Well the basic process of accessing an SMB resource via NTLMSSP is the following
Client sends a negotiate request
Server sends a negotiate response (to agree on smb version, NTLM mechanism and authentication provider )
Client uses the agreed upon smb version NTLM etc
Server sends a challenge to validate the account is correct, password
The challenge has a server challenge value
The client using the credentials creates a hash from that 16 bit value and sends it in the response
The server also hashes the 16 bit challenge and compares it with what the client is sending
So basically these hashed values are not match
The logical conclusion is the credentials are not correct or the hashing mechanisms are not the same (although for...