samba - Jul 2023 - ComputerSecureChannel -Verbose False since windows 10/11 update 07/2023

Just to understand this, we also might be affected with several customers:

- after installing the July Windows update on W10 22H2 KB5028166, the 
following symptoms appear:
1) Test-ComputerSecureChannel -Verbose says "False"
2) RDPing into the system does not work
3) some reports about broken SMB connections?

I just tested this in our environment on an Ubuntu 18 server (I know, 
must be updated asap), there I see the Test-ComputerSecureChannel 
"False", while on a system without the update it says
"true", but I
cannot see any problems with RDP or SMB network connetions, so maybe 
there are more border conditions to this?

If I can help with further tests I am ready to go.

Best regards, Jakob Curdes

Also confirmed the issue with KB5028166
# samba -V
Version 4.15.13
Synology Build 69008, Jul  5 2023 15:45:10

Uninstalling KB5028166 restores functionality for me as well

On Jul 12, 2023 at 2:47:00 PM, Jakob Curdes via samba <samba at
lists.samba.org>
wrote:
> Just to understand this, we also might be affected with several customers:
>
> - after installing the July Windows update on W10 22H2 KB5028166, the
> following symptoms appear:
> 1) Test-ComputerSecureChannel -Verbose says "False"
> 2) RDPing into the system does not work
> 3) some reports about broken SMB connections?
>
> I just tested this in our environment on an Ubuntu 18 server (I know,
> must be updated asap), there I see the Test-ComputerSecureChannel
> "False", while on a system without the update it says
"true", but I
> cannot see any problems with RDP or SMB network connetions, so maybe
> there are more border conditions to this?
>
> If I can help with further tests I am ready to go.
>
> Best regards, Jakob Curdes
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On Wed, Jul 12, 2023 at 3:47?PM Jakob Curdes via samba <
samba at lists.samba.org> wrote:
> 3) some reports about broken SMB connections?
No reported SMB issues on 150+ domain members across 3 networks for me.

On 12/07/2023 21.47, Jakob Curdes via samba wrote:
> Just to understand this, we also might be affected with several
> customers:
> 
> - after installing the July Windows update on W10 22H2 KB5028166, the
> following symptoms appear: 1) Test-ComputerSecureChannel -Verbose
> says "False" 2) RDPing into the system does not work 3) some
reports
> about broken SMB connections?
> 
> I just tested this in our environment on an Ubuntu 18 server (I know,
> must be updated asap), there I see the Test-ComputerSecureChannel
> "False", while on a system without the update it says
"true", but I
> cannot see any problems with RDP or SMB network connetions, so maybe
> there are more border conditions to this?
> 
> If I can help with further tests I am ready to go.

Hi Jacob, can you please tell me what version is your Samba DC? I suppose
it's 4.7.6 if it's the original Ubuntu 18.04 version, am I right?

I'm trying to understand in how much manure I am drowning right now, I have
about 10 small domains that use Samba (various versions) and I'm trying to
understand what is expected to work and what is expected to fail.

Can your clients still connect to the domain? I mean, if the user logs on
locally on the PC, not using RDP.

I know RDP is broken if using NLA.

Thanks.


-- 
Fabio Muzzi Frabetti