Bug 15783 - NETLOGON_NTLMV2_ENABLED is missing in the SamLogon* user_flags field
Summary: NETLOGON_NTLMV2_ENABLED is missing in the SamLogon* user_flags field
Status: RESOLVED FIXED
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.21.3
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Jule Anger
QA Contact: Samba QA Contact
URL: https://gitlab.com/samba-team/samba/-...
Keywords:
Depends on:
Blocks:
 
Reported: 2025-01-15 11:03 UTC by Stefan Metzmacher
Modified: 2025-02-05 08:34 UTC (History)
2 users (show)

See Also:


Attachments
4.21 backport (998 bytes, patch)
2025-01-20 13:17 UTC, Björn Jacke
metze: review-
Details
Patches for v4-21-test (2.16 KB, text/plain)
2025-01-25 22:26 UTC, Stefan Metzmacher
bjacke: review+
Details
Patches for v4-20-test (2.16 KB, text/plain)
2025-01-25 22:26 UTC, Stefan Metzmacher
bjacke: review+
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Metzmacher 2025-01-15 11:03:25 UTC
Windows DCs return the NETLOGON_NTLMV2_ENABLED flag in the
netr_LogonSamLogon* response, while samba does not.

This doesn't have any real effect.
But it seems that NTLMSSP NTLMv2 authentications against a Windows member server in a samba domain, result in event log messages with "lmPackageName": "NTLM V1",
instead of "NTLM V2".
Comment 1 Samba QA Contact 2025-01-15 14:01:04 UTC
This bug was referenced in samba master:

9bab6426b9fc4d2464597fdfa3085ea259b77710
1414004ee953975c50e0ee374684ff8e01246946
10f38aff7c23dc20bc98cf0e02a430f8b0d7b1ad
Comment 2 Björn Jacke 2025-01-20 13:17:05 UTC
Created attachment 18534 [details]
4.21 backport

backport fix for 4.21 ...
Comment 3 Stefan Metzmacher 2025-01-25 22:26:25 UTC
Created attachment 18538 [details]
Patches for v4-21-test
Comment 4 Stefan Metzmacher 2025-01-25 22:26:48 UTC
Created attachment 18539 [details]
Patches for v4-20-test
Comment 5 Jule Anger 2025-02-03 14:48:42 UTC
Pushed to autobuild-v4-{21,20}-test.
Comment 6 Samba QA Contact 2025-02-03 15:54:11 UTC
This bug was referenced in samba v4-20-test:

d5a2358e3eb05af9c206ce61edeaf344ca02c511
3dda8cc57f7b75c811b24257829f3e54a242c1c6
Comment 7 Samba QA Contact 2025-02-03 20:02:20 UTC
This bug was referenced in samba v4-21-test:

3bbcf93686c0bdba2c1685cffc7b01d1f906f7da
bbbaf264d1b4501ab8bb839352d90b492d3c62fb
Comment 8 Jule Anger 2025-02-05 08:34:51 UTC
Closing out bug report.

Thanks!