[PATCH] Workaround very slow nss_winbind, fix crash on the AD DC (particularly for backups)

Andrew Bartlett abartlet at samba.org
Mon Jun 17 20:49:37 MDT 2013


This patch attempts to address an issue some have reported where our
nss_winbind is even slower than it's simple non-caching implementation
needs to be.

I think this comes from us not handling the BUILTIN domain properly, and
so we constantly attempt to contact the DC, and then fail an internal
validation step, throwing away that connection.  

I think this is also the cause of crashes folks have seen.

Can I get some confirmation that this helps, so I can merge this into
master (and then 4.0.x)?

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-s4-winbind-Add-special-case-for-BUILTIN-domain.patch
Type: text/x-patch
Size: 4347 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20130618/2e83b773/attachment.bin>


More information about the samba-technical mailing list