[Samba] Is RODC password replication different from the windows version by design or is it a bug?

[Adam Minski]

On 04/01/2019 09:38 AM, Andrew Bartlett wrote:
[...]

>> I can confirm that for samba-4.9.4 using the internal Heimdal KDC
>> Kerberos proxying works, simple bind proxying not. Should the latter
>> work? If not, are there plans for supporting that and what is the time
>> line? If support for proxying simple binds is not there yet but
>> experimental code is ongoing, it would be great if I could include it
>> into my builds.
> 
> Its just a bug, I expect there will be a fix soon.
> 
> In terms of 'experimental code' the best way to help test Samba's new
> features is to run git master and give us feedback or at least to run
> our release candidates.  While we hesitate to suggest running
> unreleased code in production, sadly these are so rarely used in
> production-like environments that we get supprises like this when
> releases come out.
> 
> We do write extensive tests Samba's features, particularly when new
> features are added or bugs are fixed, but the biggest challenges are in
> the 'unknown unknowns', areas we didn't know were not tested.
> 
> Andrew Bartlett
> 

FYI: I've tried git master, simple bind proxying isn't working.

Adam