[PATCH] Workaround very slow nss_winbind, fix crash on the AD DC (particularly for backups)

[Andrew Bartlett]

On Tue, 2013-06-18 at 10:07 +0200, Volker Lendecke wrote:
> On Tue, Jun 18, 2013 at 12:49:37PM +1000, Andrew Bartlett wrote:
> > This patch attempts to address an issue some have reported where our
> > nss_winbind is even slower than it's simple non-caching implementation
> > needs to be.
> > 
> > I think this comes from us not handling the BUILTIN domain properly, and
> > so we constantly attempt to contact the DC, and then fail an internal
> > validation step, throwing away that connection.  
> > 
> > I think this is also the cause of crashes folks have seen.
> > 
> > Can I get some confirmation that this helps, so I can merge this into
> > master (and then 4.0.x)?
> 
> If you add the Signed-off-by-line, consider this reviewed-by
> me.

The patch with my sign-off is attached.  Based on the above I'll push it
to autobuild with your review tag this evening.

Thanks!

Andrew Bartlett 

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-s4-winbind-Add-special-case-for-BUILTIN-domain.patch
Type: text/x-patch
Size: 4404 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20130619/cd905866/attachment.bin>