Samba currently can handle ADS style-domain logons in a very restricted mode
(kerberos and just about everything interesting is disabled). It works by using
a NETBIOS name instead of a DNS name. The AD-client will then fall back to
doing the netlogon ADS query over NETBIOS instead of MS-CLDAP.
The nmbd code does not properly handle this case though. The response should be
DNS compressed which explains why we were previously generating incorrect packets.
Created attachment 11 [details]
Add DNS decompression support to ADS nmbd SAMLOGON
This patch add DNS compression support to nmbd for fallback ADS domain joins.
Checked in your fix
originally reported against 3.0aph24. Bugzilla spring cleaning.
Removing old alpha versions.
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.