[Samba] User's DPAPI/backupkey protected data lost when changing domain password

Kirin van der Veer
Wed, 03 Dec 2014 01:54:21 -0000

For anybody interested in tracking when this is resolved for mainline
samba4 there is now a bugzilla record here:
https://bugzilla.samba.org/show_bug.cgi?id=10980

On 2 December 2014 at 11:52, Kirin van der Veer <
kirin.vanderveer at planetinnovation.com.au> wrote:

> Is there a corresponding bug number for the Samba bugzilla so that I can
> track when this is fixed for vanilla samba?
>
> On 26 November 2014 at 20:01, Andrew Bartlett <abartlet at samba.org>
wrote:
>
>> On Mon, 2014-11-24 at 11:35 +0100, Roberto Su?rez Soto wrote:
>> >
>> > Error verifying signature: parse
>> > error
>> > --------------ms020506010503000409040509
>> > Content-Type: text/plain; charset=windows-1252; format=flowed
>> > Content-Transfer-Encoding: quoted-printable
>> >
>> > El 10/11/14 a las 15:48, William Ross escribi=F3:
>> > > After a user changes their password (CTRL-ALT-DEL) in our
Samba 4
>> domai>> > n
>> > > (4.1.12) they lose access to any stored passwords on their
Windows PC.
>> >
>> >      This happens to us too, using Sernet Samba 4.1.13. I've
seen=20
>> > there's a patch to address this issue for Univention Corporate
>> Server,=20
>> > which bundles Samba 4:
>> >
>> >      https://forge.univention.org/bugzilla/show_bug.cgi?id=3D35287
>> >
>> >      Would this be applicable to "vanilla" Samba 4?
>> >
>> >      Thanks in advance,
>>
>> Indeed, the patch was proposed, but didn't get the attention of a
>> suitable reviewer, and didn't have any tests to prevent
regressions.
>>
>> Someone needs to take it back up and re-submit.
>>
>> Sorry,
>>
>> Andrew Bartlett
>>
>> --
>> Andrew Bartlett                       http://samba.org/~abartlet/
>> Authentication Developer, Samba Team  http://samba.org
>> Samba Developer, Catalyst IT
>> http://catalyst.net.nz/services/samba
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>
>
>
>
> --
> Kirin van der Veer
>
> *_______________________IT Support*
> Planet Innovation
> Phone: 03 9945 7549
> Mobile: 0409 728 275
> 81?89 Cotham Road, Kew VIC 3101 Australia
> planetinnovation.com.au
>
>


--
Kirin van der Veer

*_______________________IT Support*
Planet Innovation
Phone: 03 9945 7549
Mobile: 0409 728 275
81?89 Cotham Road, Kew VIC 3101 Australia
planetinnovation.com.au

--


*IMPORTANT NOTE. *If you are NOT AN AUTHORISED RECIPIENT of this e-mail,
please contact Planet Innovation Pty Ltd by return e-mail or by telephone
on +613 9945 7510.  In this case, you should not read, print, re-transmit,
store or act in reliance on this e-mail or any attachments, and should
destroy all copies of them.  This e-mail and any attachments are
confidential and may contain legally privileged information and/or
copyright material of Planet Innovation Pty Ltd or third parties.  You
should only re-transmit, distribute or commercialise the material if you
are authorised to do so.  Although we use virus scanning software, we deny
all liability for viruses or alike in any message or attachment. This
notice should not be removed.