Question:

Will Centrify-Enabled Samba work with Windows 2012R2 SID compression and will it be available for Centrify-Enabled Samba?




Answer:

SID compression is available in stock Samba from version 4 onwards. The last Centrify-Enabled Samba version 4.5.9 available was based on Samba version 3.6.2.5 and is therefore does not support SID compression. If you wish to continue the use of Centrify-Enabled Samba you will need to disable SID Compression on ALL Domain Controllers. 

To use SID compression, please migrate or upgrade from Centrify-Enabled Samba to stock Samba 4.x and utilize the new Centrify Adbindproxy. 

Please Review:
KB-6731: Impact of Badlock (CVE-2016-0128/CVE-2016-2118) on Centrify-Enabled Samba
KB-6842: Overview of the steps to upgrade or migrate from Centrify-enabled Samba to stock Samba with Centrify Adbindproxy
KB-9002: Windows 2012 SID Compression