[MS-SMB2] Should SMB2 LOGOFF request be signed when Session.SigningRequired equal to TRUE

Question

Hi,

According to [MS-SMB2] 3.2.4.1.1 Signing the Message, it seems that there is no requirement for singing SMB2 LOGOFF Requests. (the specified condition is not met - the request is not a TREE_CONNECT request nor there is a tree connection identified by the TreeId field)

It seems that when using SMB 3.x - Windows Server expects the LOGOFF request to be signed (when Session.SigningRequired equal to TRUE), if this is indeed the case - the documentation is not clear enough on that. (it is not required when using SMB 2.x, even when Session.SigningRequired is equal to TRUE)

Answer 1

Hi Tal,

Thank you for contacting Microsoft Open Specifications Support. One of the Engineers will contact you soon.

Mike Bowen

Escalation Engineer Microsoft Open Specifications

Answer 2

Hi Tal:

I'll help you with this issue and will be in touch as soon as I have an answer.

---

Regards, Obaid Farooqi