Microsoft hotfix MS04-011, breaks Samba password change.

[Javid Abdul-AJAVID1]

Thanks Jeremy

We are still using samba-2.2.8a and very happy with so far.

I asked this before in general list but didn't get response, may be you guys when get a chance response


With samba-3.0, how would I join domain, if I don't have windows domain rights.

Till now, I used ./smbpasswd -j <dom> -r <pdc> as unix root ( after creating domain machine acct in winodws domain)

With Samba-3.0 , net join command I need to have windowns domain password ( I don't have access windows domain)

So I as unix root if don't have windows domain admiinistrator password can not use samba-3.0?

Really appreciate the response.



-----Original Message-----
From: samba-technical-bounces+ajavid1=email.mot.com at lists.samba.org [mailto:samba-technical-bounces+ajavid1=email.mot.com at lists.samba.org] On Behalf Of Jeremy Allison
Sent: Tuesday, May 04, 2004 11:31 AM
To: Jason Balicki
Cc: samba at lists.samba.org; samba-technical at samba.org
Subject: Microsoft hotfix MS04-011, breaks Samba password change.


Hi all,

	I wanted to give an update on this as I know this MS Hotfix
is critical and must be applied to protect against the (latest) Microsoft worm.

I think I've found the problem in the code, and am currently testing a fix for this (not in the release to others to test stage yet). As soon as I'm reasonably confident I'll put a patch out there for others to test, and we'll probably do a new stable release to ensure this is fixed in the current codebase.

Once we know how complex the fix is I'll look at adding it into the 2.2.x codebase and maybe releasing a 2.2.9 for all the people who are satisfied with Samba 2.2.8a and don't want to move to 3.0.x yet.

I'm also very unhappy with Microsoft for releasing improperly tested hotfixes, but that's another story I'll probably be taking up with the Technical Comittee overseeing the DoJ Microsoft settlement and the EU as well.

Cheers,

	Jeremy.