Why is first a SMB2 Authentication request with an error ACK'ed via TCP?
Applies to
- ONTAP 9
- CIFS
Answer
The reported events are normal CIFS (SMB2) NTLM(v2) session setup (authentication) events
and hereby some explanations
- client:
Session Setup Request (NTLMSSP_NEGOTIATE)
⇔ server:Session Setup Response (NTLMSSP_CHALLENGE): Error: STATUS_MORE_PROCESSING_REQUIRED
(additional authentication information needs to be exchanged: domain\user) - client:
ACK
⇔ server:Session Setup Response
- client:
Session Setup Request (NTLMSSP_AUTH)
: User: <domain\user> ⇔ server:Session Setup Response