[Pkg-samba-maint] Bug#820981: Bug#820981: samba: Credentials chain check failed

[Andrew Bartlett]

On Thu, 2016-04-14 at 15:19 +0200, Denis Witt wrote:
> Am 14.04.2016 um 12:48 schrieb Andrew Bartlett:
> 
> > Try running winbindd.  This appears to be a known regression
> > upstream, but running winbindd chooses a much more robust and well
> > -used codepath.
> 
> For the moment I downgraded to 3.6.6-6+deb7u7. I'll try winbindd but
> I
> remember some minor problems when I did last time, which was the
> reason
> for me not to use it.
> 
> Anyway a security update should not break a previously running
> system,
> so a real fix would be much appreciated.

That is an understandable reaction.  Sadly this will be the best option
in the short term.

You don't need to use nss_winbind or pam_winbind, just running the
winbindd daemon allows Samba to follow the more efficient and well
supported code path.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba