net-ads-search crashes when tokengroups attribute is requested

Andrew Bartlett abartlet at
Mon Jan 22 11:44:26 UTC 2018

On Mon, 2018-01-22 at 11:33 +0000, Rowland Penny wrote:
> Hi Andrew, I am not entirely convinced the OP is using winbind, The OP
> is using Fedora 26 and the debug output is showing this as the smb.conf:
> [global]
> workgroup = NETWORKING
> password server = ndc3.NETWORKING.LAB.ACME.COM
> security = ADS
> winbind use default domain = Yes
> winbind nested groups = yes
> winbind enum groups = Yes
> Either the OP is using sssd or the smb.conf needs setting up correctly.

Either way, we shouldn't crash and I don't see that either sssd or
winbind is involved in the crash path in the 'net ads search' utility.

Andrew Bartlett

Andrew Bartlett             
Authentication Developer, Samba Team
Samba Developer, Catalyst IT

More information about the samba-technical mailing list