Will ONTAP be negatively impacted by Microsoft update that caused Samba Bug 15786?
Applies to
- ONTAP 9
- Samba
- CIFS/SMB
- Active Directory
- Netlogon
- Microsoft KB5062572
- Microsoft KB5062557
Answer
- NetApp Support currently does not expect ONTAP to be negatively impacted by Microsoft's July 8, 2025 security update for Active Directory Domain Controllers for Windows Server versions prior to 2025, which caused Samba bug 15786
- As part of the update a security hardening change to the Microsoft RPC Netlogon protocol is applied, causing Domain Controllers to reject certain anonymous Netlogon RPC requests
- The Microsoft update breaks the AD idmapping functionality, which ONTAP does not use
- Internal testing by NetApp Support showed no impact from the Microsoft update
- ONTAP has its own unique Unix to Windows or Windows to Unix user mapping functionality which doesn't apply to the Samba usermap feature that mentioned in KB5062557.
Additional Information
- Samba 4.22.3 - Release Notes
- 15876 – Windows security hardening locks out schannel'ed netlogon dc calls like netr_DsRGetDCName
- Discussion - Security Updates for Windows 11, July 2025 - Microsoft Q&A
- CVE-2025-49716 - Security Update Guide - Microsoft - Windows Netlogon Denial of Service Vulnerability
- CVE Record: CVE-2025-49716
- Microsoft July 8, 2025—KB 5062572 (OS Build 20348.3932)
- Microsoft July 8, 2025—KB5062557 (OS Build 17763.7558)
- July 8, 2025—KB5062592 (Monthly Rollup) - Microsoft Support
- Netapp IMT have validate and tested the following Microsoft Windows Security Updates for July 2025
- MS 2025 July mskb KB5062552
- MS 2025 July mskb KB5062553
- MS 2025 July mskb KB5062554
- MS 2025 July mskb KB5062557
- MS 2025 July mskb KB5062558
- MS 2025 July mskb KB5062560
- MS 2025 July mskb KB5062561
- MS 2025 July mskb KB5062570
- MS 2025 July mskb KB5062572
- MS 2025 July mskb KB5062592
- MS 2025 July mskb KB5062597
- MS 2025 July mskb KB5062618
- MS 2025 July mskb KB5062619
- MS 2025 July mskb KB5062624
- MS 2025 July mskb KB5062632
- MS 2025 July mskb KB5062799