[Bug 1572876] Re: After Samba upgrade can't access unpassworded windows share

[Reinhard]

I am still blocked by the security-changes made in samba-4.3.8/9.

Here is an overview on my experience:

What was/is still WORKING:
Sambaserver (Ubuntu 11.10) with samba 3.5 works together with:
1. Windows 7 Clients in an NT-Domain
2. Ubuntu 14.04 Clients (samba 4.1.6) using 
   "smbpasswd -D 10 -r smb01 -U teacher01" for password syncronisation.


BROCKEN on Ubuntu Client 14.04 and 16.04:
After update from samba 4.1.6 to 4.3.9 smbpasswd ... broken with:
Could not connect to machine <remotehost>: NT_STATUS_ACCESS_DENIED


What is WORKING in MY future network:
Sambaserver updated to 16.04 with samba 4.3.9 and Ubuntu 16.04 clients, then smbpasswd ... is OK.

BUT
this is NOT WORKING in MY future network:
1.
my standard user named "user" without an password (Flag [N ] in LDAP) can not access then new sambaserver.
that means: no NETLOGON, ..., but "user" can logged in and can even access a share on an other samba 4.1.6 server.
2. 
other users with password, get all shares as expected BUT can not change their password.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1572876

Title:
  After Samba upgrade can't access unpassworded windows share

Status in samba:
  Unknown
Status in samba package in Ubuntu:
  Fix Released

Bug description:
  Ubuntu 14.04.4 LTS X64
  On 19th april got an update. mainly there was Samba's update, after that, can't  access  anymore to unpassworded share on Win7, login and password requested, but there is no password

  smbclient -N -L 192.168.1.55
  WARNING: The "syslog" option is deprecated
  NTLMSSP packet check failed due to short signature (0 bytes)!
  NTLMSSP NTLM2 packet check failed due to invalid signature!
  Anonymous login successful
  Domain=[VORON] OS=[Windows 7 Professional 7601 Service Pack 1] Server=[Windows 7 Professional 6.1]

   Sharename       Type      Comment
   ---------       ----      -------
  Error returning browse list: NT_STATUS_ACCESS_DENIED
  Connection to 192.168.1.55 failed (Error NT_STATUS_RESOURCE_NAME_NOT_FOUND)
  NetBIOS over TCP disabled -- no workgroup available
  ========================
  upgrade log:
  Start-Date: 2016-04-19  09:04:37
  Commandline: aptdaemon role='role-commit-packages' sender=':1.258'
  Upgrade: python-samba:amd64 (4.1.6+dfsg-1ubuntu2.14.04.13, 4.3.8+dfsg-0ubuntu0.14.04.2), winbind:amd64 (4.1.6+dfsg-1ubuntu2.14.04.13, 4.3.8+dfsg-0ubuntu0.14.04.2), tdb-tools:amd64 (1.2.12-1, 1.3.8-0ubuntu0.14.04.1), samba:amd64 (4.1.6+dfsg-1ubuntu2.14.04.13, 4.3.8+dfsg-0ubuntu0.14.04.2), python-tdb:amd64 (1.2.12-1, 1.3.8-0ubuntu0.14.04.1), libtevent0:amd64 (0.9.19-1, 0.9.26-0ubuntu0.14.04.1), samba-dsdb-modules:amd64 (4.1.6+dfsg-1ubuntu2.14.04.13, 4.3.8+dfsg-0ubuntu0.14.04.2), libnss-winbind:amd64 (4.1.6+dfsg-1ubuntu2.14.04.13, 4.3.8+dfsg-0ubuntu0.14.04.2), samba-common-bin:amd64 (4.1.6+dfsg-1ubuntu2.14.04.13, 4.3.8+dfsg-0ubuntu0.14.04.2), libldb1:amd64 (1.1.16-1ubuntu0.1, 1.1.24-0ubuntu0.14.04.1), libtdb1:amd64 (1.2.12-1, 1.3.8-0ubuntu0.14.04.1), samba-libs:amd64 (4.1.6+dfsg-1ubuntu2.14.04.13, 4.3.8+dfsg-0ubuntu0.14.04.2), virtualbox-5.0:amd64 (5.0.16-105871~Ubuntu~trusty, 5.0.18-106667~Ubuntu~trusty), smbclient:amd64 (4.1.6+dfsg-1ubuntu2.14.04.13, 4.3.8+dfsg-0ubuntu0.14.04.2), libtalloc2:amd64 (2.1.0-1, 2.1.5-0ubuntu0.14.04.1), python-talloc:amd64 (2.1.0-1, 2.1.5-0ubuntu0.14.04.1), libpam-winbind:amd64 (4.1.6+dfsg-1ubuntu2.14.04.13, 4.3.8+dfsg-0ubuntu0.14.04.2), libwbclient0:amd64 (4.1.6+dfsg-1ubuntu2.14.04.13, 4.3.8+dfsg-0ubuntu0.14.04.2), samba-vfs-modules:amd64 (4.1.6+dfsg-1ubuntu2.14.04.13, 4.3.8+dfsg-0ubuntu0.14.04.2), python-ldb:amd64 (1.1.16-1ubuntu0.1, 1.1.24-0ubuntu0.14.04.1), samba-common:amd64 (4.1.6+dfsg-1ubuntu2.14.04.13, 4.3.8+dfsg-0ubuntu0.14.04.2), libsmbclient:amd64 (4.1.6+dfsg-1ubuntu2.14.04.13, 4.3.8+dfsg-0ubuntu0.14.04.2)

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1572876/+subscriptions