schannel bug in winbindd against a Samba DC

Volker Lendecke Volker.Lendecke at SerNet.DE
Fri Sep 16 10:15:24 GMT 2005


Hi, Jerry!

On Sat, Jun 11, 2005 at 02:39:07PM -0500, Gerald (Jerry) Carter wrote:
> After a period of testing (20 minutes of so of smbclient
> automated logons), smbd on a Samba DC starts reporting
> errors to winbindd running on a member server.  Any ideas
> on this one ?  It doesn't not appear to affect a member
> server in an AD domain (security = ads).  I have not
> tested against security = domain in that case, but since
> smbclient is using NTLM authentication, I doubt it makes
> any difference.
> 
> Is there any known issue with extended session key use ?

This mail that is ages old still lurked in my inbox....

> cred_create
> ~        sess_key : 3F62E33B45D3E987
> ~        stor_cred: 515E7E57C1B68DE3
> ~        timestamp: 42ab3c0d
> ~        timecred : 5E9A299AC1B68DE3
> ~        calc_cred: 556EA84C9F9186BA
> cred_assert
> ~        challenge : BE398F401FBC9454
> ~        calculated: 556EA84C9F9186BA
> credentials check wrong

I could not reproduce it at that time, but is it possible that you have hit
the bug 3095 problem?

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20050916/47ce056a/attachment.bin


More information about the samba-technical mailing list