Bug 11832 - Mac clients unable to connect to Samba server in security = ads mode
Summary: Mac clients unable to connect to Samba server in security = ads mode
Status: RESOLVED DUPLICATE of bug 11858
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.4.2
Hardware: All Mac OS X
: P5 major (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-04-12 19:47 UTC by Josh Malone
Modified: 2016-05-03 11:26 UTC (History)
1 user (show)

See Also:

Attachments
/var/log/samba/log.my.ip.address (510.70 KB, text/plain)
2016-04-12 19:47 UTC, Josh Malone 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Josh Malone 2016-04-12 19:47:25 UTC 
Created attachment 11987 [details]
/var/log/samba/log.my.ip.address

Today's security patches for Samba 4.4.2 and 4.3.8 break logins from Mac clients when the server is running in security = ads mode. The same smb.conf in 4.3.6 allows logins just fine.

Mac client is OSX 10.10.5
Server is Samba 4.4.2 and 4.3.8
AD domain is 2008-R2

Log for an affected client is attached.

I'm also receiving reports from another admin here that Windows server 2008-R2 is affected as a Samba client.
Comment 1 Andrew Bartlett 2016-04-12 19:49:17 UTC 
Comment on attachment 11987 [details]
/var/log/samba/log.my.ip.address

You need to run winbindd on your Samba server.
Comment 2 Josh Malone 2016-04-12 20:06:12 UTC 
Running winbindd seems to fix the issue. Thank you.
Comment 3 Stefan Metzmacher 2016-05-03 11:26:54 UTC 

*** This bug has been marked as a duplicate of bug 11858 ***