Koozali.org: home of the SME Server

Domain login broken after - windows update KB5028166

Offline dvdsmith

  • *
  • 40
  • +0/-0
Re: Domain login broken after - windows update KB5028166
« Reply #60 on: August 08, 2023, 08:38:41 PM »
FYI, just had the following pop on a test Win 10 Pro client (22H2). Expected Patch Tuesday security update.

2023-08 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5029244)

Installing it DOES break trust, so it must include the same fix that broke trust in KB5028166.

Just an advisory as we wait for the Samba patch to hit EL7. More details found here.
https://www.neowin.net/news/windows-10-august-2023-patch-tuesday-kb5029244-out--heres-whats-new-and-whats-broke/

EDIT: In case anyone needs it for a script the following uninstalls KB5029244 from a command prompt in Win10 22H2. Adjust parameters as necessary.

Code: [Select]
dism /Online /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.3324.1.7 /quiet /norestart
« Last Edit: August 08, 2023, 10:50:24 PM by dvdsmith »

Offline ReetP

  • *
  • 3,663
  • +5/-0
Re: Domain login broken after - windows update KB5028166
« Reply #61 on: August 09, 2023, 10:06:20 AM »
FYI we are looking at adding patched samba rpms to the build system as a possible workaround.

We have built them as a test in my repo. However buildys is having a hissy fit right now.

We will keep you posted.

...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline TerryF

  • grumpy old man
  • *
  • 1,808
  • +5/-0
Re: Domain login broken after - windows update KB5028166
« Reply #62 on: August 10, 2023, 05:57:30 AM »
There is now a patched samba rpm in /smetest only a short term fix until upstream RH release of EL7 patched rpm.

While some of us have updated to this patched package and nothing has blown up yet, doesnt guarantee that it wont, Use at your own risk, I say again YOUR OWN RISK..

On advice:

Code: [Select]
yum install samba --enablerepo=smetest 

Do NOT yum update

Enjoy :-)
« Last Edit: August 10, 2023, 12:40:10 PM by ReetP »
--
qui scribit bis legit

Offline ReetP

  • *
  • 3,663
  • +5/-0
Re: Domain login broken after - windows update KB5028166
« Reply #63 on: August 10, 2023, 12:43:31 PM »
As per Terrys advice above, this is strictly an emergency measure to assist Windows admins.

We make ZERO guarantees about this patch.

Only use it if absolutely necessary and please test it carefully before use.

We hope that RHEL will push updated rpms in due course.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline dloayza

  • 1
  • +0/-0
Re: Domain login broken after - windows update KB5028166
« Reply #64 on: August 16, 2023, 06:12:06 AM »
Hello

The rpm file was deleted from smetest?

I'm trying to fix a server and samba is taked from smeupdates (this file donĀ“t fix the problem)

Some days ago the command "yum install samba --enablerepo=smetest" worked fine.

Someone knows?

Thanks


Offline Jean-Philippe Pialasse

  • *
  • 2,671
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Domain login broken after - windows update KB5028166
« Reply #65 on: August 16, 2023, 06:35:33 AM »
now in smeupdates-testing

yum install samba --enablerepo=smeupdates-testing

Offline dvdsmith

  • *
  • 40
  • +0/-0
Re: Domain login broken after - windows update KB5028166
« Reply #66 on: August 24, 2023, 03:38:51 PM »
now in smeupdates-testing

yum install samba --enablerepo=smeupdates-testing

FWIW, did this a couple days ago, no issues.

Also, on a test system installed the latest Win10 22H2 Update Preview (KB5029331) and it still works. This will likely be the September Patch Tuesday, though the actual KB number may change.

Offline john56

  • ***
  • 143
  • +0/-0
Re: Domain login broken after - windows update KB5028166
« Reply #67 on: August 24, 2023, 07:57:44 PM »
Code: [Select]
yum install samba --enablerepo=smeupdates-testingI did it too.  No Issues. Useful to begin a school year in high school with serenity... thanks.

Offline ReetP

  • *
  • 3,663
  • +5/-0
Re: Domain login broken after - windows update KB5028166
« Reply #68 on: August 24, 2023, 08:15:00 PM »
Just remember..... This has zero guarantees.

Hence it is in a test repo.

Don't use it unless you absolutely have to.

Make sure you keep a close lookout for issues.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline jayraym

  • 8
  • +0/-0
Re: Domain login broken after - windows update KB5028166
« Reply #69 on: August 28, 2023, 09:57:17 AM »
The fix works for me as well, thanks guys!