[Pkg-samba-maint] Bug#821811: samba: badlock patch breaks trust relationship

[Michael Prokop]

* Christian Kreidl [Tue Apr 19, 2016 at 03:54:17PM +0200]:

> Upgrading samba to version 2:3.6.6-6+deb7u9, containing the badlock patch, causes trust relationship
> of Win7 domain members and samba PDC to fail. Users can't log in anymore.

> Downgrading to the previous version 2:3.6.6-6+deb7u7 fixes the problem immediately, without
> rejoining clients to the domain.

> Samba error:
> Apr 18 13:32:25 srv01 smbd[29622]:   _netr_ServerAuthenticate3: netlogon_creds_server_check failed.
> Rejecting auth request from client pc02 machine account pc02$

> Win7 message: "The trust relationship between this workstation and the primary domain failed"

> See also these bug reports:
> https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1572122
> https://bugzilla.redhat.com/show_bug.cgi?id=1326918

I can confirm this one:

| [2016/04/20 07:50:57.851691,  0] rpc_server/netlogon/srv_netlog_nt.c:976(_netr_ServerAuthenticate3)
|  _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client FOOBAR0042 machine account FOOBAR0042$

Downgrading to 2:3.6.6-6+deb7u7 fixes the problem.

regards,
-mika-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20160420/8ce80bd0/attachment.sig>