[PATCH] Workaround very slow nss_winbind, fix crash on the AD DC (particularly for backups)

[Andrew Bartlett]

On Fri, 2013-06-21 at 05:58 +0000, Philippe.Simonet at swisscom.com wrote:
> Hi Andrew,
> 
> many thanks for you patch, 
> i tested it on 2 different systems but without success (the crash is always happening).
> 
> before applying the patch, I had a strange problem :  I couldn't reproduce the problem (with wbinfo --uid-info 3000000)
> on one of the machine. no chance even if I reinstall, re-provision, ...). I finally reboot the machine and after the reboot the crash
> was reproduceable again (...)

Thank you for finally getting back to me on this.  After seeing it once,
I was also unable to reproduce the crash, and so was patching blind.
This remains illusive. 

Does this alternative patch help?

> on both machines, what I've done : 
> (...untar...)
> cd samba-4.0.6
> patch -p1 < 0001-s4-winbind-Add-special-case-for-BUILTIN-domain.patch
> ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-fhs
> make
> make install
> rm /etc/samba/smb.conf
> samba-tool domain provision --dns-backend=BIND9_FLATFILE --server-role=dc  --realm TEST.CH  --domain TEST --adminpass=Pa$$w0rd
> samba -i -M single
> 
> and ->>>  wbinfo --uid-info 3000000
> 
> I get : 
> ---------------------
> samba version 4.0.6 started.
> Copyright Andrew Tridgell and the Samba Team 1992-2012
> samba: using 'single' process model
> Attempting to autogenerate TLS self-signed keys for https for hostname 'WZ3.test3.ch'
> TLS self-signed keys generated OK
> ===============================================================
> INTERNAL ERROR: Signal 11 in pid 4844 (4.0.6)
> Please read the Trouble-Shooting section of the Samba HOWTO
> ===============================================================
> PANIC: internal error
> Aborted
> ---------------------
> 
> Best regards
> 
> Philippe

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-gensec-work-around-nested-event-loops-by-ensuring-th.patch
Type: text/x-patch
Size: 1092 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20130621/d98f76bb/attachment.bin>