Web lists-archives.com

Re: [Samba] Is RODC password replication different from the windows version by design or is it a bug?






On 04/01/2019 09:38 AM, Andrew Bartlett wrote:
[...]

I can confirm that for samba-4.9.4 using the internal Heimdal KDC
Kerberos proxying works, simple bind proxying not. Should the latter
work? If not, are there plans for supporting that and what is the time
line? If support for proxying simple binds is not there yet but
experimental code is ongoing, it would be great if I could include it
into my builds.

Its just a bug, I expect there will be a fix soon.

In terms of 'experimental code' the best way to help test Samba's new
features is to run git master and give us feedback or at least to run
our release candidates.  While we hesitate to suggest running
unreleased code in production, sadly these are so rarely used in
production-like environments that we get supprises like this when
releases come out.

We do write extensive tests Samba's features, particularly when new
features are added or bugs are fixed, but the biggest challenges are in
the 'unknown unknowns', areas we didn't know were not tested.

Andrew Bartlett


FYI: I've tried git master, simple bind proxying isn't working.

Adam

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba