Winbind changes in 4.6/Change for 4.6.0?

[Jeremy Allison]

On Fri, Mar 03, 2017 at 12:12:33PM +0100, Karolin Seeger wrote:
> Hi,
> 
> we just had some internal discussions about the winbind changes in Samba
> 4.6.0. The removal of the token groups fallback will break exististing
> setups (e.g. domain members where people access files without Samba
> (nfs, ...). There is no workaround!
> 
> What about re-adding this feature cleanly and for local domains only and
> disable it by default?
> 
> Please find attached a patchset from Volker.
> "winbind : ask token groups = yes" would restore the old behaviour.
> (I would prefer a documented parameter, but that could be changed.)
> 
> Unfortunately, it's pretty late in the release process, but since the
> code is disabled by default, it should not be a big deal...
> 
> The planned release date for the final release still is Tuesday, March 7.
> Some patches have been added sinc rc4, but it seems to be ok to go ahead
> with rc5.
> 
> Opinions?

Yes, restoring this option for the release (disabled by
default) is a good idea IMHO.

I would still very much like to hit the release date of Tuesday, March 7.

Cheers,

Jeremy.