Created attachment 459350 [details] spnego patch for 3.0.x Description of problem: But for 3.5.6, all samba versions have a serious issue when dealing with Win7 machines with Live Essentials installed: cannot smbclient them due to spnego failure. Version-Release number of selected component (if applicable): All samba versions. First working version is 3.5.6. How reproducible: Always Steps to Reproduce: 1) Install a Win7 machine, all updates 2) Verify that you can "smbclient" it correctly 3) On Win7, install one of the Live Essentials app (ie: mail) 4) Verify that you cannot "smbclient" it anymore $ smbclient '\\win7\share' -Uuser%pass -c 'put file' session setup failed: SUCCESS - 0 $ $ smbclient -d 3 '\\win7\share' -Uuser%pass -c 'put file' lp_load_ex: refreshing parameters Initialising global parameters rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" Processing section "[global]" .... Connecting to x.x.x.x at port 445 Doing spnego session setup (blob length=336) SPNEGO login failed: Invalid parameter session setup failed: SUCCESS - 0 Actual results: spnego failure Expected results: smbclient should show shares or put files to shares w/o any error. Additional info: See https://bugzilla.samba.org/show_bug.cgi?id=7577 Note that with the latest updates to Live Essentials you cannot uninstall a single component "Sign-in assistant" anymore, it's all or nothing. Since Win7 ships w/o a mail client, many users will install Live Essentials Mail which is free. The 3.5.6 patch can be applied to 3.0.x with some massaging. I'm attaching what I'm using, I made this patch by trial and error since I don't understand samba code at all. I don't have access to 5.6 beta, but reading the release notes I find nothing suggesting a samba update; the release notes of 6.0beta talk about 3.5.4, that would be defective too.
I forgot to add: 1) obviously you can work-around the issue by using client use spnego = yes but this may cause other problems down the line when accessing shares on Windows domains which may require spnego. 2) I marked this as high severity mainly because printing to Win7 shared printers won't work anymore.
(In reply to comment #2) > I forgot to add: > > 1) obviously you can work-around the issue by using > client use spnego = yes You mean "client use spnego = no" here, right ?
Yes, sorry for the confusion client use spnego = no
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: Samba could have failed to connect to workstations running Windows 7 with Live Essentials installed due to a spnego parsing failure. With this update, the connection succeeds.
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2011-0054.html