You can no longer logon to a Samba domain after installing this update. This seems to affect all Samba 4.x servers when using it as a ADS primary domain server. See: https://bugzilla.samba.org/show_bug.cgi?id=15418
After applying the patch as described in https://bugzilla.samba.org/show_bug.cgi?id=15418 manually before a 'make build', I can confirm that it is possible to login again.
Created attachment 243489 [details] Upgrade samba to 4.6.11 git diff
Created attachment 243490 [details] poudriere testport log
Created attachment 243491 [details] portlint output
There are new patched releases for the 4.16,4.17 and 4.18 branches. I updated the port to 4.16.11 and ran testport, seems ok for now. I also updated 2 production samba DCs to 4.16.11 with this patch and so far everything seems to work, including domain logons for windows clients with KB5028166 installed.
Same story here, 4.16 patch from upstream seems to fix the issue, please commit.