[Bug 1574228] Re: Changes to Samba packages for April 12 prevent legacy Windows clients from logging in to NT4 style domain

[Michael Lueck]

*** This bug is a duplicate of bug 1572122 ***
    https://bugs.launchpad.net/bugs/1572122

(Cross posting final solution here...)

Michael Lueck (mlueck) wrote 9 hours ago:       #39

I applied to Ubuntu Server 12.04 Samba update 2:3.6.25-0ubuntu0.12.04.3
and am pleased and relieved to see my test Windows XP client once again
able to login to the Samba NT4 style domain.

This update appears to resolve the defect I originally opened:
[Bug 1574228] Changes to Samba packages for April 12 prevent legacy Windows clients from logging in to NT4 style domain

Note: I did not make ANY changes to my configuration / settings. Only
upgraded to this new build of the Samba packages.

I am thankful,
Michael

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1574228

Title:
  Changes to Samba packages for April 12 prevent legacy Windows clients
  from logging in to NT4 style domain

Status in samba package in Ubuntu:
  Confirmed

Bug description:
  On Ubuntu 12.04 fully patched, this weekend I attempted to apply the
  samba 2:3.6.25-0ubuntu0.12.04.2 updates. That resulted in a Samba NT4
  PDC that downlevel Windows clients could no longer log in to. Logging
  into said Windows machines with a local account and manually issuing
  the NET USE command to bring up drive mounts to the Samba server were
  successful.

  I have taken log snapshots with Samba logging set to level 3 of a
  Windows XP virtual machine attempting to connect to the Samba PDC
  server.

  From the working log I see:

    switch message SMBwriteX (pid 4906) conn 0xb82f9978
    api_rpcTNP: rpc command: NETR_LOGONSAMLOGON
    schannel_fetch_session_key_tdb: restored schannel info key SECRETS/SCHANNEL/MDLXP
    schannel_store_session_key_tdb: stored schannel info with key SECRETS/SCHANNEL/MDLXP
    Forcing Primary Group to 'Domain Users' for mdlueck

  Whereas in the not working log I see at the same spot:

    switch message SMBwriteX (pid 21144) conn 0xb96f7200
    srv_pipe_check_verification_trailer: failed

  Perhaps did Samba make a change that requires something to be
  specified in the smb.conf to accept connections from legacy clients?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1574228/+subscriptions