Bug 713648 - Windows security patch KB2536276 prevents access to samba shares
Summary: Windows security patch KB2536276 prevents access to samba shares
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: samba
Version: 14
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Guenther Deschner
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-06-16 06:14 UTC by Norman Gaywood
Modified: 2011-08-17 01:00 UTC (History)
4 users (show)

Fixed In Version: samba-3.5.11-71.fc15.1
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-08-17 00:58:54 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Norman Gaywood 2011-06-16 06:14:05 UTC
Description of problem:

Windows security patch KB2536276 was released a few days ago. When installed on a windows XP SP3 client, the client can no longer access samba shares.

Version-Release number of selected component (if applicable):

samba-3.5.8-76.fc14.x86_64

How reproducible:

Always

Steps to Reproduce:
1. Install KB2536276 on windows XP SP3
2. Can't connect to samba shares
3. Remove KB2536276 and can connect to samba shares again
  

Additional info:

Plain text passwords are enabled on the clients we use.

This is probably an upstream samba bug and not Fedora specific.

Samba bug has been logged here:

https://bugzilla.samba.org/show_bug.cgi?id=8238

Comment 1 Simo Sorce 2011-06-16 12:24:28 UTC
Glad you reported the bug upstream, we will see if anything can be done there.

But be advised that plain text password support has been deprecated by Microsoft (and samba) for ages. Use at your own risk.

Comment 2 Florian Gerstenberger 2011-06-16 20:57:51 UTC
I can confirm this incompatiblity. Many machines at our site ran into that problem today. 

Connections to servers using encrypted passwords still work, while no connection possible to servers/shares that are unencrypted is possible. 

Additional information: The security patch KB2536276 is not causing any trouble on our Clients which are running Windows 7 64-Bit. Every Windows XP32 Client cannot connect to unencrypted shares after installation of the Update... 

So i guess there might/should be coming an Update for this Update from Microsoft and everything is fine?

Uninstalling the Patch and rebooting fixed the Problems on our Clients, too.

Regards,

Florian

Comment 3 Norman Gaywood 2011-06-20 22:08:03 UTC
In the samba bugzilla above, there is now a patch for this and mention that it will be pushed to samba 3.5.x

I suspect that this bug will be hitting the Red Hat enterprise samba as well.

Any chance of seeing a koji build with this patch?

Comment 4 Guenther Deschner 2011-08-03 14:50:22 UTC
Tomorrow, we plan to release samba 3.5.11, which will have the fix. Once its released, I will upload a koji build of it here.

Comment 5 Fedora Update System 2011-08-04 12:25:54 UTC
samba-3.5.11-71.fc15.1 has been submitted as an update for Fedora 15.
https://admin.fedoraproject.org/updates/samba-3.5.11-71.fc15.1

Comment 6 Fedora Update System 2011-08-04 12:26:48 UTC
samba-3.5.11-79.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/samba-3.5.11-79.fc14

Comment 7 Fedora Update System 2011-08-05 03:50:01 UTC
Package samba-3.5.11-71.fc15.1:
* should fix your issue,
* was pushed to the Fedora 15 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing samba-3.5.11-71.fc15.1'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/samba-3.5.11-71.fc15.1
then log in and leave karma (feedback).

Comment 8 Fedora Update System 2011-08-17 00:58:40 UTC
samba-3.5.11-79.fc14 has been pushed to the Fedora 14 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 9 Fedora Update System 2011-08-17 01:00:29 UTC
samba-3.5.11-71.fc15.1 has been pushed to the Fedora 15 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.