[Samba] issues ms04-011

[Jeremy Allison]

On Wed, Jul 14, 2004 at 02:04:34PM -0700, David Bear wrote:
> I just installed Samba 3.0.4 on Freebsd 4.10-rel.
> 
> I can connect to it from a linux box using smbclient.
> 
> However, when attempting to connect from a windows 2000 box I get an
> error:
>   System error 50 occured
> 
> So, I look in the event logs and found this:
> ======================
> Event Type:	Warning
> Event Source:	MRxSmb
> Event Category:	None
> Event ID:	3034
> Date:		7/14/2004
> Time:		11:07:57 AM
> User:		N/A
> Computer:	PP069201
> Description:
> The redirector was unable to initialize security context or query context attributes. 
> Data:
> 0000: 00080000 00560002 00000000 80000bda
> 0010: 00000000 c00000bb 00000000 00000000
> 0020: 00000000 00000000 0000047d c00000bb
> ======================
> So I went to google and found a note posted from microsoft about an
> issues with ms04-011:
> ======================
> http://lists.samba.org/archive/samba-technical/2004-April/035573.html
> 
> ... Some of our customers are also Samba users, so I just wanted
> to give you a heads up on an issue that we are seeing with MS04-011.  I
> hope this is isn't a duplicate, as I don't subscribe to this mailing
> list.  I did try to reproduce this problem with Samba, but could not.
> However, I have seen this with two other major CIFS implementations.  My
> overall goal is to discourage users from uninstalling MS04-011, by
> understanding the problem, the status, the workaround and how to get
> more information.  ...
> =====================
> 
> But I couldn't find a resolution.  How can I allow my windows 2000
> machines to connect when I still have ntlm as the minimum pasword auth
> level?

Can you explain exactly how you reproduced this ? I wasn't able to
reproduce the problem here.

How do you have Samba set up ? What settings / patches do you have
on the W2K clients ?

Jeremy.