Bug 11285 - Broken BCKUPKEY: dbcheck should detect < 2048 bit PREFERRED_KEY and remove
Summary: Broken BCKUPKEY: dbcheck should detect < 2048 bit PREFERRED_KEY and remove
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.2.0
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
URL:
Keywords:
: 11546 (view as bug list)
Depends on:
Blocks:
 
Reported: 2015-05-21 05:31 UTC by Marc Jaschke
Modified: 2016-07-29 02:52 UTC (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marc Jaschke 2015-05-21 05:31:20 UTC 
I was having troubles with the Credential Manager of Windows 8.1 with a new Samba 4.1.x AD. Even after upgrading to Samba 4.2 this wasn't fixed.

After clearing the BCKUPKEY_PREFERRED as mentioned here[1]. The Credential Manager was working again.
I'd guess my stored key wasn't 2048-bit and my Windows declined it.

It might be useful to include this in dbcheck, as suggested by Andrew[2], to make sure the stored key has the correct size or regenerate it in case of failure.

Regards,
 Marc

[1] https://lists.samba.org/archive/samba/2014-November/187205.html
[2] https://bugzilla.samba.org/show_bug.cgi?id=11097
Comment 1 Andrew Bartlett 2016-07-29 02:51:16 UTC 
*** Bug 11546 has been marked as a duplicate of this bug. ***