[Samba] CLDAP support in Samba4

[Andrew Bartlett]

On Mon, 2016-05-30 at 12:27 -0300, Marcelo Terres wrote:
> Hello Andrew.
> 
> On Fri, May 27, 2016 at 5:20 PM, Andrew Bartlett <abartlet at samba.org>
> wrote:
> > On Fri, 2016-05-27 at 12:18 -0300, Marcelo Terres wrote:
> > > Hello.
> > > 
> > > Just one doubt: Samba4 already supports CLDAP requests?
> > 
> > Yes, we support CLDAP.  What made you have this doubt?
> > 
> 
> I'm using Sophos UTM and I'm trying to add the machine in Domain. I
> notice in wireshark that a CLDAP query is done sucessfully, but it
> returns 0 elements (image attached). After that, the operation fails.
> 
> I thought that it could be because CLDAP is not fully implemented or
> something like that.

There are many unimplemented features in Samba compared with AD, and
certainly plenty of differing behaviours, but few that seem to matter
in real-world production.  It is entirely reasonable to assume you may
have found one, but to validate that we will need: - a proper PCAP file, not a redacted screenshot - a comparison between Samba4 and Windows AD - this test re-confirmed on git master.
If you could do that, and get back to us with a bug, we may be able to
help further.
Thanks!
Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba