Bug 11285 - Broken BCKUPKEY: dbcheck should detect < 2048 bit PREFERRED_KEY and remove
Broken BCKUPKEY: dbcheck should detect < 2048 bit PREFERRED_KEY and remove
Status: NEW
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB
4.2.0
All All
: P5 normal
: ---
Assigned To: Andrew Bartlett
Samba QA Contact
:
: 11546 (view as bug list)
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2015-05-21 05:31 UTC by Marc Jaschke
Modified: 2016-07-29 02:52 UTC (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Marc Jaschke 2015-05-21 05:31:20 UTC
I was having troubles with the Credential Manager of Windows 8.1 with a new Samba 4.1.x AD. Even after upgrading to Samba 4.2 this wasn't fixed.

After clearing the BCKUPKEY_PREFERRED as mentioned here[1]. The Credential Manager was working again.
I'd guess my stored key wasn't 2048-bit and my Windows declined it.

It might be useful to include this in dbcheck, as suggested by Andrew[2], to make sure the stored key has the correct size or regenerate it in case of failure.

Regards,
 Marc

[1] https://lists.samba.org/archive/samba/2014-November/187205.html
[2] https://bugzilla.samba.org/show_bug.cgi?id=11097
Comment 1 Andrew Bartlett 2016-07-29 02:51:16 UTC
*** Bug 11546 has been marked as a duplicate of this bug. ***