[Samba] KB2992611
Jeremy Allison
jra at samba.org
Fri Jan 16 12:19:16 MST 2015
On Fri, Jan 16, 2015 at 05:21:51PM +0000, Christopher Roberts wrote:
>
> * Version: Samba 4.2.0rc3
> * Distribution: Ubuntu Server 14.04 LTS
> * Client: Windows 8.1 Professional
>
> Having installed Samba4 servers at our two sites and ensured that replication is working correctly, I connected a brand new Windows 8.1 Professional PC to the new AD network as a test.
>
> I immediately encountered two problems:
>
> 1. Web credentials were not being remembered in either Internet Explorer nor Google Chrome
>
> 2. Microsoft Outlook 2013 was unable to connect to IMAP TLS encypted mailserver "An Unknown Error has Occurred - 0x8004011c".
>
> These problems were not present on a local account, only on a domain account.
>
> When accessing Web Credential service an Error 0x80090345 was seen, which fortunately took me to the following Microsoft Technet thread:
>
> * http://goo.gl/dX7L6C "Credential Manager Problems - Error 0x80090345"
>
> It is interesting to note that this thread is for a Linux Zentyal server running Samba 4.
>
> This led me to remove KB2992611, which was pre-installed prior to the supply of the PC, and instantly both the problems outlined above went away.
>
> I understand that this is related to the Winshock SChannel patch that hit the headlines a few months ago. My understanding is that it is well known that Microsoft messed up their patch with the result that TLS connections were problematic with the patch installed.
>
> Clearly this is a patch that we ought to have and removing it from every client would seem to be not terribly sensible.
>
> I do appreciate that Samba 4.2.0rc3 is not production ready, but has anyone else come across this issue and better still found a solution that leaves KB2992611 in place?
Do you have any logs from the Samba side showing what
the problem is when KB2992611 is installed ?
More information about the samba
mailing list