query about bnc#11097 and Windows Credential error 0x80090345

[Andreas Schneider]

On Wednesday 19 August 2015 15:18:09 Noel Power wrote:
> Hi,
> 
> With samba 4.2 and samba configured as a PDC with a windows 8.1 client
> it still errors out with 0x80090345 when raising the credential manager,
> the fix for this https://bugzilla.samba.org/show_bug.cgi?id=11097 tweaks
> the BackupKey Remote Protocol (MS-BKRP) but afaics with Samba in PDC
> mode the windows client doesn't even try to use this protocol (which
> MS-BKRP says is for AD anyway)
> I've pored over the associated logs and network traces for this but find
> no errors or details in the conversation with the samba PDC to explain
> why this error is triggered. Additionally it seems that users that
> previously were logged in (prior to install of KB2992611)  to the win8.1
> client don't raise the error, however if a user not previously logged is
> used bingo attempt to raise the Cred Manager and you get  0x80090345.
> Does anyone have any more info on this,  is it really the case that for
> samba in PDC mode that there is nothing more that can be done  :/

It looks like with this Update to Windows it stops to support NT4 style domain 
controllers. I think the only thing you can do is to check if there is a 
registry key to disable backupkey in Windows 8.1.


	-- andreas

-- 
Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             asn at samba.org
www.samba.org