[Samba] Re: Problem upgrading to 3.0.4 and ArcServe

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andreas wrote:

| On a related note, I'm surprised at the amount of people
| being hit by this bug, since, to my understanting, it
| only affects windows installations without strong cryptography
| support, which means old service packs or none.

I've looked into this some more and it could just be a
different in the way that non-us windows servers operate.
We only ask for AUTH_PIPE_SEAL in winbuindd' schannel code.
All of my servers include the nonce for sealing in the
verfier returned from the server as well.  But apparently
non-us servcers don't.

The only way I could reproduce this was to use a unpatched
2k DC.  But everyone of the people who reported this bug
(that I can remember) where outside the US.

Go figure....




cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFArMq/IR7qMdg1EfYRAoKkAKD0gd+5CnNMeED/1/YtxLUkxgI0vACghEFw
aH3gViDVWhpp6r/0lfYP+lE=
=qSFL
-----END PGP SIGNATURE-----