes //icnas2.cc.ic.ac.uk/wmcfoulkes
  smbclient -m SMB3_11 -d 10 -W IC -U wmcfoulkes //icnas2.cc.ic.ac.uk/wmcfoulkes

Specifying "-m SMB3_10" or any lower protocol version on the command
line solved the problem. Setting "client max protocol = SMB3_10" in
/etc/samba/smb.conf fixed Thunar too.

It is possible that the Windows server (to which I do not have 
access) does not support SMB3_11, but I would have expected 
automatic negotiation to a lower protocol version to work.

I have attached the logs obtained when smbclient is run with
"-d 10 -m SMB3_11" and "-d 10 -m SMB3_10".

Best wishes, Matthew

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.13.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages smbclient depends on:
ii  dpkg          1.19.0.4
ii  libarchive13  3.2.2-3.1
ii  libbsd0       0.8.6-3
ii  libc6         2.25-3
ii  libpopt0      1.16-10+b2
ii  libreadline7  7.0-3
ii  libsmbclient  2:4.7.3+dfsg-1
ii  libtalloc2    2.1.10-2
ii  libtevent0    0.9.34-1
ii  samba-common  2:4.7.3+dfsg-1
ii  samba-libs    2:4.7.3+dfsg-1

smbclient recommends no packages.

Versions of packages smbclient suggests:
pn  cifs-utils       <none>
pn  heimdal-clients  <none>

