[Samba] ActiveDirectory authorization broke from samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.23 to 2:4.7.6+dfsg~ubuntu-0ubuntu2.27 (ubuntu 18.04)

[Patrick Goetz]

What I'm going to test is dumping sssd entirely and just using winbind 
instead.  I just went through another 2-hour long iteration of twiddling 
with sssd.conf and restarting sssd endless times trying to get something 
working. So far, at least authenticating against a Samba DC, I haven't 
had issues like this with winbind.  Admittedly, the stuff I'm currently 
doing with sssd is more complicated than my single Samba AD-DC 
deployment, but that's what testing is for.

That said, there are several users on this list using winbind with sssd, 
so it's possible; i.e. the statement below isn't entirely true.

On 2/17/22 03:28, Daniel H. Peger via samba wrote:
>> My advice is to upgrade everything and dump sssd.
> 
> I saw a comment of yours on unix.stackexchange.com (https://unix.stackexchange.com/questions/633394/samba-file-server-ad-sssd-without-winbind) stating that ADS security and SSSD is no longer supported/possible with more recent versions of samba. With our upcoming software version we'll update the OS to Ubuntu 20.04. (i.e. samba 4.13.17). Thus we probably need to tackle the update sooner than later.
> 
> I there any upgrade/migration guide or something?
>