On 25 August 2017 at 07:17, Alexander Bokovoy via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
On to, 24 elo 2017, Jakub Hrozek via FreeIPA-users wrote:
On Thu, Aug 24, 2017 at 08:18:42AM -0600, Kristian Petersen via FreeIPA-users wrote:
If you are using Samba with FreeIPA, you may want to wait to upgrade to
7.4.  There is a bug in a library that comes with sssd that will break it
for you.  RedHat is recommending to wait for now.

The only bug I know about that fits this description is a missing
requires: from samba on the correct version of krb5-libs. Typically,
users run into this issue if they yum upgrade with the --security flag
which upgrades the samba package, but not krb5..

This bug will be fixed soon in RHEL-7.4.
No, you missed the bug with a semantic change in libwbclient usage in
Samba 4.6 or later where SSSD version returns 'not implemented' instead
of 'winbindd is not available' and that stops the flow. By returning
'winbindd is not available' return code it is able to proceed.

I'm not 100% on the CentOS upgrade cycle with regard to patches after Redhat releases. I'll need to check. Thanks for the warning.

cheers
L.