net-ads-search crashes when tokengroups attribute is requested

[Rowland Penny]

On Mon, 22 Jan 2018 22:44:26 +1100
Andrew Bartlett <abartlet at samba.org> wrote:

> On Mon, 2018-01-22 at 11:33 +0000, Rowland Penny wrote:
> > 
> > Hi Andrew, I am not entirely convinced the OP is using winbind, The
> > OP is using Fedora 26 and the debug output is showing this as the
> > smb.conf:
> > 
> > [global]
> > realm = NETWORKING.LAB.ACME.COM
> > workgroup = NETWORKING
> > password server = ndc3.NETWORKING.LAB.ACME.COM
> > security = ADS
> > winbind use default domain = Yes
> > winbind nested groups = yes
> > winbind enum groups = Yes
> > 
> > Either the OP is using sssd or the smb.conf needs setting up
> > correctly.
> 
> Either way, we shouldn't crash and I don't see that either sssd or
> winbind is involved in the crash path in the 'net ads search' utility.
> 
> Andrew Bartlett
> 

I do have have winbind set up correctly and the command doesn't crash
for me, it doesn't give any result:

search failed: Operations error

BUT, it doesn't crash.

Rowland