failed winbind startup for ad_member

[Ralph Böhme]

On Mon, Jan 15, 2018 at 09:43:59AM +0100, Andreas Schneider wrote:
> On Monday, 15 January 2018 08:17:36 CET Ralph Böhme wrote:
> > On Mon, Jan 15, 2018 at 08:02:48AM +0100, Andreas Schneider via samba-
> technical wrote:
> > > On Monday, 15 January 2018 03:30:02 CET Jamie McClymont wrote:
> > > > Hi all,
> > > > 
> > > > >>   winbind seems not to run. createbuiltingroup only works when
> > > > 
> > > > winbind runs.
> > > > 
> > > > >> Looks like there is still something wrong with waiting for winbind
> > > > 
> > > > and setting
> > > > 
> > > > >> it up correctly.
> > > > 
> > > > Patch to fix attached. Interestingly it looks to me like 0f5b1bd9e
> > > > "selftest: fix creation of builtin users in wait_for_start" is
> > > > potentially unnecessary: double-creating the user doesn't seem to cause
> > > > any issues as far as I can tell; that patch just changes ad_member under
> > > > ad_dc from failing 100% of the time to failing 10% of the time (when the
> > > > user is not already created -- some sort of race?).
> > > > 
> > > > Thanks,
> > > > - Jamie
> > > 
> > > RB+
> > 
> > I won't nack, but please read my mail. Can anyone explain to me how that fix
> > helps here? Thanks!
> 
> libwbclient needs to connect to the winbind socket. To find the winbind socket 
> inside of selftest it uses:
> 
> if (nss_wrapper_enabled()) {
> 	env_dir = getenv("SELFTEST_WINBINDD_SOCKET_DIR");
> }
> 
> So we need the NSS_WRAPPER variables to "enable" nss_wrapper. This way wbinfo 
> connects to the right winbindd ...

d'oh! That was the missing piece. :) Thanks!

-slow

-- 
Ralph Boehme, Samba Team       https://samba.org/
Samba Developer, SerNet GmbH   https://sernet.de/en/samba/