Bug 713648

Summary: Windows security patch KB2536276 prevents access to samba shares
Product: [Fedora] Fedora Reporter: Norman Gaywood <ngaywood>
Component: sambaAssignee: Guenther Deschner <gdeschner>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 14CC: gdeschner, jlayton, redhat_bugzilla, ssorce
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: samba-3.5.11-71.fc15.1 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-08-17 00:58:54 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Norman Gaywood 2011-06-16 06:14:05 UTC
Description of problem:

Windows security patch KB2536276 was released a few days ago. When installed on a windows XP SP3 client, the client can no longer access samba shares.

Version-Release number of selected component (if applicable):

samba-3.5.8-76.fc14.x86_64

How reproducible:

Always

Steps to Reproduce:
1. Install KB2536276 on windows XP SP3
2. Can't connect to samba shares
3. Remove KB2536276 and can connect to samba shares again
  

Additional info:

Plain text passwords are enabled on the clients we use.

This is probably an upstream samba bug and not Fedora specific.

Samba bug has been logged here:

https://bugzilla.samba.org/show_bug.cgi?id=8238

Comment 1 Simo Sorce 2011-06-16 12:24:28 UTC
Glad you reported the bug upstream, we will see if anything can be done there.

But be advised that plain text password support has been deprecated by Microsoft (and samba) for ages. Use at your own risk.

Comment 2 Florian Gerstenberger 2011-06-16 20:57:51 UTC
I can confirm this incompatiblity. Many machines at our site ran into that problem today. 

Connections to servers using encrypted passwords still work, while no connection possible to servers/shares that are unencrypted is possible. 

Additional information: The security patch KB2536276 is not causing any trouble on our Clients which are running Windows 7 64-Bit. Every Windows XP32 Client cannot connect to unencrypted shares after installation of the Update... 

So i guess there might/should be coming an Update for this Update from Microsoft and everything is fine?

Uninstalling the Patch and rebooting fixed the Problems on our Clients, too.

Regards,

Florian

Comment 3 Norman Gaywood 2011-06-20 22:08:03 UTC
In the samba bugzilla above, there is now a patch for this and mention that it will be pushed to samba 3.5.x

I suspect that this bug will be hitting the Red Hat enterprise samba as well.

Any chance of seeing a koji build with this patch?

Comment 4 Guenther Deschner 2011-08-03 14:50:22 UTC
Tomorrow, we plan to release samba 3.5.11, which will have the fix. Once its released, I will upload a koji build of it here.

Comment 5 Fedora Update System 2011-08-04 12:25:54 UTC
samba-3.5.11-71.fc15.1 has been submitted as an update for Fedora 15.
https://admin.fedoraproject.org/updates/samba-3.5.11-71.fc15.1

Comment 6 Fedora Update System 2011-08-04 12:26:48 UTC
samba-3.5.11-79.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/samba-3.5.11-79.fc14

Comment 7 Fedora Update System 2011-08-05 03:50:01 UTC
Package samba-3.5.11-71.fc15.1:
* should fix your issue,
* was pushed to the Fedora 15 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing samba-3.5.11-71.fc15.1'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/samba-3.5.11-71.fc15.1
then log in and leave karma (feedback).

Comment 8 Fedora Update System 2011-08-17 00:58:40 UTC
samba-3.5.11-79.fc14 has been pushed to the Fedora 14 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 9 Fedora Update System 2011-08-17 01:00:29 UTC
samba-3.5.11-71.fc15.1 has been pushed to the Fedora 15 stable repository.  If problems still persist, please make note of it in this bug report.