** Summary changed:
- PY3: python3-ldap does not allow bytes for DN/RDN/field names
+ [SRU] PY3: python3-ldap does not allow bytes for DN/RDN/field names
** Description changed:
+ [Impact]
+ Keystone LDAP backend doesn't work for PY3.
+
Under Python 2, python-ldap uses bytes by default.
The krb5 options you were using in the pam_winbind.so line are only
meant to be used with active directory controllers. Your smb.conf file
shows your security to be of the "domain" style, which is an NT style
controller which does not support kerberos.
I may have lost this bit of information
I see, I just tried, and by default I get the krb5* options in
/etc/pam.d/common-auth's pam_winbind.so line.
That comes from /usr/share/pam-configs/winbind.
It's a more modern default I believe (assuming the machine was joined to
an AD domain, and not an NT one), and I'm not sure how
** Changed in: samba (Ubuntu)
Status: Incomplete => Triaged
** Changed in: samba (Ubuntu)
Importance: Undecided => Low
** Summary changed:
- offline logon doesnt works in ubuntu 18.04
+ offline logon with NT4 domains needs config change in 18.04
** Summary changed:
- offline logon
