samba - Jun 2011 - kb2536276 causing issues with non encrypted password configuration

Many of my clients installed kb2536276 on their windows client and can no
longer connect to my samba server.  Their sessions don't even get logged.  I
 upgraded to 3.5.9 on my test server with no luck.  Encrypted with local
authentication to the smbpassword file seems to work fine, but I need the
servers running non encrypted samba to work.  I'm running 3.5.6 on AIX 5.3
using PAM auth and encrypt passwords = no.

Checked admin security setting in windows to make sure they were set to
allow non encrypted passwords.

[>cat smb.conf
[global]
        workgroup = ***
        netbios name = *****
        server string = **** Samba Server %v
        security = user
        encrypt passwords = no

        log file = ******

        max log size = 200000
        log level = 2
      delete readonly = yes
        invalid users = root daemon bin sys adm uucp nuucp lpd imnadm ipsec
lp snapp invscout
        guest account = nobody
        host msdfs = no
      max xmit = 65535
      socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192
        strict locking = no
        allocation roundup size = 2097152
        use sendfile = true

        comment = Samba **** Share
        path = /****
        writeable = yes
        create mask = 0775
        directory mask = 0775
        security mask = 0770
        force security mode = 770
        directory security mask = 0770
        force directory security mode = 770
        force create mode = 0775
        force directory mode = 0775
        inherit acls = yes

[***]
#Windows no Unix yes (Execute bit)
        map archive = no
        map system = no
        map hidden = no


[***-unix]
#Windows no Unix yes (Execute bit)
        map archive = yes
        map system = yes
        map hidden = yes




Thanks In advance.
-- 
Beau

On Thu, Jun 16, 2011 at 11:55:24AM -0400, Beau Gauthreaux
wrote:
> Many of my clients installed kb2536276 on their windows client and can no
> longer connect to my samba server.  Their sessions don't even get
logged.  I
>  upgraded to 3.5.9 on my test server with no luck.  Encrypted with local
> authentication to the smbpassword file seems to work fine, but I need the
> servers running non encrypted samba to work.  I'm running 3.5.6 on AIX
5.3
> using PAM auth and encrypt passwords = no.
> 
> Checked admin security setting in windows to make sure they were set to
> allow non encrypted passwords.
Yep, known problem. Bug 8238. I'm working on it.

Volker

On Thu, Jun 16, 2011 at 11:55:24AM -0400, Beau Gauthreaux
wrote:
> Many of my clients installed kb2536276 on their windows client and can no
> longer connect to my samba server.  Their sessions don't even get
logged.  I
>  upgraded to 3.5.9 on my test server with no luck.  Encrypted with local
> authentication to the smbpassword file seems to work fine, but I need the
> servers running non encrypted samba to work.  I'm running 3.5.6 on AIX
5.3
> using PAM auth and encrypt passwords = no.
> 
> Checked admin security setting in windows to make sure they were set to
> allow non encrypted passwords.
The attached patch fixes it for me.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 G?ttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG G?ttingen, HRB 2816, GF: Dr. Johannes Loxen