[Samba] Is anyone using Isilon OneFS in combination with Samba with AD authentication ?

[Jeremy Allison]

On Wed, Apr 18, 2018 at 10:56:23AM +0000, Deventer-2, M.S.J. van via samba wrote:
> Hi,
> 
> We are in the process of testing a migration of our current setup which
> contains Samba 4 as Classic DC with LDAP backend, Isilon OneFS bulk
> storage serving NFS/SMB shares and Windows/Mac/Linux clients to a more
> modern Samba 4 AD. 
> We need to migrate to Samba AD because of Windows 10 and macos 10.13.x
> (and for several other reasons). 
> 
> But we run into an issue with authenticating the clients in the Isilon
> OneFS system using Samba AD. Joining the Isilon OneFS to the domain is
> no problem, we can also see the users and groups from the domain (in
> the OneFS webinterface and on the cli but when connecting a client to
> and SMB share we always get an 'wrong password'.
> 
> Before running into to much detail I would like to know if someone 
> else is using the combination OneFS/Samba AD or tried it and failed
> like us :) 
> 
> For the record, yes I also opened a support case at our supplier.

We can maybe look into this if Isilon turn up at the SNIA SDC
Conference. Do you have any packet traces of the failure ? I
vaguely remember an old DCE-RPC alter-context issue, but that
shouldn't affect krb5 auth.