CentOS

This security update from Microsoft has broken PDC support in SAMBA.
https://bugzilla.samba.org/show_bug.cgi?id=15425

There are fixes underway in the SAMBA code, but will these make their way into CentOS 7? If not, will they go into CentOS Stream?

we are assured that an updated MS-NRPC will be published soon

Sounds like Microsoft are going to fix it.

TrevorH wrote: ↑

2023/08/03 21:47:34

we are assured that an updated MS-NRPC will be published soon

Sounds like Microsoft are going to fix it.

I don't think so. Microsoft just pushed out another update that contained the same breakage (KB5029244).

The "fix" is to update the specification, to document this new behavior.

RedHat has pushed an update for this issue (samba-4.10.16-25.el7_9 and similar). Will we see this in CentOS?

It's in the build pipeline somewhere already.

TrevorH wrote: ↑

2023/09/17 01:45:12

It's in the build pipeline somewhere already.

It seems to be taking a lot of time to make its way through the build pipeline.

Out of curiosity, I installed Samba 4.10.16-25.el7_9 packages from Oracle Linux 7 in CentOS 7 and it works.

When logging in to Windows 10 with the latest KB5030211 patch (KB5028166 in July, KB5029244 in August),
there is no trust issue message.

I would suspect that 4.10.16-25 is the fixed version. The current CentOS 7 one is 4.10.16-24 though -25 is in QA nad pending release.

Released.