samba - Jul 2023 - ComputerSecureChannel -Verbose False since windows 10/11 update 07/2023

On Thu, Jul 13, 2023, 12:36 Adi Kriegisch via samba <samba at
lists.samba.org>
wrote:
> Hi!
>
> > I was looking at the code this morning trying to figure out how to
> > reject packet with lvl2 properly, - unfortunately I don't know
samba
> > well enough to be able to find the place "quickly" and I got
distracted
> > by other things.  It was my first thought when someone posted the
debug
> > info which mentioned invalid switch level, - I found the place where
this
> > happens but it is way down the line from the place where it should be
> > rejected..
> I just tested the patch from Stefan Metzmacher[1] on top of Samba from
> Debian/Bullseye (4.13.13+dfsg-1~deb11u5): the patch cleanly applied with
> some fuzz and everything started working again!
> We're still running an old NT4 domain with Debian domain controllers.
>
> all the best,
>         Adi
>
> [1] https://bugzilla.samba.org/show_bug.cgi?id=15418#c25
That's great news! Hopefully the binary for mainstream packages will be
available just as quick.
>
>

The patch affects 2 files:
../source3/rpc_server/netlogon/srv_netlog_nt.c
and
../source4/rpc_server/netlogon/dcerpc_netlogon.c

Is the one in source3 for NT style domains and the one in source4 for
AD style domains?
I have an older 4.10 install using AD style and the patch for the
source3 does not install, and I'm wondering if I just need to patch
the file in the source4 tree.

Thanks!