query about bnc#11097 and Windows Credential error 0x80090345

[Noel Power]

On 19/08/15 15:51, Andreas Schneider wrote:
> On Wednesday 19 August 2015 15:18:09 Noel Power wrote:
>> Hi,
>>
>> With samba 4.2 and samba configured as a PDC with a windows 8.1 client
>> it still errors out with 0x80090345 when raising the credential manager,
>> the fix for this https://bugzilla.samba.org/show_bug.cgi?id=11097 tweaks
>> the BackupKey Remote Protocol (MS-BKRP) but afaics with Samba in PDC
>> mode the windows client doesn't even try to use this protocol (which
>> MS-BKRP says is for AD anyway)
>> I've pored over the associated logs and network traces for this but find
>> no errors or details in the conversation with the samba PDC to explain
>> why this error is triggered. Additionally it seems that users that
>> previously were logged in (prior to install of KB2992611)  to the win8.1
>> client don't raise the error, however if a user not previously logged is
>> used bingo attempt to raise the Cred Manager and you get  0x80090345.
>> Does anyone have any more info on this,  is it really the case that for
>> samba in PDC mode that there is nothing more that can be done  :/
> It looks like with this Update to Windows it stops to support NT4 style domain 
> controllers. I think the only thing you can do is to check if there is a 
> registry key to disable backupkey in Windows 8.1.
yes and it seems there is!! please see the recent entry from Aug 4
(which is after when I last looked at this page ;-))
 
https://social.technet.microsoft.com/Forums/windows/en-US/47faab6b-d717-4068-bee4-c694811e0066/credential-manager-problems-error-0x80090345?forum=w8itpronetworking

and more detail in workaround section

https://support.microsoft.com/en-us/kb/3000850

and that works for me in a local test


Noel