[Samba] User's DPAPI/backupkey protected data lost when changing domain password

[Andrew Bartlett]

On Mon, 2014-11-24 at 11:35 +0100, Roberto Suárez Soto wrote:
> 
> Error verifying signature: parse
> error
> --------------ms020506010503000409040509
> Content-Type: text/plain; charset=windows-1252; format=flowed
> Content-Transfer-Encoding: quoted-printable
> 
> El 10/11/14 a las 15:48, William Ross escribi=F3:
> > After a user changes their password (CTRL-ALT-DEL) in our Samba 4 domai=
> n
> > (4.1.12) they lose access to any stored passwords on their Windows PC.
> 
>      This happens to us too, using Sernet Samba 4.1.13. I've seen=20
> there's a patch to address this issue for Univention Corporate Server,=20
> which bundles Samba 4:
> 
>      https://forge.univention.org/bugzilla/show_bug.cgi?id=3D35287
> 
>      Would this be applicable to "vanilla" Samba 4?
> 
>      Thanks in advance,

Indeed, the patch was proposed, but didn't get the attention of a
suitable reviewer, and didn't have any tests to prevent regressions.

Someone needs to take it back up and re-submit.

Sorry,

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba