why smb returns NT_STATUS_INVALID_PARAMETER? How to fix smbclient?

Question

Hi,

I have a linux box that I use all the time and it always work with different machines.

However, I also have a Windows box that is accessible from other windows box, but when I try access from the linux box I only get

root@hosting02:/# smbclient -L //10.10.10.5 -U Admin
Enter Admin's password: 
session setup failed: NT_STATUS_INVALID_PARAMETER

The password is correct, but it always finish with this error from the linux box.

I was looking at error codes and it says that NT_STATUS_INVALID_PARAMETER means a unexpected parameter was received.

Any idea how to fix that? Maybe I need any special parameter to smbclient?

Below is details of debug.

session request ok
Enter Admin's password: 
Doing spnego session setup (blob length=16)
server didn't supply a full spnego negprot
Got challenge flags:
Got NTLMSSP neg_flags=0x628a8215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_CHAL_ACCEPT_RESPONSE
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_CHAL_TARGET_INFO
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60088215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60088215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
SPNEGO login failed: Invalid parameter
session setup failed: NT_STATUS_INVALID_PARAMETER

Ideas? Suggestions?

Answer 1

First, you really want this question moved over to Serverfault.

• You're using the -L flag, which is to list all the shares of the server. Don't put in the leading slashes, just put the IP address or the NetBios name of the server if you just want to list the services.
• If you want to connect to the server using smbclient (and not just list services), remove the -L, keep the slashes, and verify that you have an Admin (you're specifying Admin, not Administrator, those are not the same) user and are specifying the password correctly
• Try using the -D 1 option (and you can go from 1 to 10) to see details of the connection smbclient is making