Filed to parse NTLMSSP entry in log.smbd - Samba

This is a discussion on Filed to parse NTLMSSP entry in log.smbd - Samba ; Hello all, Ever sinnce I upgraded samba from 3.0.14a to 3.0.21a on our Solaris devlopment server I get this error. I used the same binaries on another Solaris machine and do not have this issue. This error pops up whenever ...

+ Reply to Thread
Results 1 to 3 of 3

Thread: Filed to parse NTLMSSP entry in log.smbd

  1. Filed to parse NTLMSSP entry in log.smbd

    Hello all,

    Ever sinnce I upgraded samba from 3.0.14a to 3.0.21a on our Solaris
    devlopment server I get this error. I used the same binaries on
    another Solaris machine and do not have this issue. This error pops up
    whenever we try and access this machine via the NetBIOS name, if we use
    the IP it works fine. This has me believe it has something to do with
    either winbindd or WINS. The machine is running Solaris 9 with a SEAM
    client. The binaries were compiled using Forte for C. If anyone can
    shed some light on what I can do to fix this issue, it would be greatly
    appreciated.

    [2006/02/06 10:09:14, 0] smbd/server.c395)
    open_sockets_smbd: accept: Software caused connection abort
    [2006/02/06 10:09:14, 2] smbd/sesssetup.c772)
    setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
    all old resources.
    [2006/02/06 10:09:14, 1] libsmb/ntlmssp.c252)
    Failed to parse NTLMSSP packet, could not extract NTLMSSP command

    I am running the winbindd service along with nmbd and smbd. This is
    because we were getting failures in registering with the WINS server,
    and running winbindd seemed to take care of it.

    Here is a copy of our smb.conf with slight modifications

    [global]
    workgroup = myDomain
    netbios name = myServer
    security = DOMAIN
    encrypt passwords = Yes
    password server = *
    username map = /usr/local/samba/lib/users.map
    log level = 2
    max log size = 50
    name resolve order = wins hosts bcast
    os level = 0
    local master = No
    wins server = 192.168.0.253
    invalid users = root
    guest account = gfxuser
    create mask = 0660
    force create mode = 0660
    remote announce = 192.168.0.255
    deadtime = 5

    thank you,
    Tyson Oswald


  2. Re: Filed to parse NTLMSSP entry in log.smbd

    I've tracked it down to the following decision block in the
    libsmb/msrpc_parse.c

    case 'C':
    s = va_arg(ap, char *);

    if (blob->data + head_ofs < (uint8 *)head_ofs
    || blob->data + head_ofs < blob->data)
    {
    DEBUG(1, ("Failed to parse NTLMSSP
    packet, becaese blob->data + head_ofs < head_ofs or blob->data +
    head_ofs < blob->data\n"
    ));
    return False;
    }

    head_ofs += pull_string(NULL, p,
    blob->data+head_ofs, sizeof(p),
    blob->length -
    head_ofs,

    STR_ASCII|STR_TERMINATE);
    // This next if statement fails return False to the calling function
    if (strcmp(s, p) != 0) {
    return False;
    }
    break;
    }

    Does anyone out there on the samba development team have any idea what
    would cause this?

    thanks,
    Tyson


  3. Re: Failed to parse NTLMSSP entry in log.smbd

    Sorry this is from the msrpc_parse function.

    oswaldt@ameritech.net wrote:
    > I've tracked it down to the following decision block in the
    > libsmb/msrpc_parse.c
    >
    > case 'C':
    > s = va_arg(ap, char *);
    >
    > if (blob->data + head_ofs < (uint8 *)head_ofs
    > || blob->data + head_ofs < blob->data)
    > {
    > return False;
    > }
    >
    > head_ofs += pull_string(NULL, p,
    > blob->data+head_ofs, sizeof(p),
    > blob->length -
    > head_ofs,
    >
    > STR_ASCII|STR_TERMINATE);
    > // This next if statement fails return False to the calling function
    > if (strcmp(s, p) != 0) {
    > return False;
    > }
    > break;
    > }
    >
    > Does anyone out there on the samba development team have any idea what
    > would cause this?
    >
    > thanks,
    > Tyson



+ Reply to Thread