Ubuntu
samba package

  1. Bug #2027716
  2. Comment #17

Comment 17 for bug 2027716

Revision history for this message
John Edwards (john-cornerstonelinux) wrote :

In reply to Andreas Hasenack comment #14: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/2027716/comments/14

I believe that that "Bad Switch" error message is very much related to the problem because originally there was only 2 states (0 and 1) for netr_LogonGetCapabilities and the recent July 2023 Microsoft Windows security update added an undocumented 3rd state (2), and so breaks the Samba code which processes.

See comment #1 in the Samba bug report: https://bugzilla.samba.org/show_bug.cgi?id=15418#c1

And also this email: https://lists.samba.org/archive/cifs-protocol/2023-July/004004.html

I've not seen that error message before last week, and now I see it on from all Windows machines which are members of an NT style domain which have had the recent July 2023 Microsoft Windows security update installed. It is not logged for Windows clients which have not had the update installed, or had it uninstalled.

I think the fact I don't see it in the Samba logs after I installed your patched Samba packages is another sign that the patch clears the immediate domain trust problem.