[Samba] Samba-4.18.x on Debian 12?

[Matthias Kühne | Ellerhold Aktiengesellschaft]

Hey,

local auth with an AD User works (via the ESXi web console).

RDP with an AD User works.

SMB with an AD User doesnt work - we havent used it though so something 
might be misconfigured there...

Could be that the above works because of caches. And since we never used 
SMB shares before there is no cache and it doesnt work.

There was an announcement for security fixes for samba tonight, maybe 
there is a fix in there for this?

Have a nice day, Matthias.

Am 12.07.23 um 14:44 schrieb Samuel Wolf via samba:
> Hi Matthias,
>
> not sure about the secure channel, we can not login via RDP with this message:
> NTSTATUS: STATUS_TRUSTED_RELATIONSHIP_FAILURE [0xC000018D]
>
> I guess this will be a big problem if some caches on the windows
> machine expires.
> My hope was a newer samba version fix this, but you are on the most recent...
>
> Maybe someone of the Samba team can bring some light into the dark?
>
> Samuel
>
> Am Mi., 12. Juli 2023 um 14:03 Uhr schrieb Matthias Kühne | Ellerhold
> Aktiengesellschaft via samba <samba at lists.samba.org>:
>> Hey,
>>
>> installed the update... now the secure channel is broken.
>>
>> Login with an AD user still worked though. Managing users and groups via
>> RSAT still works.
>>
>> IDK is this anything to worry about? Should I roll back? What is this
>> channel used for?
>>
>> Have a nice day, Matthias.
>>
>> Am 12.07.23 um 12:56 schrieb Samuel Wolf via samba:
>>> Hi Matthias,
>>>
>>>> Windows Update now shows the 2023-07 as available. You really have to
>>>> click "Update" every single time even if the "last checked" date is
>>>> recent...
>>> I hope you don't lose the domain trust after the update like we.
>>>
>>> Samuel
>>>
>> --
>> Senior Webentwickler
>> Datenschutzbeauftragter
>>
>> Ellerhold Aktiengesellschaft
>> Friedrich-List-Str. 4
>> 01445 Radebeul
>>
>> Telefon: +49 (0) 351 83933-61
>> Web: www.ellerhold.de
>> Facebook: www.facebook.com/ellerhold.gruppe
>> Instagram: www.instagram.com/ellerhold.gruppe
>> Twitter: https://twitter.com/EllerholdGruppe
>>
>> Amtsgericht Dresden / HRB 23769
>> Vorstand: Stephan Ellerhold, Maximilian Ellerhold
>> Vorsitzender des Aufsichtsrates: Frank Ellerhold
>>
>>
>>
>> ---Diese E-Mail und Ihre Anlagen enthalten vertrauliche Mitteilungen. Sollten Sie nicht der beabsichtigte Adressat sein, so bitten wir Sie um Mitteilung und um sofortiges löschen dieser E-Mail und der Anlagen.
>>
>> Unsere Hinweise zum Datenschutz finden Sie hier: http://www.ellerhold.de/datenschutz/
>>
>> This e-mail and its attachments are privileged and confidential. If you are not the intended recipient, please notify us and immediately delete this e-mail and its attachments.
>>
>> You can find our privacy policy here: http://www.ellerhold.de/datenschutz/
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba

-- 
Senior Webentwickler
Datenschutzbeauftragter

Ellerhold Aktiengesellschaft
Friedrich-List-Str. 4
01445 Radebeul

Telefon: +49 (0) 351 83933-61
Web: www.ellerhold.de
Facebook: www.facebook.com/ellerhold.gruppe
Instagram: www.instagram.com/ellerhold.gruppe
Twitter: https://twitter.com/EllerholdGruppe

Amtsgericht Dresden / HRB 23769
Vorstand: Stephan Ellerhold, Maximilian Ellerhold
Vorsitzender des Aufsichtsrates: Frank Ellerhold



---Diese E-Mail und Ihre Anlagen enthalten vertrauliche Mitteilungen. Sollten Sie nicht der beabsichtigte Adressat sein, so bitten wir Sie um Mitteilung und um sofortiges löschen dieser E-Mail und der Anlagen.

Unsere Hinweise zum Datenschutz finden Sie hier: http://www.ellerhold.de/datenschutz/

This e-mail and its attachments are privileged and confidential. If you are not the intended recipient, please notify us and immediately delete this e-mail and its attachments.

You can find our privacy policy here: http://www.ellerhold.de/datenschutz/