Hello Everyone, I was just reading up a bit on the latest MS patch that affects SMB. Here is a quote that I read about it: "...Windows Server Message Block (SMB) protocol which could enable group policy on domain controllers to be modified. Flaws in cryptographic signing implementation used by MS in SMB are the root cause of the problem. These flaws are fixed in Win XP SP1 or through a separate patch, released yesterday, which is designed to address the problem on Windows 2000 boxes." Does this change in any way affect Samba? Has anyone tested out this patch before spreading it across all their Windows 2K/XP workstations? Any comments would be greatly appreciated. I wish to avoid any headaches that I can avoid on the network here. Regards, Robert Adkins II IT Manager/Buyer Impel Industries, Inc. Ph. 586-254-5800 Fx. 586-254-5804
Gerald (Jerry) Carter
2002-Dec-13 18:17 UTC
[Samba] Any experience with Latest SMB Patch fro
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, 13 Dec 2002, Robert Adkins wrote:> "...Windows Server Message Block (SMB) protocol which could enable group > policy on domain controllers to be modified. Flaws in cryptographic > signing implementation used by MS in SMB are the root cause of the > problem. These flaws are fixed in Win XP SP1 or through a separate > patch, released yesterday, which is designed to address the problem on > Windows 2000 boxes." > > Does this change in any way affect Samba? Has anyone tested out > this patch before spreading it across all their Windows 2K/XP > workstations?Should not effect us since Samba does not implement SMB signing. cheers, jerry ---------------------------------------------------------------------- Hewlett-Packard ------------------------- http://www.hp.com SAMBA Team ---------------------- http://www.samba.org GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc ISBN 0-672-32269-2 "SAMS Teach Yourself Samba in 24 Hours" 2ed "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE9+iAQIR7qMdg1EfYRAv5nAKC04/GZlhKIYtUqReDCRbHP72C9KwCdGAWZ t3NjIP1HD2kAGRu2M76a7aM=e7ed -----END PGP SIGNATURE-----