aland at ox.org
Tue Jul 20 02:08:13 MDT 2010
There is an increasing number of people who are running into this bug.
I'm seeing an email a week about it. This means even more people are
seeing it, and giving up without asking for help.
Is there anything I can do to re-prioritize this bug? If it helps, I
don't expect the fix to be free. (Email me off-list for that.)
The bug is that when using MSCHAP and ntlm_auth, the response NT-Key
is wrong, and the client rejects the MS-CHAP response. It has been
reported across a wide range of Samba versions, including the most
recent ones. The only solution found so far is to downgrade to 3.0.x,
The bug includes a python script to reproduce the problem, so there's
no need for a complicated test setup. We can also supply a willing set
of beta testers who can verify if a patch fixes the problem.
More information about the samba-technical