[Samba] Microsoft hotfix MS04-011, breaks Samba password change.

Andrew Bartlett abartlet at samba.org
Tue May 4 23:44:32 GMT 2004


On Wed, 2004-05-05 at 06:06, Jeremy Allison wrote:
> On Tue, May 04, 2004 at 09:31:07AM -0700, Jeremy Allison wrote:
> > Hi all,
> > 
> > 	I wanted to give an update on this as I know this MS Hotfix
> > is critical and must be applied to protect against the (latest) Microsoft
> > worm.
> > 
> > I think I've found the problem in the code, and am currently testing
> > a fix for this (not in the release to others to test stage yet). As
> > soon as I'm reasonably confident I'll put a patch out there for others
> > to test, and we'll probably do a new stable release to ensure this is
> > fixed in the current codebase.
> 
> And here is a (preliminary working) patch against 3.0.3.
> 
> Please test this to see if it fixes the problem with password
> changing. I am back-porting this to 2.2.8a and will issue another
> patch shortly. We'll then do a 2.2.9 release which will consist
> of 2.2.8a plus this patch.

Current SAMBA_3_0 SVN (ie, including this patch) now correctly changes
the password from WinXP SP1, on my test rig.  (a setup that reliably
reproduced the issue).

Thanks!

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20040505/ce7155f9/attachment.bin


More information about the samba-technical mailing list