samba - Jul 2004 - issues ms04-011

I just installed Samba 3.0.4 on Freebsd 4.10-rel.

I can connect to it from a linux box using smbclient.

However, when attempting to connect from a windows 2000 box I get an
error:
  System error 50 occured

So, I look in the event logs and found this:
=====================Event Type:	Warning
Event Source:	MRxSmb
Event Category:	None
Event ID:	3034
Date:		7/14/2004
Time:		11:07:57 AM
User:		N/A
Computer:	PP069201
Description:
The redirector was unable to initialize security context or query context
attributes.
Data:
0000: 00080000 00560002 00000000 80000bda
0010: 00000000 c00000bb 00000000 00000000
0020: 00000000 00000000 0000047d c00000bb
=====================So I went to google and found a note posted from microsoft
about an
issues with ms04-011:
=====================http://lists.samba.org/archive/samba-technical/2004-April/035573.html

... Some of our customers are also Samba users, so I just wanted
to give you a heads up on an issue that we are seeing with MS04-011.  I
hope this is isn't a duplicate, as I don't subscribe to this mailing
list.  I did try to reproduce this problem with Samba, but could not.
However, I have seen this with two other major CIFS implementations.  My
overall goal is to discourage users from uninstalling MS04-011, by
understanding the problem, the status, the workaround and how to get
more information.  ...
====================
But I couldn't find a resolution.  How can I allow my windows 2000
machines to connect when I still have ntlm as the minimum pasword auth
level?


-- 
David Bear
phone: 	480-965-8257
fax: 	480-965-9189
College of Public Programs/ASU
Wilson Hall 232
Tempe, AZ 85287-0803
 "Beware the IP portfolio, everyone will be suspect of trespassing"

On Wed, Jul 14, 2004 at 02:04:34PM -0700, David Bear
wrote:
> I just installed Samba 3.0.4 on Freebsd 4.10-rel.
> 
> I can connect to it from a linux box using smbclient.
> 
> However, when attempting to connect from a windows 2000 box I get an
> error:
>   System error 50 occured
> 
> So, I look in the event logs and found this:
> =====================> Event Type:	Warning
> Event Source:	MRxSmb
> Event Category:	None
> Event ID:	3034
> Date:		7/14/2004
> Time:		11:07:57 AM
> User:		N/A
> Computer:	PP069201
> Description:
> The redirector was unable to initialize security context or query context
attributes.
> Data:
> 0000: 00080000 00560002 00000000 80000bda
> 0010: 00000000 c00000bb 00000000 00000000
> 0020: 00000000 00000000 0000047d c00000bb
> =====================> So I went to google and found a note posted from
microsoft about an
> issues with ms04-011:
> =====================>
http://lists.samba.org/archive/samba-technical/2004-April/035573.html
> 
> ... Some of our customers are also Samba users, so I just wanted
> to give you a heads up on an issue that we are seeing with MS04-011.  I
> hope this is isn't a duplicate, as I don't subscribe to this
mailing
> list.  I did try to reproduce this problem with Samba, but could not.
> However, I have seen this with two other major CIFS implementations.  My
> overall goal is to discourage users from uninstalling MS04-011, by
> understanding the problem, the status, the workaround and how to get
> more information.  ...
> ====================> 
> But I couldn't find a resolution.  How can I allow my windows 2000
> machines to connect when I still have ntlm as the minimum pasword auth
> level?
Can you explain exactly how you reproduced this ? I wasn't able to
reproduce the problem here.

How do you have Samba set up ? What settings / patches do you have
on the W2K clients ?

Jeremy.