samba - Jan 2005 - problem with patch ms04-044 breaking SMB printer shares

We recently discovered after applying Microsoft Windows 2000 patch 
ms04-044 to our computers we can no longer communicate with our samba 
server we use for spooling printers.

Symptoms:
- when trying to display printer queue status, we get a "Failed to open, 
  retrying" message across the top of the queue window
- from within various applications, trying to open a printer dialog 
  box using File->Print will cause the application to hang (presumably
  when trying to get printer information); eventually a list of printers
  will be displayed, but will then hang when the user tries to print 
  a job...the job never actually prints

Backing out the patch allows SMB printing via the samba server to work
properly again, but obviously the patched vulnerability still exists.

Has anyone else run up against this?  Are there known fixes for this 
problem?

-- 
===========================================================================  
John Perkins			  |   University of Wisconsin-Madison
   Associate Researcher		  |   Department of Computer Science
   john@cs.wisc.edu		  |   1210 W. Dayton St.
   608-262-0438/608-262-6626 FAX  |   Madison, WI  53706-1685
============================================================================

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

John Perkins wrote:

| We recently discovered after applying Microsoft Windows
| 2000 patch ms04-044 to our computers we can no longer
| communicate with our samba server we use for spooling
| printers.
|
| Symptoms:
| - when trying to display printer queue status, we get a
|   "Failed to open, retrying" message across the
|   top of the queue window
| - from within various applications, trying to open
|   a printer dialog box using File->Print will cause the
|   application to hang (presumably when trying to get printer
|   information); eventually a list of printers
|   will be displayed, but will then hang when the user
|   tries to print a job...the job never actually prints
|
| Backing out the patch allows SMB printing via the
| samba server to work properly again, but obviously the
| patched vulnerability still exists.
|
| Has anyone else run up against this?  Are there
| known fixes for this problem?

I can't reproduce any problems with the security update.
Is the Samba box configured to serve drivers to printers?





cheers, jerry
====================================================================Alleviating
the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back."     Ethan Hawk in Gattaca
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFB/3URIR7qMdg1EfYRAlJtAKCeydcrvdlpGVf39f+YDbqQhkdXGACcCkac
hWwH+p5FoK++DPj/79UJMFM=zycV
-----END PGP SIGNATURE-----