Bug 11832 - Mac clients unable to connect to Samba server in security = ads mode
Summary: Mac clients unable to connect to Samba server in security = ads mode
Status: RESOLVED DUPLICATE of bug 11858
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.4.2
Hardware: All Mac OS X
: P5 major (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-04-12 19:47 UTC by Josh Malone
Modified: 2016-05-03 11:26 UTC (History)
1 user (show)

See Also:


Attachments
/var/log/samba/log.my.ip.address (510.70 KB, text/plain)
2016-04-12 19:47 UTC, Josh Malone
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Josh Malone 2016-04-12 19:47:25 UTC
Created attachment 11987 [details]
/var/log/samba/log.my.ip.address

Today's security patches for Samba 4.4.2 and 4.3.8 break logins from Mac clients when the server is running in security = ads mode. The same smb.conf in 4.3.6 allows logins just fine.

Mac client is OSX 10.10.5
Server is Samba 4.4.2 and 4.3.8
AD domain is 2008-R2

Log for an affected client is attached.

I'm also receiving reports from another admin here that Windows server 2008-R2 is affected as a Samba client.
Comment 1 Andrew Bartlett 2016-04-12 19:49:17 UTC
Comment on attachment 11987 [details]
/var/log/samba/log.my.ip.address

You need to run winbindd on your Samba server.
Comment 2 Josh Malone 2016-04-12 20:06:12 UTC
Running winbindd seems to fix the issue. Thank you.
Comment 3 Stefan Metzmacher 2016-05-03 11:26:54 UTC

*** This bug has been marked as a duplicate of bug 11858 ***