[Pkg-samba-maint] Bug#732785: winbind: krb5 authentication no longer working with nfs4 kerberized mounts

[Heiner Markert]

Package: winbind
Version: 2:3.6.19-1~bpo70+1
Severity: normal

Dear Maintainer,

I use libpam-winbind to authenticate against a samba 4.1 AD controller.
Home directories are mounted via kerberized nfs4.

With the wheezy winbind (version 3.6.6), everything works as expected:
A user can log in, authenticate against AD via kerberos, recives a
valid ticket and is then able to access the nfs4 home directory.

After upgrading to winbind 3.6.19 from wheezy-backports without changing
the configuration files, it is no longer possible for the logged in user
to access the nfs4 mount.
The mount is still active and shows the right permissions. However, the
user logs ins with "No directory, logging in with HOME=/" and trying to
access the nfs4-mounted home results in a permission denied error.

After downgrading winbind to version 3.6.6 again, everything works
as expected.

Regards
Heiner Markert

-- System Information:
Debian Release: 7.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages winbind depends on:
ii  adduser           3.113+nmu3
ii  dpkg              1.16.12
ii  libc6             2.13-38
ii  libcap2           1:2.22-1.2
ii  libcomerr2        1.42.5-1.1
ii  libgssapi-krb5-2  1.10.1+dfsg-5+deb7u1
ii  libk5crypto3      1.10.1+dfsg-5+deb7u1
ii  libkrb5-3         1.10.1+dfsg-5+deb7u1
ii  libldap-2.4-2     2.4.31-1+nmu2
ii  libpam0g          1.1.3-7.1
ii  libpopt0          1.16-7
ii  libtalloc2        2.0.7+git20120207-1
ii  libtdb1           1.2.10-2
ii  libtevent0        0.9.16-1
ii  libwbclient0      2:3.6.19-1~bpo70+1
ii  lsb-base          4.1+Debian8+deb7u1
ii  samba-common      2:3.6.19-1~bpo70+1
ii  zlib1g            1:1.2.7.dfsg-13

winbind recommends no packages.

Versions of packages winbind suggests:
ii  libnss-winbind  2:3.6.19-1~bpo70+1
ii  libpam-winbind  2:3.6.19-1~bpo70+1

-- no debconf information