wbinfo -u /-g error after upgrade to 4.4.2 or 4.3.8 (security = ads)

[Stefan Metzmacher]

Hi,

I got it reproduced.

net ads search -P '(objectClass=user)'

triggers it if there're a lot of users (tested with 261).

I'll post a fix shortly.

metze

Am 22.04.2016 um 12:55 schrieb Stefan Metzmacher:
> Hi Anton,
> 
>>>> wbinfo -u oder wbinfo -g did not show any domain users/groups any more  
>>
>>> It looks like zero timeout set. But it set by default to 15s, yes? Setting ldap timeout to highter values changes nothing for me.
>>>
>>
>> source3/libads/ldap.c:
>> ----------------
>>   /*
>>    * A bug in OpenLDAP means ldap_search_ext_s can return
>>    * LDAP_SUCCESS but with a NULL res pointer. Cope with
>>    * this. See bug #6279 for details. JRA.
>>    */
>>
>>         if (*res == NULL) 
>>                 return LDAP_TIMELIMIT_EXCEEDED;
>> --------------------
>> I've added additional DEBUG to this line and, yes, there is no
>> timeout, really.
> 
> 
> I guess this is related to the SASL wrapping that we put
> between OpenLDAP socket and ldap layer.
> 
> Can you file a bug at https://bugzilla.samba.org
> and upload a description, level 10 log (log.winbind* and log.wb-*) files
> and network caputures
> (see https://wiki.samba.org/index.php/Capture_Packets) (we need the
> traffic of all ports).
> 
> metze
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20160422/c203fc7c/signature.sig>