ldapi connections apparently can’t be encrypted. This prevents unicodePwd from being modified over such connections.
This bug was referenced in samba master: 1a6dbcfb1054a2f140a50a039e4f054c43cfb77d 7df4bdd0fe722da63862d46f809f7ac0498ebe59 ec6579829f9781d113428b8b3c603edd3e6c222d c2378d0c6f3e2f6b10902dc40b4a28c1dc788042 c63cabf1e09bb2d1416483767d1ca835abe017da ff8e98daf1c3fd99d4d880ddc2d47eeb0d99718c
Needs backporting to 4.19 and 4.20.
Created attachment 18289 [details] patch for Samba 4.19
Created attachment 18290 [details] patch for Samba 4.20
Do we want to assign to Jule for the 4.20 backport?
(In reply to Douglas Bagnall from comment #5) If a team member would like to review the patches first, then yes.
Comment on attachment 18290 [details] patch for Samba 4.20 oh, good point.
Ready for 4.20.
Pushed to autobuild-v4-20-test.
This bug was referenced in samba v4-20-test: 529615128be3b6b401e4ba5aa629e93a69cbbdc7 e95f6bc6d923fb09f75e44662be6a2b4a077a79c 830d10c196f714c71a0a33c9e369951b15e1755f 018bb7bbbc7caa4fbc1093d0e7fd6719c49de737 dda353c656cfbfc35c125f403a4b64c9fb4a5314 96e60f4f0ea7856514d206d43b1976133b8ce3e9
Closing out bug report. Thanks!