[Samba] winbind + samba limits with large AD?

[Ralf Gross]

Ralf Gross schrieb:
> One thing I also noticed with the ubuntu package: the groupnames are
> only numbers. I
> 
> ralfgro at WU7E0003:~$ /opt/samba32/bin/wbinfo -r ralfgro
> 2003
> 2004
> 2005
> 2006
> 2007
> 2008
> 2009
> [...]

I obviously screwed the nsswitch.conf. After correcting this, I get
the group names.

But the whole thing is still very fragile. A simpe 'id -a' takes ages
and I just killed winbind after one minute with this result.

ralfgro at WU7E0003:~$ id -a
uid=2000(ralfgro) gid=2000(emea\domain users) Gruppen=2000(emea\domain
users),2003(emea\emtc_tsrv_restrict_cul_a),2004,2005,2006,2007,2008,2009,2010,2011,2012,2013,2014,2022,2025,2026,2028,2029,2033,2035,2036,2037,2038,2039,2041,2042,2043,2044,2046,2048,2049,2050,2051,2053,2054,2056,2057,2058,2059,2060,2062,2063,2064,2066,2067,2069,2070,2071,2072,2073,2075,2076,2079,2080,2081,2082,2083,2084,2085,2086,2088,2089,2090,2093,2094,2099,2103,2109,2111,2113,2114,2115,2116,2119,2122,2125,2126,2127,2130,2131,2133

This is the debug output of a second try...

[2007/07/12 09:28:10, 3] nsswitch/winbindd_group.c:winbindd_getgrgid(886)
  [ 6914]: getgrgid 2004
[2007/07/12 09:28:10, 1] nsswitch/winbindd_group.c:getgrsid_sid2gid_recv(760)
  Can't find domain from name (EMEA\EMTC_ITS_MTC)
[2007/07/12 09:28:10, 3] nsswitch/winbindd_group.c:winbindd_getgrgid(886)
  [ 6914]: getgrgid 2005
[2007/07/12 09:28:15, 3] nsswitch/winbindd_ads.c:lookup_groupmem(1099)
  ads lookup_groupmem for sid=S-1-5-21-1482476501-1450960922-725345543-152681 succeeded
---> pause
[2007/07/12 09:30:33, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(521)
  [ 6914]: request interface version
[2007/07/12 09:30:33, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(521)
  [ 6915]: request interface version
[2007/07/12 09:30:33, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(521)
  [ 6914]: request interface version
[2007/07/12 09:30:33, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(521)
  [ 6914]: request interface version
[2007/07/12 09:30:33, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(521)
  [ 6914]: request interface version
[2007/07/12 09:30:33, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(554)
  [ 6914]: request location of privileged pipe
[2007/07/12 09:30:33, 3] nsswitch/winbindd_group.c:winbindd_getgrgid(886)
  [ 6914]: getgrgid 2008
[2007/07/12 09:30:33, 3] nsswitch/winbindd_ads.c:lookup_groupmem(1099)
[...]
[2007/07/12 09:39:21, 3] nsswitch/winbindd_group.c:winbindd_getgrgid(886)
  [ 6914]: getgrgid 2076
[...]
 
During this command no connection to any share was possible!

Ralf