Re: Windows 10 Security Update breaks TSVN Auth?

On 27.09.2016 15:52, Per Salmi wrote:
>>> Are there any TSVN users out there that have ran into trouble using TSVN
>>> during the last couple of weeks since installing Windows 10 Security Update
>>> KB3193494 or KB3189866?
>>>
>>
>> Are you sure that this behavior is related to those Windows Updates? I
>> really doubt that this issue has anything to do with those updates. Does it
>> reproduce on any other non-domain machine with Windows 7 or Windows 8.1?
>
> The authentication works again if we uninstall the security updates, whichever of them that got installed. But KB3193494, as it is a replacement for KB3189866, will automatically be reinstalled again as soon as Windows Update runs again... so it is not a very good workaround.
> We do not have any non-domain Windows 7 och 8.1 clients available to test with. Some domain-joined ones are around and then the authentication works.

Looking at the changes done in that update, we'll find this:
https://technet.microsoft.com/library/security/MS16-110

"preventing NT LAN Manager (NTLM) Single Sign-On (SSO) authentication to
non-private SMB resources when users are signed in to Windows via a
Microsoft Account (https://www.microsoft.com/account) and connected to a
“Guest or public networks” firewall profile."

And since SSPI is using NTLM auth, I'm guessing that's your problem.

so, to fix this you have to correct what the KB update now prevents:
* make the SMB private
* don't connect to a public network but only a private one

Sorry, but you have to figure out how to do that yourself - only you
know your setup.

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest interface to (Sub)version control
    /_/   \_\     http://tortoisesvn.net
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=3187406
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].