https://bugs.winehq.org/show_bug.cgi?id=50545
--- Comment #15 from Dmitry Timoshkov dmitry@baikal.ru --- (In reply to Richard from comment #13)
(In reply to Dmitry Timoshkov from comment #12)
You may try something like the following to see supported LDAP/ADs authentication methods, and report what you get:
$ ldapsearch -H ldap://dchostname -x -b "" -s base -LLL
$ ldapsearch -H ldap://dchostname -Y GSS-SPNEGO -Q -N -b "" -s base -LLL
$ ldapsearch -H ldap://dchostname -Y GSSAPI -Q -N -b "" -s base -LLL
All three commands return very similar (if not identical) info. I've extracted the "supported" lines:
...
supportedSASLMechanisms: GSSAPI supportedSASLMechanisms: GSS-SPNEGO supportedSASLMechanisms: EXTERNAL supportedSASLMechanisms: DIGEST-MD5
Thanks. So, both GSSAPI and GSS-SPNEGO are supported by your DC. Is ldapseach able to authenticate to your DC using GSS/Kerberos? My guess is still on missing 32-bit libraries for GSSAPI/Kerberos SASL backend in your OS, and the only way to investigate it I'm aware of is KRB5_TRACE + strace.