[Samba] issues ms04-011

David Bear David.Bear at asu.edu
Thu Jul 15 02:16:58 GMT 2004


On Wed, Jul 14, 2004 at 05:08:35PM -0700, Jeremy Allison wrote:
> On Wed, Jul 14, 2004 at 02:04:34PM -0700, David Bear wrote:
> > I just installed Samba 3.0.4 on Freebsd 4.10-rel.
> > 
> > I can connect to it from a linux box using smbclient.
> > 
> > However, when attempting to connect from a windows 2000 box I get an
> > error:
> >   System error 50 occured
> > 
> > So, I look in the event logs and found this:
> > ======================
> > Event Type:	Warning
> > Event Source:	MRxSmb
> > Event Category:	None
> > Event ID:	3034
> > Date:		7/14/2004
> > Time:		11:07:57 AM
> > User:		N/A
> > Computer:	PP069201
> > Description:
> > The redirector was unable to initialize security context or query context attributes. 
> > 0020: 00000000 00000000 0000047d c00000bb
> > ======================
> > So I went to google and found a note posted from microsoft about an
> > issues with ms04-011:
> > ======================
> > http://lists.samba.org/archive/samba-technical/2004-April/035573.html
> > 
> > ... Some of our customers are also Samba users, so I just wanted
> > to give you a heads up on an issue that we are seeing with MS04-011.  I
> > hope this is isn't a duplicate, as I don't subscribe to this mailing
> > list.  I did try to reproduce this problem with Samba, but could not.
> > However, I have seen this with two other major CIFS implementations.  My
> > overall goal is to discourage users from uninstalling MS04-011, by
> > understanding the problem, the status, the workaround and how to get
> > more information.  ...
> > =====================
> > 
> > But I couldn't find a resolution.  How can I allow my windows 2000
> > machines to connect when I still have ntlm as the minimum pasword auth
> > level?
> 
> Can you explain exactly how you reproduced this ? I wasn't able to
> reproduce the problem here.
> 
> How do you have Samba set up ? What settings / patches do you have
> on the W2K clients ?
> 
> Jeremy.

yeah, I hate it when I'm so weird... ok. 

Installed samba from the ports collection, so, we should talk with
whomever packaged it for Freebsd. This is from the Makefile
=======================
# $FreeBSD: ports/net/samba3/Makefile,v 1.124 2004/07/03 12:46:41
# edwin Exp $
#

PORTNAME=               samba
PORTVERSION=            3.0.4
PORTREVISION?=          3
PORTEPOCH?=             1
CATEGORIES?=            net
MASTER_SITES=           ${MASTER_SITE_SAMBA}
MASTER_SITE_SUBDIR=     . rc pre
DISTNAME=               ${PORTNAME}-${PORTVERSION:S/.p/pre/:S/.r/rc/}

MAINTAINER?=            timur at gnu.org
======================

Here's my generic bsd kernel info
scrd# uname -a
FreeBSD scrd.asu.edu 4.10-RELEASE-p2 FreeBSD 4.10-RELEASE-p2 #0: Wed
Jul  7 09:15:36 MST 2004
root at scrd.asu.edu:/usr/obj/usr/src/sys/GENERIC  i386

I've attached the smb.conf below.

on the windows machine: it's windows 2000. with the following fixpaks:
(sorry, this is lengthy, but..)

Installation History
Keep track of what you've installed from Windows Update. To sort by status, date, description, or source, click the column headers.

Note The items listed on this page reflect only the actions you've performed on Windows Update. If you have subsequently restored your computer, or reinstalled or uninstalled programs, some items listed here might no longer be installed on your computer.

