The reason is that we sometimes mark outbound only trusted domains as 'internal'. This let winbindd use the builtin_passdb_methods for this domain. There's a race at startup that prevends the mark as 'internal' sometimes, that's why it works sometimes and sometimes not. I think we should add that to v3-3-test, v3-4-test, v3-5-test and master.
Created attachment 5414 [details] Patch for v3-5
assigning to Karolin after review.
Created attachment 5415 [details] Patch for v3-4
Created attachment 5416 [details] Patch for v3-3
Comment on attachment 5415 [details] Patch for v3-4 Yes, we need this for 3.4, too!
Comment on attachment 5416 [details] Patch for v3-3 also for 3.3
Pushed patch to v3-3-test. Will be included in 3.3.11.
Pushed to v3-4-test. Will be included in 3.4.7.
3.5 patch will be included in 3.5.1. v3-5-test is frozen and only blocker bugs will be fixed for 3.5.0.
Pushed to v3-5-test also. Closing out bug report. Thanks!