+++ This bug was initially created as a clone of Bug #651722 +++

Created attachment 459350 [details]
spnego patch for 3.0.x

Description of problem:
But for 3.5.6, all samba versions have a serious issue when dealing with Win7 machines with Live Essentials installed: cannot smbclient them due to spnego failure.

Version-Release number of selected component (if applicable):
All samba versions. First working version is 3.5.6.

How reproducible:
Always

Steps to Reproduce:
1) Install a Win7 machine, all updates
2) Verify that you can "smbclient" it correctly
3) On Win7, install one of the Live Essentials app (ie: mail)
4) Verify that you cannot "smbclient" it anymore

$ smbclient '\\win7\share' -Uuser%pass -c 'put file'
session setup failed: SUCCESS - 0
$

$ smbclient -d 3 '\\win7\share' -Uuser%pass -c 'put file'
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
Processing section "[global]"
....
Connecting to x.x.x.x at port 445
Doing spnego session setup (blob length=336)
SPNEGO login failed: Invalid parameter
session setup failed: SUCCESS - 0
  
Actual results:
spnego failure

Expected results:
smbclient should show shares or put files to shares w/o any error.

Additional info:
See
https://bugzilla.samba.org/show_bug.cgi?id=7577

Note that with the latest updates to Live Essentials you cannot uninstall a single component "Sign-in assistant" anymore, it's all or nothing.
Since Win7 ships w/o a mail client, many users will install Live Essentials Mail which is free.

The 3.5.6 patch can be applied to 3.0.x with some massaging.
I'm attaching what I'm using, I made this patch by trial and error since I don't understand samba code at all.

I don't have access to 5.6 beta, but reading the release notes I find nothing suggesting a samba update; the release notes of 6.0beta talk about 3.5.4, that would be defective too.

--- Additional comment from giulioo on 2010-11-10 12:13:50 EST ---

I forgot to add:

1) obviously you can work-around the issue by using
 client use spnego = yes
but this may cause other problems down the line when accessing shares on Windows domains which may require spnego.

2) I marked this as high severity mainly because printing to Win7 shared printers won't work anymore.

--- Additional comment from gdeschner on 2010-11-10 12:26:37 EST ---

(In reply to comment #2)
> I forgot to add:
> 
> 1) obviously you can work-around the issue by using
>  client use spnego = yes

You mean "client use spnego = no" here, right ?

--- Additional comment from giulioo on 2010-11-10 13:11:29 EST ---

Yes, sorry for the confusion
 client use spnego = no

--- Additional comment from ekopalov on 2010-12-15 03:41:54 EST ---


    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Samba could have failed to connect to workstations running Windows 7 with Live Essentials installed due to a spnego parsing failure. With this update, the connection succeeds.

--- Additional comment from errata-xmlrpc on 2011-01-13 17:48:33 EST ---

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2011-0054.html