Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID (and samAccountName) in issued tickets.
{
"source": "CPE_RANGE",
"extracted_events": [
{
"introduced": "4.13.0"
},
{
"fixed": "4.13.14"
},
{
"introduced": "4.14.0"
},
{
"fixed": "4.14.10"
},
{
"introduced": "4.15.0"
},
{
"fixed": "4.15.2"
}
],
"cpe": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*"
}