Node-SMB / marsaud-smb2

SMB2 Client
53 stars 46 forks source link

Implement SMB signing #46

Open jaredtbates opened 5 years ago

jaredtbates commented 5 years ago

Hi, I was looking around at this library for a project and found an issue with SMB signing not being supported.

We were getting this error when trying to access any SMB shares: Failure: STATUS_ACCESS_DENIED (0xC0000022) : {Access Denied} A process has requested access to an object but has not been granted those access rights. I found we had a group policy enabled on the file server: Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > Microsoft network server: Digitally sign communications (always). After I disabled that policy, I was able to access the shares.

Any thoughts? Thank you!

olivierlambert commented 5 years ago

Do you know how SMB signing works or do you have further documentation about it?

jaredtbates commented 5 years ago

I don't have any knowledge myself, however after some looking I did find Microsoft's official SMB protocol documentation has some info about it. I think that page 140, under section 4.3 here describes it, however I may be wrong: https://winprotocoldoc.blob.core.windows.net/productionwindowsarchives/MS-SMB/%5bMS-SMB%5d.pdf