[Pkg-samba-maint] Bug#775802: cifs-utils: Unsigned NTLMv2 mounting fails

[Daniel Dickinson]

Package: cifs-utils
Version: 2:5.5-1
Severity: minor

Mounting NTLMv2 shares for which signing is not enabled (e.g. older (including Wheezy)
Samba deployments, or older Windows, or Windows with signing turned off for other
compatibility reasons) fails with 'Invalid Paramater'.

This is only a minor bug despite the fact that it causes previous working
setups to fail because SMB signing is the recommended best practise anyway and
it would be better to enable it in the server anyway.

on the command line:

root at hostname:/home/user# mount -t cifs //winhost/share /home/winshare -ouser=winuser,sec=ntlmv2
Password:
mount error(22): Invalid argument
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

in the syslog:

Jan 20 02:34:37 aildeb kernel: [ 9439.232441] Status code returned 0xc000000d NT_STATUS_INVALID_PARAMETER
Jan 20 02:34:37 aildeb kernel: [ 9439.232446] CIFS VFS: Send error in SessSetup = -22
Jan 20 02:34:37 aildeb kernel: [ 9439.258135] CIFS VFS: cifs_mount failed w/return code = -22

Once I enabled signing and used ntlmsspi things worked fine.

Note however that ntlmv2i still fails.

This is for accessing a Windows 8.1 host.

-- System Information:
Debian Release: 7.8
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cifs-utils depends on:
ii  libc6         2.13-38+deb7u6
ii  libkeyutils1  1.5.5-3+deb7u1
ii  libkrb5-3     1.10.1+dfsg-5+deb7u2
ii  libtalloc2    2.0.7+git20120207-1
ii  libwbclient0  2:3.6.6-6+deb7u4
ii  samba-common  2:3.6.6-6+deb7u4

Versions of packages cifs-utils recommends:
ii  keyutils  1.5.5-3+deb7u1
ii  winbind   2:3.6.6-6+deb7u4

Versions of packages cifs-utils suggests:
ii  smbclient  2:3.6.6-6+deb7u4

-- no debconf information