net-ads-search crashes when tokengroups attribute is requested

Isaac Boukris iboukris at
Mon Jan 22 12:34:07 UTC 2018

On Mon, Jan 22, 2018 at 1:44 PM, Andrew Bartlett via samba-technical
<samba-technical at> wrote:
> On Mon, 2018-01-22 at 11:33 +0000, Rowland Penny wrote:
>> Hi Andrew, I am not entirely convinced the OP is using winbind, The OP
>> is using Fedora 26 and the debug output is showing this as the smb.conf:
>> [global]
>> workgroup = NETWORKING
>> password server = ndc3.NETWORKING.LAB.ACME.COM
>> security = ADS
>> winbind use default domain = Yes
>> winbind nested groups = yes
>> winbind enum groups = Yes
>> Either the OP is using sssd or the smb.conf needs setting up correctly.
> Either way, we shouldn't crash and I don't see that either sssd or
> winbind is involved in the crash path in the 'net ads search' utility.

Indeed winbind wasn't running at the time, but I can't see the relevance.
What is wrong  with the smb.conf? I am not using sssd.


More information about the samba-technical mailing list