 
Status Date Description Source 
 
  
Successful Monday, April 19, 2004 Security Update for Windows 2000 (KB835732) Web site 
Successful Monday, April 19, 2004 Security Update for Windows 2000 (KB828741) Web site 
Successful Monday, April 19, 2004 Security Update for Windows 2000 (KB837001) Web site 
Successful Monday, April 19, 2004 Critical Update for Internet Explorer 6 Service Pack 1 (KB831167) Web site 
Successful Monday, April 19, 2004 Cumulative Security Update for Outlook Express 6 Service Pack 1 (KB837009) Web site 
Successful Wednesday, March 31, 2004 Critical Update for Windows Media Player Script Commands (KB828026) Automatic update 
Successful Monday, March 01, 2004 Security Update for Windows 2000 (KB828028) Automatic update 
Successful Monday, February 02, 2004 Cumulative Security Update for Internet Explorer 6 Service Pack 1 (KB832894) Web site 
Successful Friday, January 23, 2004 Security Update for Microsoft Data Access Components (KB832483) Web site 
Successful Wednesday, November 12, 2003 Q329115: Security Update (Windows 2000)
Read more... Web site 
Successful Wednesday, November 12, 2003 Security Update for Microsoft Windows (KB828749) Web site 
Successful Wednesday, November 12, 2003 Cumulative Security Update for Internet Explorer 6 SP1 (KB824145) Web site 
Successful Wednesday, October 15, 2003 Security Update for Microsoft Windows (KB824141) Web site 
Successful Wednesday, October 15, 2003 Security Update for Microsoft Windows (KB823182) Web site 
Successful Wednesday, October 15, 2003 Security Update for Microsoft Windows 2000 (KB826232) Web site 
Successful Wednesday, October 15, 2003 Security Update for Microsoft Windows 2000 (KB825119) Web site 
Successful Wednesday, October 15, 2003 Security Update for Microsoft Windows 2000 (KB828035) Web site 
Successful Wednesday, October 08, 2003 October 2003, Cumulative Patch for Internet Explorer 6 Service Pack 1 (KB828750) Web site 
Successful Thursday, September 11, 2003 Security Update for Microsoft Windows (KB824105) Automatic update 
Successful Tuesday, August 26, 2003 August 2003, Cumulative Patch for Internet Explorer 6 Service Pack 1 (822925) Web site 
Successful Thursday, July 17, 2003 823559: Security Update for Microsoft Windows Web site 
Successful Thursday, July 17, 2003 Security Update for Windows 2000 (823980) Web site 
Successful Thursday, July 17, 2003 818529: June 2003, Cumulative Patch for Internet Explorer 6 Service Pack 1 Web site 
Successful Tuesday, May 06, 2003 814078: Security Update (Microsoft Jscript version 5.6, Windows 2000, Windows XP) Web site 
Successful Tuesday, May 06, 2003 331953: Security Update (Windows 2000) Web site 
Successful Tuesday, May 06, 2003 Q329553: Critical Update (Windows 2000) Web site 
Successful Tuesday, May 06, 2003 814033: Critical Update Web site 
Successful Tuesday, May 06, 2003 Q815021: Security Update Web site 
Successful Tuesday, May 06, 2003 816093: Security Update Microsoft Virtual Machine (Microsoft VM) Web site 
Successful Tuesday, May 06, 2003 811493: Security Update (Windows 2000) Web site 
Successful Tuesday, May 06, 2003 330994: April 2003, Security Update for Outlook Express 6 SP1 Web site 
Successful Tuesday, May 06, 2003 813951: Update for Internet Explorer 6 SP1 Web site 
Successful Tuesday, May 06, 2003 813489: April 2003, Cumulative Patch for Internet Explorer 6 Service Pack 1 Web site 
Successful Tuesday, March 11, 2003 811630: Critical Update (Windows 2000) Web site 
Successful Tuesday, March 11, 2003 Security Update, February 13, 2002 (MSXML 2.6)
Read more... Web site 
Successful Tuesday, March 11, 2003 Security Update, February 13, 2002 (MSXML 3.0)
Read more... Web site 
Successful Tuesday, March 11, 2003 Q320920: Security Update (Windows Media Player 6.4)
Read more... Web site 
Successful Tuesday, March 11, 2003 Q323255: Security Update (Windows 2000)
Read more... Web site 
Successful Tuesday, March 11, 2003 Q324380: Security Update (Windows 2000)
Read more... Web site 
Successful Tuesday, March 11, 2003 Q326886: Security Update
Read more... Web site 
Successful Tuesday, March 11, 2003 Q326830: Security Update (Windows 2000)
Read more... Web site 
Successful Tuesday, March 11, 2003 Q323172: Security Update
Read more... Web site 
Successful Tuesday, March 11, 2003 Q324096: Security Update (Windows 2000)
Read more... Web site 
Successful Tuesday, March 11, 2003 Q329834: Security Update (Windows 2000)
Read more... Web site 
Successful Tuesday, March 11, 2003 Q329414: Security Update (MDAC 2.6)
Read more... Web site 
Successful Tuesday, March 11, 2003 810833: Security Update (Windows 2000) Web site 
Successful Tuesday, March 11, 2003 Q328310: Security Update (Windows 2000) Web site 
Successful Tuesday, March 11, 2003 810649: Critical Update Web site 
Successful Tuesday, March 11, 2003 329170: Security Update (Windows 2000) Web site 
Successful Tuesday, March 11, 2003 810030: Microsoft VM Security Update (Windows 2000) Web site 
Successful Tuesday, March 11, 2003 Q329115: Security Update (Windows 2000)
Read more... Web site 
Successful Tuesday, March 11, 2003 810847: February 2003, Cumulative Patch for Internet Explorer 6 Service Pack 1 Web site 
Successful Friday, September 21, 2001 Security Update, July 19, 2000 Web site 
Successful Friday, September 21, 2001 Security Update, December 20, 2000 Web site 
Successful Friday, September 21, 2001 Security Update, August 9, 2000 Web site 
Successful Friday, September 21, 2001 Security Update, April 2, 2001 Web site 
Successful Friday, September 21, 2001 Security Update, June 14, 2000 Web site 
Successful Friday, September 21, 2001 Security Update, May 30, 2001 Web site 
Successful Friday, September 21, 2001 Security Update, June 2, 2000 Web site 
Successful Friday, September 21, 2001 Security Update, May 19, 2000 Web site 
Successful Friday, September 21, 2001 Critical Update, March 21, 2000 Web site 
Successful Friday, September 21, 2001 Critical Update, February 17, 2000 Web site 
Successful Wednesday, September 26, 2001 Internet Explorer 5.5 Service Pack 2 and Internet Tools Web site 
Successful Wednesday, September 26, 2001 Windows 2000 Compatibility Updates Web site 
Successful Wednesday, September 26, 2001 Windows Critical Update Notification 3.0 Web site 
Successful Wednesday, September 26, 2001 Security Update, April 2, 2001 Web site 
Successful Monday, March 11, 2002 Security Update, November 20, 2001 Web site 
Successful Monday, March 11, 2002 Security Update, February 11, 2002 (Internet Explorer 5.5 SP2) Web site 
Successful Monday, March 11, 2002 Security Update, February 14, 2002 (Internet Explorer 5.5) Web site 
 
hope this helps...


-- 
David Bear
phone: 	480-965-8257
fax: 	480-965-9189
College of Public Programs/ASU
Wilson Hall 232
Tempe, AZ 85287-0803
 "Beware the IP portfolio, everyone will be suspect of trespassing"


More information about the samba mailing list