query about bnc#11097 and Windows Credential error 0x80090345

[Andreas Schneider]

On Wednesday 19 August 2015 16:02:09 Noel Power wrote:
> On 19/08/15 15:51, Andreas Schneider wrote:
> > On Wednesday 19 August 2015 15:18:09 Noel Power wrote:
> >> Hi,
> >> 
> >> With samba 4.2 and samba configured as a PDC with a windows 8.1 client
> >> it still errors out with 0x80090345 when raising the credential manager,
> >> the fix for this https://bugzilla.samba.org/show_bug.cgi?id=11097 tweaks
> >> the BackupKey Remote Protocol (MS-BKRP) but afaics with Samba in PDC
> >> mode the windows client doesn't even try to use this protocol (which
> >> MS-BKRP says is for AD anyway)
> >> I've pored over the associated logs and network traces for this but find
> >> no errors or details in the conversation with the samba PDC to explain
> >> why this error is triggered. Additionally it seems that users that
> >> previously were logged in (prior to install of KB2992611)  to the win8.1
> >> client don't raise the error, however if a user not previously logged is
> >> used bingo attempt to raise the Cred Manager and you get  0x80090345.
> >> Does anyone have any more info on this,  is it really the case that for
> >> samba in PDC mode that there is nothing more that can be done  :/
> > 
> > It looks like with this Update to Windows it stops to support NT4 style
> > domain controllers. I think the only thing you can do is to check if
> > there is a registry key to disable backupkey in Windows 8.1.
> 
> yes and it seems there is!! please see the recent entry from Aug 4
> (which is after when I last looked at this page ;-))
> 
> https://social.technet.microsoft.com/Forums/windows/en-US/47faab6b-d717-4068
> -bee4-c694811e0066/credential-manager-problems-error-0x80090345?forum=w8itpr
> onetworking
> 
> and more detail in workaround section
> 
> https://support.microsoft.com/en-us/kb/3000850
> 
> and that works for me in a local test
> 

Awesome, I had a bug with the same issue and closed it as NOTABUG. I've posted 
the workaround and also send a message to samba-users mailinglist so people 
find how to sovle the issue.


Cheers,


	-- andreas

-- 
Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             asn at samba.org
www.samba.org