Samba 2:4.15.13+dfsg-0ubuntu1.10 Breaks Domain Trust Connection

Support and Help
, ,
1

Ubuntu 22.04.5 LTS

Last night my Samba server upgraded to the latest .10 update. However after this update the server could not longer establish a connection to a trusted domain. I could not log into that domain from joined clients and ‘wbinfo --online-status’ showed no connection.

I reverted to 2:4.15.13+dfsg-0ubuntu1.9 and it was able to connect immediately. The trusted domain is a Microsoft AD and there have been no Windows updates during the night. No unusual messages seen in /var/log/samba/. Is this a known issue?

2

That update only contained two security patches coming directly from samba.org:

https://www.samba.org/samba/security/CVE-2025-9640.html

and

https://www.samba.org/samba/security/CVE-2025-10230.html

3

I don’t see how it could be CVE-2025-9640 as that affects VFS so it probably is not that. CVE-2025-10230 is more likely but it affects when the smb.conf contains “wins hook” which we don’t have. In fact we have “wins support = no”

I wish there was more logging in samba but it’s only a one-way trust and I don’t see anything on the Windows domain controllers.