[Samba] winbind caused "ls -l" hang on solaris 8

[Bai, Junmin]

Don

Thanks for your reply. I understand what you mean. The command
ldapsearch works fine and wbinfo -u and wbinfo -g work beautifully.

It's openldap on solaris 8. Does it need any special configuration?

Cheers
Junmin

-----Original Message-----
From: samba-bounces+junmin.bai=dha.gov.au at lists.samba.org
[mailto:samba-bounces+junmin.bai=dha.gov.au at lists.samba.org] On Behalf
Of samba at piven.org
Sent: Tuesday, 20 November 2007 11:52 PM
To: samba at lists.samba.org
Subject: Re: [Samba] winbind caused "ls -l" hang on solaris 8


Bai, Junmin wrote:
[%<]
> The problem is the entry "passwd: files winbind" in /etc/nsswitch.conf

> caused "ls -l" and Samba hang. If winbind is removed from 
> nsswitch.conf, "ls -l" worked fine but Samba lost the ability to 
> authenticate users against ADS.
> 
> Does anyone know how to build Samba with ADS support on Solaris 8 
> without causing "ls -l" hang?

Do you have a working LDAP client configuration?  Winbind *needs* a 
working LDAP configuration in order to contact the AD server; absent 
that, you'll get 60-90-second delays while the LDAP queries timeout. 
(The timeouts happen with anything that queries the passwd/group 
database, not just ls.  You just notice it with ls -l because ls has to 
query both passwd and group to map uid/gid to names.)

Take winbind out of your nsswitch.conf so you can use your system, get 
LDAP queries working to where you can fetch user information from your 
AD server, then reconfigure Winbind and put it back in.

Don
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Important: This email and any attachments may be confidential and may be privileged.
If the email is not addressed to you please return it to us and destroy any copies you may have.
Unauthorised use of this email and any attachment is prohibited.

Defence Housing Australia will send you correspondence and documents
 by email if you request or if you use email to contact us.
Email is not a secure form of communication and may transmit computer viruses.
We take no responsibility for misdirection, corruption or unauthorised use of email communications
 nor for any damage that may be caused as a result of transmitting or receiving an  email communication.
It is your responsibility to establish your own protection against viruses or other damage. 

This message has been scanned for viruses
and spam by SurfControl RiskFilter - E-mail.