SAMBA and KB5028166

[Whoever]

This security update from Microsoft has broken PDC support in SAMBA.
https://bugzilla.samba.org/show_bug.cgi?id=15425

There are fixes underway in the SAMBA code, but will these make their way into CentOS 7? If not, will they go into CentOS Stream?

[TrevorH]

we are assured that an updated MS-NRPC will be published soon

Sounds like Microsoft are going to fix it.

[Whoever]

we are assured that an updated MS-NRPC will be published soon

Sounds like Microsoft are going to fix it.

I don't think so. Microsoft just pushed out another update that contained the same breakage (KB5029244).

The "fix" is to update the specification, to document this new behavior.

[Whoever]

RedHat has pushed an update for this issue (samba-4.10.16-25.el7_9 and similar). Will we see this in CentOS?

[TrevorH]

It's in the build pipeline somewhere already.

[Whoever]

It's in the build pipeline somewhere already.

It seems to be taking a lot of time to make its way through the build pipeline.

[HenrykD]

Out of curiosity, I installed Samba 4.10.16-25.el7_9 packages from Oracle Linux 7 in CentOS 7 and it works.

When logging in to Windows 10 with the latest KB5030211 patch (KB5028166 in July, KB5029244 in August),
there is no trust issue message.

[TrevorH]

I would suspect that 4.10.16-25 is the fixed version. The current CentOS 7 one is 4.10.16-24 though -25 is in QA nad pending release.

[TrevorH]

Released.