I realise that a large number of sites have been bitten by the bad interaction between this hotfix, and Samba.
I have finally managed to spend some time looking into this, and have reproduced it in my test environment. There appears to be an issue with the NTLMSSP layer used by windows clients to wrap password change requests. Fortunately, I have also shown that it is possible to construct a shim involving Samba4's RPC proxy server, to correctly change passwords from these Windows clients. While certainly not a solution for a production environment, it shows us a means forward for fixing this issue, using existing code, and known algorithms. As you are all aware, with the Sasser worm out and about, applying this fix is no longer optional, and we are working hard on finding a solution. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net
signature.asc
Description: This is a digitally signed message part
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
