[Samba] Regression: The 'net' command is now failing to login (UNKNOWN ENUM VALUE 1003?)

[pisymbol .]

On Tue, May 31, 2016 at 11:29 AM, Gaiseric Vandal
<gaiseric.vandal at gmail.com> wrote:
>
>
> The patched systems either default to or enforce higher security settings.
> The patched systems and non-patched systems don't seem to be able to
> negotiate a common set of security settings.
>
>
> The "http://badlock.org/" site lists of of the security issues.
>
>
> I found on my machines that I had to specifically disable signing but that
> only partially fixed the issue.     I think you either need to downgrade
> your netapp or upgrade your domain controllers.     The only other thing
> that MIGHT have worked for me was to disable schannel support on all systems
> but that seemed like a bad idea.

There are some patches floating around for samba4 that should fix it I
believe (mucking with a few flags during spnego that should fix this).

Note: Our NetApps have signing turned off and the smbclient/net
commands still fail.

-aps