-- no debconf information
-------------- next part --------------
INFO: Current debug levels:
  all: 10
  tdb: 10
  printdrivers: 10
  lanman: 10
  smb: 10
  rpc_parse: 10
  rpc_srv: 10
  rpc_cli: 10
  passdb: 10
  sam: 10
  auth: 10
  winbind: 10
  vfs: 10
  idmap: 10
  quota: 10
  acls: 10
  locking: 10
  msdfs: 10
  dmapi: 10
  registry: 10
  scavenger: 10
  dns: 10
  ldb: 10
  tevent: 10
  auth_audit: 10
  auth_json_audit: 10
  kerberos: 10
  drs_repl: 10
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
  all: 10
  tdb: 10
  printdrivers: 10
  lanman: 10
  smb: 10
  rpc_parse: 10
  rpc_srv: 10
  rpc_cli: 10
  passdb: 10
  sam: 10
  auth: 10
  winbind: 10
  vfs: 10
  idmap: 10
  quota: 10
  acls: 10
  locking: 10
  msdfs: 10
  dmapi: 10
  registry: 10
  scavenger: 10
  dns: 10
  ldb: 10
  tevent: 10
  auth_audit: 10
  auth_json_audit: 10
  kerberos: 10
  drs_repl: 10
Processing section "[global]"
doing parameter workgroup = WORKGROUP
doing parameter dns proxy = no
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 1000
doing parameter syslog = 0
WARNING: The "syslog" option is deprecated
doing parameter panic action = /usr/share/samba/panic-action %d
doing parameter server role = standalone server
doing parameter passdb backend = tdbsam
doing parameter obey pam restrictions = yes
doing parameter unix password sync = yes
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
doing parameter pam password change = yes
doing parameter map to guest = bad user
doing parameter usershare allow guests = yes
pm_process() returned Yes
lp_servicenumber: couldn't find homes
added interface enp0s25 ip=192.168.1.34 bcast=192.168.1.255 netmask=255.255.255.0
Netbios name list:-
my_netbios_names[0]="BEE"
Client started (version 4.7.3-Debian).
Opening cache file at /var/cache/samba/gencache.tdb
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: No such file or directory
Attempt to open gencache.tdb has failed.
sitename_fetch: No stored sitename for realm ''
internal_resolve_name: looking up icnas2.cc.ic.ac.uk#20 (sitename (null))
Opening cache file at /var/cache/samba/gencache.tdb
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: No such file or directory
Attempt to open gencache.tdb has failed.
no entry for icnas2.cc.ic.ac.uk#20 found.
resolve_hosts: Attempting host lookup for name icnas2.cc.ic.ac.uk<0x20>
remove_duplicate_addrs2: looking for duplicate address/port pairs
namecache_store: storing 2 addresses for icnas2.cc.ic.ac.uk#20: [2001:630:12:602::105],155.198.30.105
Opening cache file at /var/cache/samba/gencache.tdb
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: No such file or directory
Attempt to open gencache.tdb has failed.
internal_resolve_name: returning 2 addresses: 2001:630:12:602::105:0 155.198.30.105:0 
Connecting to 2001:630:12:602::105 at port 445
E2BIG: convert_string(UTF-8,CP850): srclen=19 destlen=16 - 'ICNAS2.CC.IC.AC.UK'
Connecting to 2001:630:12:602::105 at port 139
Connecting to 155.198.30.105 at port 445
E2BIG: convert_string(UTF-8,CP850): srclen=19 destlen=16 - 'ICNAS2.CC.IC.AC.UK'
Connecting to 155.198.30.105 at port 139
Socket options:
	SO_KEEPALIVE = 0
	SO_REUSEADDR = 0
	SO_BROADCAST = 0
	TCP_NODELAY = 1
	TCP_KEEPCNT = 9
	TCP_KEEPIDLE = 7200
	TCP_KEEPINTVL = 75
	IPTOS_LOWDELAY = 0
	IPTOS_THROUGHPUT = 0
	SO_REUSEPORT = 0
	SO_SNDBUF = 46080
	SO_RCVBUF = 369280
	SO_SNDLOWAT = 1
	SO_RCVLOWAT = 1
	SO_SNDTIMEO = 0
	SO_RCVTIMEO = 0
	TCP_QUICKACK = 1
	TCP_DEFER_ACCEPT = 0
 session request ok
protocol negotiation failed: NT_STATUS_INVALID_NETWORK_RESPONSE
-------------- next part --------------
INFO: Current debug levels:
  all: 10
  tdb: 10
  printdrivers: 10
  lanman: 10
  smb: 10
  rpc_parse: 10
  rpc_srv: 10
  rpc_cli: 10
  passdb: 10
  sam: 10
  auth: 10
  winbind: 10
  vfs: 10
  idmap: 10
  quota: 10
  acls: 10
  locking: 10
  msdfs: 10
  dmapi: 10
  registry: 10
  scavenger: 10
  dns: 10
  ldb: 10
  tevent: 10
  auth_audit: 10
  auth_json_audit: 10
  kerberos: 10
  drs_repl: 10
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
  all: 10
  tdb: 10
  printdrivers: 10
  lanman: 10
  smb: 10
  rpc_parse: 10
  rpc_srv: 10
  rpc_cli: 10
  passdb: 10
  sam: 10
  auth: 10
  winbind: 10
  vfs: 10
  idmap: 10
  quota: 10
  acls: 10
  locking: 10
  msdfs: 10
  dmapi: 10
  registry: 10
  scavenger: 10
  dns: 10
  ldb: 10
  tevent: 10
  auth_audit: 10
  auth_json_audit: 10
  kerberos: 10
  drs_repl: 10
Processing section "[global]"
doing parameter workgroup = WORKGROUP
doing parameter dns proxy = no
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 1000
doing parameter syslog = 0
WARNING: The "syslog" option is deprecated
doing parameter panic action = /usr/share/samba/panic-action %d
doing parameter server role = standalone server
doing parameter passdb backend = tdbsam
doing parameter obey pam restrictions = yes
doing parameter unix password sync = yes
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
doing parameter pam password change = yes
doing parameter map to guest = bad user
doing parameter usershare allow guests = yes
pm_process() returned Yes
lp_servicenumber: couldn't find homes
added interface enp0s25 ip=192.168.1.34 bcast=192.168.1.255 netmask=255.255.255.0
Netbios name list:-
my_netbios_names[0]="BEE"
Client started (version 4.7.3-Debian).
Opening cache file at /var/cache/samba/gencache.tdb
