[Samba] [ext] Re: Status of LDAPS port 636 with Winbind idmap backend ad in 2024?

[Kuhring, Mathias]

Thank you both for quick feedback. This sounds really good.
Is there a rough ETA when this will be merged?
Just wondering if we just stick with our current workaround for a short time (just local unix users)
or rather try AD via SSSD to bridge some longer time.

Best, Mathias

-----Original Message-----
From: Stefan Metzmacher <metze at samba.org> 
Sent: Tuesday, April 16, 2024 10:29 AM
To: Ralph Boehme <slow at samba.org>; Kuhring, Mathias <mathias.kuhring at bih-charite.de>
Cc: samba at lists.samba.org
Subject: [ext] Re: [Samba] Status of LDAPS port 636 with Winbind idmap backend ad in 2024?

Am 15.04.24 um 21:14 schrieb Ralph Boehme:
> On 4/15/24 10:02, Kuhring, Mathias via samba wrote:
>> Is this still the case?
> thankfully implementing channel bindings has recently been funded by one of our customers, so LDAPis soon coming (back) to Samba.
> 
> https://gitlab.com/samba-team/samba/-/merge_requests/3516
> 
> Iirc it will also be available to idmap_ad, but I'm not familiar with the details. metze?

We'll have 'client ldap sasl wrapping = ldaps', there are also WHATSNEW changes in the Merge request.

metze