net-ads-search crashes when tokengroups attribute is requested

[Rowland Penny]

On Mon, 22 Jan 2018 14:34:07 +0200
Isaac Boukris <iboukris at gmail.com> wrote:

> On Mon, Jan 22, 2018 at 1:44 PM, Andrew Bartlett via samba-technical
> <samba-technical at lists.samba.org> wrote:
> > On Mon, 2018-01-22 at 11:33 +0000, Rowland Penny wrote:
> >>
> >> Hi Andrew, I am not entirely convinced the OP is using winbind,
> >> The OP is using Fedora 26 and the debug output is showing this as
> >> the smb.conf:
> >>
> >> [global]
> >> realm = NETWORKING.LAB.ACME.COM
> >> workgroup = NETWORKING
> >> password server = ndc3.NETWORKING.LAB.ACME.COM
> >> security = ADS
> >> winbind use default domain = Yes
> >> winbind nested groups = yes
> >> winbind enum groups = Yes
> >>
> >> Either the OP is using sssd or the smb.conf needs setting up
> >> correctly.
> >
> > Either way, we shouldn't crash and I don't see that either sssd or
> > winbind is involved in the crash path in the 'net ads search'
> > utility.
> 
> Indeed winbind wasn't running at the time, but I can't see the
> relevance. What is wrong  with the smb.conf? I am not using sssd.
> 
> Thanks!

If winbind isn't running, then it probably isn't surprising net crashes.

See here for how to set up a Unix domain member:

https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member

Rowland