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: No such file or directory
Attempt to open gencache.tdb has failed.
sitename_fetch: No stored sitename for realm ''
internal_resolve_name: looking up icnas2.cc.ic.ac.uk#20 (sitename (null))
Opening cache file at /var/cache/samba/gencache.tdb
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: No such file or directory
Attempt to open gencache.tdb has failed.
no entry for icnas2.cc.ic.ac.uk#20 found.
resolve_hosts: Attempting host lookup for name icnas2.cc.ic.ac.uk<0x20>
remove_duplicate_addrs2: looking for duplicate address/port pairs
namecache_store: storing 2 addresses for icnas2.cc.ic.ac.uk#20: [2001:630:12:602::105],155.198.30.105
Opening cache file at /var/cache/samba/gencache.tdb
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: No such file or directory
Attempt to open gencache.tdb has failed.
internal_resolve_name: returning 2 addresses: 2001:630:12:602::105:0 155.198.30.105:0 
Connecting to 2001:630:12:602::105 at port 445
E2BIG: convert_string(UTF-8,CP850): srclen=19 destlen=16 - 'ICNAS2.CC.IC.AC.UK'
Connecting to 2001:630:12:602::105 at port 139
Connecting to 155.198.30.105 at port 445
E2BIG: convert_string(UTF-8,CP850): srclen=19 destlen=16 - 'ICNAS2.CC.IC.AC.UK'
Connecting to 155.198.30.105 at port 139
Socket options:
	SO_KEEPALIVE = 0
	SO_REUSEADDR = 0
	SO_BROADCAST = 0
	TCP_NODELAY = 1
	TCP_KEEPCNT = 9
	TCP_KEEPIDLE = 7200
	TCP_KEEPINTVL = 75
	IPTOS_LOWDELAY = 0
	IPTOS_THROUGHPUT = 0
	SO_REUSEPORT = 0
	SO_SNDBUF = 46080
	SO_RCVBUF = 369280
	SO_SNDLOWAT = 1
	SO_RCVLOWAT = 1
	SO_SNDTIMEO = 0
	SO_RCVTIMEO = 0
	TCP_QUICKACK = 1
	TCP_DEFER_ACCEPT = 0
 session request ok
protocol negotiation failed: NT_STATUS_INVALID_NETWORK_RESPONSE
INFO: Current debug levels:
  all: 10
  tdb: 10
  printdrivers: 10
  lanman: 10
  smb: 10
  rpc_parse: 10
  rpc_srv: 10
  rpc_cli: 10
  passdb: 10
  sam: 10
  auth: 10
  winbind: 10
  vfs: 10
  idmap: 10
  quota: 10
  acls: 10
  locking: 10
  msdfs: 10
  dmapi: 10
  registry: 10
  scavenger: 10
  dns: 10
  ldb: 10
  tevent: 10
  auth_audit: 10
  auth_json_audit: 10
  kerberos: 10
  drs_repl: 10
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
  all: 10
  tdb: 10
  printdrivers: 10
  lanman: 10
  smb: 10
  rpc_parse: 10
  rpc_srv: 10
  rpc_cli: 10
  passdb: 10
  sam: 10
  auth: 10
  winbind: 10
  vfs: 10
  idmap: 10
  quota: 10
  acls: 10
  locking: 10
  msdfs: 10
  dmapi: 10
  registry: 10
  scavenger: 10
  dns: 10
  ldb: 10
  tevent: 10
  auth_audit: 10
  auth_json_audit: 10
  kerberos: 10
  drs_repl: 10
Processing section "[global]"
doing parameter workgroup = WORKGROUP
doing parameter dns proxy = no
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 1000
doing parameter syslog = 0
WARNING: The "syslog" option is deprecated
doing parameter panic action = /usr/share/samba/panic-action %d
doing parameter server role = standalone server
doing parameter passdb backend = tdbsam
doing parameter obey pam restrictions = yes
doing parameter unix password sync = yes
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
doing parameter pam password change = yes
doing parameter map to guest = bad user
doing parameter usershare allow guests = yes
pm_process() returned Yes
lp_servicenumber: couldn't find homes
added interface enp0s25 ip=192.168.1.34 bcast=192.168.1.255 netmask=255.255.255.0
Netbios name list:-
my_netbios_names[0]="BEE"
Client started (version 4.7.3-Debian).
Opening cache file at /var/cache/samba/gencache.tdb
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: No such file or directory
Attempt to open gencache.tdb has failed.
sitename_fetch: No stored sitename for realm ''
internal_resolve_name: looking up icnas2.cc.ic.ac.uk#20 (sitename (null))
Opening cache file at /var/cache/samba/gencache.tdb
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: No such file or directory
Attempt to open gencache.tdb has failed.
no entry for icnas2.cc.ic.ac.uk#20 found.
resolve_hosts: Attempting host lookup for name icnas2.cc.ic.ac.uk<0x20>
remove_duplicate_addrs2: looking for duplicate address/port pairs
namecache_store: storing 2 addresses for icnas2.cc.ic.ac.uk#20: [2001:630:12:602::105],155.198.30.105
Opening cache file at /var/cache/samba/gencache.tdb
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: No such file or directory
Attempt to open gencache.tdb has failed.
internal_resolve_name: returning 2 addresses: 2001:630:12:602::105:0 155.198.30.105:0 
Connecting to 2001:630:12:602::105 at port 445
E2BIG: convert_string(UTF-8,CP850): srclen=19 destlen=16 - 'ICNAS2.CC.IC.AC.UK'
Connecting to 2001:630:12:602::105 at port 139
Connecting to 155.198.30.105 at port 445
E2BIG: convert_string(UTF-8,CP850): srclen=19 destlen=16 - 'ICNAS2.CC.IC.AC.UK'
Connecting to 155.198.30.105 at port 139
Socket options:
	SO_KEEPALIVE = 0
	SO_REUSEADDR = 0
	SO_BROADCAST = 0
	TCP_NODELAY = 1
	TCP_KEEPCNT = 9
	TCP_KEEPIDLE = 7200
	TCP_KEEPINTVL = 75
	IPTOS_LOWDELAY = 0
	IPTOS_THROUGHPUT = 0
	SO_REUSEPORT = 0
	SO_SNDBUF = 46080
	SO_RCVBUF = 369280
	SO_SNDLOWAT = 1
	SO_RCVLOWAT = 1
	SO_SNDTIMEO = 0
	SO_RCVTIMEO = 0
	TCP_QUICKACK = 1
	TCP_DEFER_ACCEPT = 0
 session request ok
 negotiated dialect[SMB3_00] against server[icnas2.cc.ic.ac.uk]
got OID=1.2.840.48018.1.2.2
Enter IC\wmcfoulkes's password:


More information about the Pkg-samba-maint mailing list