[Samba] Regression: The 'net' command is now failing to login (UNKNOWN ENUM VALUE 1003?)
pisymbol at gmail.com
Thu Jun 2 12:36:08 UTC 2016
On Tue, May 31, 2016 at 11:29 AM, Gaiseric Vandal
<gaiseric.vandal at gmail.com> wrote:
> The patched systems either default to or enforce higher security settings.
> The patched systems and non-patched systems don't seem to be able to
> negotiate a common set of security settings.
> The "http://badlock.org/" site lists of of the security issues.
> I found on my machines that I had to specifically disable signing but that
> only partially fixed the issue. I think you either need to downgrade
> your netapp or upgrade your domain controllers. The only other thing
> that MIGHT have worked for me was to disable schannel support on all systems
> but that seemed like a bad idea.
There are some patches floating around for samba4 that should fix it I
believe (mucking with a few flags during spnego that should fix this).
Note: Our NetApps have signing turned off and the smbclient/net
commands still fail.
More information about the samba