samba - Jul 2023 - ComputerSecureChannel -Verbose False since windows 10/11 update 07/2023

On 12/07/2023 17:45, Rowland Penny via samba wrote:
> 
> 
> On 12/07/2023 15:07, Arnaud FLORENT via samba wrote:
>> Hello
>>
>> having also issues with KB5028166on window 10 22H2 with samba 
>> 4.15.13-Ubuntu used as old NT domain PDC
>>
> 
> At least that points to it not being solely an AD problem, something in 
> basic authentication ?
> 
> Rowland
> 
> 
This could be interesting, someone going by the pseudonym 'dosmage' is 
echoing my comments to Reddit, but not getting them exactly correct, so:

I have no real idea why Samba has started failing after Microsoft's 
massive 130 CVE's yesterday, is it Samba's problem ? Well probably, but 
only because of something that Microsoft has done, but who knows what ?

Rowland (who goes by another name on Reddit)

On Wed, Jul 12, 2023 at 11:25?AM Rowland Penny via samba <
samba at lists.samba.org> wrote:
>
>
> On 12/07/2023 17:45, Rowland Penny via samba wrote:
> >
> >
> > On 12/07/2023 15:07, Arnaud FLORENT via samba wrote:
> >> Hello
> >>
> >> having also issues with KB5028166on window 10 22H2 with samba
> >> 4.15.13-Ubuntu used as old NT domain PDC
> >>
> >
> > At least that points to it not being solely an AD problem, something
in
> > basic authentication ?
> >
> > Rowland
> >
> >
>
> This could be interesting, someone going by the pseudonym 'dosmage'
is
> echoing my comments to Reddit, but not getting them exactly correct, so:
>
> I have no real idea why Samba has started failing after Microsoft's
> massive 130 CVE's yesterday, is it Samba's problem ? Well probably,
but
> only because of something that Microsoft has done, but who knows what ?
>
> Rowland (who goes by another name on Reddit)
>
I apologize for the misunderstanding. As I mentioned on Reddit, I've
deleted the miscommunications. The road to hell is pathed with good
intentions.


-- 
Vex

Just to understand this, we also might be affected with several customers:

- after installing the July Windows update on W10 22H2 KB5028166, the 
following symptoms appear:
1) Test-ComputerSecureChannel -Verbose says "False"
2) RDPing into the system does not work
3) some reports about broken SMB connections?

I just tested this in our environment on an Ubuntu 18 server (I know, 
must be updated asap), there I see the Test-ComputerSecureChannel 
"False", while on a system without the update it says
"true", but I
cannot see any problems with RDP or SMB network connetions, so maybe 
there are more border conditions to this?

If I can help with further tests I am ready to go.

Best regards, Jakob Curdes