samba - Jul 2023 - Samba 4.17.8+dfsg-2 (Debian 12) | Test-ComputerSecureChannel False | no RDP access after july update

On 12/07/2023 12.37, Michael via samba wrote:
> Hello Samuel,
> 
> i have exactly the same problem. After the Windows Server 2022 VMs
> rebooted after Microsofts July Patches, both VMs have lost their
> domain-trust. I am using Ubuntu 22.04, so my Samba version is
> 2:4.15.13+dfsg-0ubuntu1.1.
> 
> On those Machines, eventlog shows NETLOGON with the event-ID 3210,
> the "Test-ComputerSecureChannel" shows False and -Repair also
does
> not work. Even removing and rejoining those servers from the AD will
> not fix this problem.
Micheal, I have a question for you. The issue is with LOCAL logon too, or only
with RDP logon?

Thanks

Fabio

I have exactly the same issue but only with domain accounts. I can rdp just fine
with local accounts.

After uninstalling KB5028185 everything works fine again. Re-joining did not
solve the issue.

However, in my case the issue is not limited to Debian and 4.17.8 but also
occured on Synology's Samba AD package.

Regards, Alexander
> On Thursday, Jul 13, 2023 at 7:47 AM, Fabio Muzzi via samba <samba at
lists.samba.org (mailto:samba at lists.samba.org)> wrote:
> On 12/07/2023 12.37, Michael via samba wrote:
> > Hello Samuel,
> >
> > i have exactly the same problem. After the Windows Server 2022 VMs
> > rebooted after Microsofts July Patches, both VMs have lost their
> > domain-trust. I am using Ubuntu 22.04, so my Samba version is
> > 2:4.15.13+dfsg-0ubuntu1.1.
> >
> > On those Machines, eventlog shows NETLOGON with the event-ID 3210,
> > the "Test-ComputerSecureChannel" shows False and -Repair
also does
> > not work. Even removing and rejoining those servers from the AD will
> > not fix this problem.
>
> Micheal, I have a question for you. The issue is with LOCAL logon too, or
only with RDP logon?
>
> Thanks
>
> Fabio
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba