Noticed by Justin Maggard <jmaggard10@gmail.com>. winbindd carefully does the talloc substitution call, and then copies the original unsubstituted buffer to the output string. Doh ! :-). Fix to follow.
Created attachment 10324 [details] Fix for master.
Fix applied to master (not applicable to earlier versions 4.1.x or earlier).
Created attachment 10359 [details] 4.2 patch cherry-picked from master Samba 4.2 branched without this patch, so it is attached here for master.
Comment on attachment 10359 [details] 4.2 patch cherry-picked from master LGTM.
Re-assigning to Karolin to make sure it gets into 4.2.0.
Pushed to autobuild-v4-2-test.
Pushed to v4-2-test. Closing out bug report. Thanks!