When winbind sees a signing error on the smb connection to a DC (for whatever reason, our bug, network glitch, etc) it should recover properly. The "old" code in clientgen.c just closed the socket in this case. This is the right thing to do, this connection is spoiled anyway. The new, async code did not do this so far, which led to the code in winbindd_cm.c not detect that we need to reconnect.
Created attachment 6071 [details] Patch for 3.5
Comment on attachment 6071 [details] Patch for 3.5 Looks ok, while just looking at the patch
Karolin, please pick for the next release.
Created attachment 6072 [details] Patch for 3.4 Equivalent patch for 3.4 which also suffers from this problem
Comment on attachment 6072 [details] Patch for 3.4 Looks good
Pushed to v3-4-test and v3-5-test. Closing out bug report. Thanks!