ntlmssp_handle_neg_flags:有挑战标志 – 可能的降级检测! missing_flags – NT代码0x80090302

我正试图访问NetApp上的SMB / CIFS资源,并使用以下错误:

$ cat /etc/redhat-release CentOS Linux release 7.2.1511 (Core) $ rpm -qa | grep ^samba- samba-client-4.2.10-6.el7_2.x86_64 samba-libs-4.2.10-6.el7_2.x86_64 samba-common-libs-4.2.10-6.el7_2.x86_64 samba-common-4.2.10-6.el7_2.noarch samba-client-libs-4.2.10-6.el7_2.x86_64 samba-common-tools-4.2.10-6.el7_2.x86_64 $ smbclient //X/Y$ -U DOMAIN/user -L Enter DOMAIN/user's password: ntlmssp_handle_neg_flags: Got challenge flags[0x60898205] - possible downgrade detected! missing_flags[0x00000010] - NT code 0x80090302 NTLMSSP_NEGOTIATE_SIGN SPNEGO(ntlmssp) login failed: NT code 0x80090302 session setup failed: NT code 0x80090302 $ 

我正在尝试使用以下与我的smbclient

–option ==

 Set the smb.conf(5) option "<name>" to value "<value>" from the command line. This overrides compiled-in defaults and options read from the configuration file. 

但是,我仍然无法访问服务器上的资源,因为我做错了:

 $ smbclient //X/Y$ -U DOMAIN/user -L --option='client ntlmv2 auth'=no Enter DOMAIN/user's password: Connection to --option=client ntlmv2 auth=no failed (Error NT_STATUS_UNSUCCESSFUL) $ 

什么是正确的方式来设置client ntlmv2 auth=no通过 – --optionsmbclient

您可能想要禁用ntlmssp内的spnego,默认参数为:

# smbclient -L //MY_SERVER -U MY_USER Enter MY_USER's password: ntlmssp_handle_neg_flags: Got challenge flags[0x60898205] - possible downgrade detected! missing_flags[0x00000010] - NT code 0x80090302 NTLMSSP_NEGOTIATE_SIGN

禁用spnego:

# smbclient -L //MY_SERVER -U MY_USER --option='client use spnego=no'

为我工作。