net-ads-search crashes when tokengroups attribute is requested

[Andrew Bartlett]

On Mon, 2018-01-22 at 11:33 +0000, Rowland Penny wrote:
> 
> Hi Andrew, I am not entirely convinced the OP is using winbind, The OP
> is using Fedora 26 and the debug output is showing this as the smb.conf:
> 
> [global]
> realm = NETWORKING.LAB.ACME.COM
> workgroup = NETWORKING
> password server = ndc3.NETWORKING.LAB.ACME.COM
> security = ADS
> winbind use default domain = Yes
> winbind nested groups = yes
> winbind enum groups = Yes
> 
> Either the OP is using sssd or the smb.conf needs setting up correctly.

Either way, we shouldn't crash and I don't see that either sssd or
winbind is involved in the crash path in the 'net ads search' utility.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba