kernel reports SMB signature verification returned error = -13 for cifs mounted shares

This document (000020670) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 12 Service Pack 5
NetApp ONTAP 9.5p13

Situation

The kernel reports signature verification errors for cifs mounted shares like:

Mar 10 09:00:00 server kernel: [7107816.561996] CIFS VFS: \\remotehost\exportshare SMB signature verification returned error = -13
Mar 10 09:00:00 server kernel: [7107816.580025] CIFS VFS: sign fail cmd 0x8 message id 0x1507e
Mar 10 09:00:00 server kernel: [7107816.586944] CIFS VFS: \\remotehost\exportshare SMB signature verification returned error = -13
Mar 10 09:00:00 server kernel: [7107816.597301] CIFS VFS: sign fail cmd 0x8 message id 0x15082

These cifs shares are hosted on a NetApp filer running ONTAP 9.5p13.

Resolution

Please update to ONTAP 9.5p14. For further information please contact NetApp support.

Cause

The kernel module cifs.ko received a signature from the originating server that did not meet the requirements of the MS-SMB2 protocol ("3.1.4.3 Encrypting the Message").

Additional Information

Originally this issue was encountered using a SLES 12 SP5 based system but may be seen with other SUSE Linux Enterprise products connected to a NetApp storage running the mentioned ONTAP version.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

Document ID:000020670
Creation Date: 10-Jun-2022
Modified Date:10-Jun-2022
- SUSE Linux Enterprise Server
- SUSE Linux Enterprise Server for SAP Applications

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com