[Pkg-samba-maint] Bug#822937: samba: throws error on atempt to connect

[Walsh, Nicholas]

Package: samba
Version: 2:3.6.6-6+deb7u9
Severity: grave
Justification: renders package unusable

Dear Maintainer,

after update to version 2:3.6.6-6+deb7u9 all attempts at smb connection to a AD share result in the error

"ntlmssp3_handle_neg_flags: Got challenge flags[0x60898201] - possible downgrade detected!
missing_flags[0x00000010] - NT_STATUS_RPC_SEC_PKG_ERROR session setup failed: NT_STATUS_MORE_PROCESSING_REQUIRED *** Please consider answering these questions, where appropriate ***
did you forget to run kinit?"

The kinit did throw me off, but I realised that kerberos was not at issue since nothing changed with it and it's not used for authentication.

My primary use for smbclient is with the icinga2 monitoring platform for space checks, something that was the first to indicate a problem.

Commandline, both from icinga2 and in separate tests by myself has been
smbclient //[server]/[share] -U [domain]/[user]



-- System Information:
Debian Release: 7.10
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages samba depends on:
ii  adduser                3.113+nmu3
ii  debconf [debconf-2.0]  1.5.49
ii  dpkg                   1.16.17
ii  libacl1                2.2.51-8
ii  libattr1               1:2.4.46-8
ii  libc6                  2.13-38+deb7u10
ii  libcap2                1:2.22-1.2
ii  libcomerr2             1.42.5-1.1+deb7u1
ii  libcups2               1.5.3-5+deb7u6
ii  libgssapi-krb5-2       1.10.1+dfsg-5+deb7u7
ii  libk5crypto3           1.10.1+dfsg-5+deb7u7
ii  libkrb5-3              1.10.1+dfsg-5+deb7u7
ii  libldap-2.4-2          2.4.31-2+deb7u1
ii  libpam-modules         1.1.3-7.1
ii  libpam-runtime         1.1.3-7.1
ii  libpam0g               1.1.3-7.1
ii  libpopt0               1.16-7
ii  libtalloc2             2.0.7+git20120207-1
ii  libtdb1                1.2.10-2
ii  libwbclient0           2:3.6.6-6+deb7u9
ii  lsb-base               4.1+Debian8+deb7u1
ii  procps                 1:3.3.3-3
ii  samba-common           2:3.6.6-6+deb7u9
ii  update-inetd           4.43
ii  zlib1g                 1:1.2.7.dfsg-13

Versions of packages samba recommends:
ii  logrotate  3.8.1-4
ii  tdb-tools  1.2.10-2

Versions of packages samba suggests:
pn  ctdb                              <none>
pn  ldb-tools                         <none>
pn  openbsd-inetd | inet-superserver  <none>
pn  smbldap-tools                     <none>

-- debconf information:
  samba/run_mode: daemons
  samba-common/title:

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20160429/a962472e/attachment-0001.html>