Warning: Windows Update KB5028166 breaks NT Domains

Just in case we are not the only ones still using Samba with an NT domain:
Windows Update KB5028166 which will automatically be installed on Windows 10 today, breaks compatibility with that domain type. After the installation, a login with a domain account no longer works. Removing that update fixes the issue, but of course that’s no permanent solution.

Edit: I just found out that it’s possible to uninstall the update even though Windows already asks to be rebooted to complete the update. So there is no need to first reboot, then log on with a local user to uninstall that update, which will then require yet another reboot.

Edit: The issue has reached the cifs mailing list and there is now also a bug report for it.

Edit: And there is already a patch to fix the issue. Thanks a lot @StefanMetzmacher.

Now it’s “only” for the package maintainers to create updated Samba packages. I’ll keep my fingers crossed.

Edit 2023-07-15:

There is also a bug report for Ubuntu (I’m linking it here because that is what we are using)
(See below!)

For Debian there is already an update.

Edit 2023-08-09:

There are now also updates for Ubuntu, for the following versions:

  • 20.04 LTS (Focal Fossa)
  • 22.04 LTS (Jammy Jellyfish)
  • 23.04 (Lunar Lobster)
  • 23.10 (Mantic Minotaur (not yet released))

There won’t be fixes for older and non LTS-versions, e.g. 22.10 (Kinetic Kudu).

And also, Microsoft has issued yet another Update (KB5029244) that breaks NT domains again, even if you uninstalled and blocked KB5028166. This is just great because an update to our Samba server was scheduled for this weekend. Couldn’t they wait for a few more days with this?