[Samba] Samba domain member and rfc2307 user IDs

[Rowland penny]

On 25/07/16 19:32, Kevin Davidson wrote:
>> On 25 Jul 2016, at 16:39, Rowland penny <rpenny at samba.org> wrote:
>>
>> On 25/07/16 16:02, Kevin Davidson wrote:
>>> Having problems with rfc2307 user ids. This was working briefly and now it’s not.
>>>
>>> samba and winbind v 2.4.2.10+dfs
>>>
>>> […]
>>> What have I done wrong?
>>>
>> You haven't done anything wrong.
>>
>> The version you are using was released after the badlock patches were released, your version includes a regression patch and should really be 4.2.11. There have been a few releases since then, these include patches for regressions caused by the badlock patches, so is there anyway you can upgrade Samba ?
>>
>
> It’s the version you get from the Debian 8.5 Jessie repository. Installing from  source starts to get harder to maintain when you’re looking after large numbers of systems and you want to be able to apt-get upgrade to catch all the latest security updates. What would you consider best practice?
>
>
>
>

I personally think it would be best practise for debian to release a 
later version that has the regression patches. As for what you do, your 
choices are a bit limited. You could use the free Sernet packages or if 
you can afford it, the paid for Sernet packages. You could compile Samba 
yourself, this way you could get the latest 4.4.x version or you could 
contact Louis van Belle (he posts on here frequently), he has a way of 
creating debian Samba debs using later Samba versions, or you could just 
wait until debian releases a new version, hopefully this will be sooner 
rather than later, as the 4.2.x series  will go EOL when 4.5.0 comes out 
in about 6 weeks.

Rowland