Problem with AD membership in an AD with more the 100.000 group (possible regression in 4.12?)

[Andrew Bartlett]

On Thu, 2021-05-20 at 19:46 +1200, Andrew Bartlett via samba-technical
wrote:
> On Thu, 2021-05-20 at 08:36 +0200, Dr. Hansjörg Maurer wrote:
> > Am 19.05.21 um 11:55 schrieb Andrew Bartlett:
> > > On Wed, 2021-05-19 at 07:56 +0200, Dr. Hansjörg Maurer wrote:
> > > > > OK, so this case it doesn't happen, which is the one I
> > > > > patched.
> > > > the gdb run took place with the unpatched version
> > > > 
> > > Thanks, can you try with the patched one?  I'm thinking we must
> > > be
> > > hitting a different case now, if you still have issues, as the
> > > lines
> > > you show are gone with this patch (I hope).
> > Hi Andrew
> > 
> > here is the gdb bt output from the patched version
> > 
> > I patched the sources an rebuild the RPM with the spec file.
> > I would expect, this would apply the changes to the winbind.idl
> > file?
> 
> Thanks, yes this seems to have been applied.  I've looked at this
> some
> more and I see where we leak the tokens.
> 
> I'll see what we can do, I think for a conformant array (what I've
> changed this to) we can be more efficient. 
> 
> Andrew Bartlett
> 

Try the attached patch.  I think I've finally fixed the issue.

See https://gitlab.com/samba-team/samba/-/merge_requests/1972

Andrew Bartlett

> 
-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 1972.patch
Type: text/x-patch
Size: 14507 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20210520/e960f1cc/1972.bin>