Comment 52 for bug 2027716

Lunar verification

Reproducing the problem:

$ apt-cache policy samba
samba:
  Installed: 2:4.17.7+dfsg-1ubuntu1.1
  Candidate: 2:4.17.7+dfsg-1ubuntu1.1
  Version table:
 *** 2:4.17.7+dfsg-1ubuntu1.1 500
        500 http://br.archive.ubuntu.com/ubuntu lunar-updates/main amd64 Packages
        500 http://br.archive.ubuntu.com/ubuntu lunar-security/main amd64 Packages
        100 /var/lib/dpkg/status

I installed Windows 10 in a vm, did NOT apply any updates, and joined a samba domain.

a) Secure channel test
With the non-updated samba version, the test returns that the channel is broken:
"""
PS C:\Users\Focal.SAMBA> Test-ComputerSecureChannel -Verbose
VERBOSE: Performing the operation "Test-ComputerSecureChannel" on target "DESKTOP-FN048B9".
False
VERBOSE: The secure channel between the local computer and the domain samba.internal is broken.
"""

With the updated samba version, the test returns that the channel is established:

$ apt-cache policy samba
samba:
  Installed: 2:4.17.7+dfsg-1ubuntu2
  Candidate: 2:4.17.7+dfsg-1ubuntu2
  Version table:
 *** 2:4.17.7+dfsg-1ubuntu2 100
        100 http://br.archive.ubuntu.com/ubuntu lunar-proposed/main amd64 Packages
        100 /var/lib/dpkg/status

"""
PS C:\Users\focal> Test-ComputerSecureChannel -Verbose
VERBOSE: Performing the operation "Test-ComputerSecureChannel" on target "DESKTOP-FN048B9".
True
VERBOSE: The secure channel between the local computer and the domain samba.example is in good condition.
PS C:\Users\focal>
"""

b) Remote Desktop
I enabled remote desktop on the windows VM, and accessed it with the vinagre RDP tool.

I then updated windows 10 with KB5028166, rebooted, and a new login attempt with vinagre failed with this error:
[15:01:52:917] [58702:58702] [WARN][com.freerdp.core.nla] - SPNEGO received NTSTATUS: STATUS_TRUSTED_RELATIONSHIP_FAILURE [0xC000018D] from server
[15:01:52:917] [58702:58702] [ERROR][com.freerdp.core.nla] - SPNEGO failed with NTSTATUS: STATUS_TRUSTED_RELATIONSHIP_FAILURE [0xC000018D]
[15:01:52:918] [58702:58702] [ERROR][com.freerdp.core] - nla_recv_pdu:freerdp_set_last_error_ex ERRCONNECT_AUTHENTICATION_FAILED [0x00020009]
[15:01:52:918] [58702:58702] [ERROR][com.freerdp.core.rdp] - rdp_recv_callback: CONNECTION_STATE_NLA - nla_recv_pdu() fail

I then updated samba to the version in proposed:

$ apt-cache policy samba
samba:
  Installed: 2:4.17.7+dfsg-1ubuntu2
  Candidate: 2:4.17.7+dfsg-1ubuntu2
  Version table:
 *** 2:4.17.7+dfsg-1ubuntu2 100
        100 http://br.archive.ubuntu.com/ubuntu lunar-proposed/main amd64 Packages
        100 /var/lib/dpkg/status

And then the vinagre RDP login and access worked just fine with the domain user.

Lunar verification succeeded.