[Samba] Winbind issue

[Robert Mattson]

All,

After upgrading to samba 3.0.30 on gentoo amd64 because of my recent
best friend CVE-2008-1105

 

My winbind daemon is 'hanging up', and refusing to respond to pings
after a few minutes of activity.

Wbinfo -u, getent passwd all work successfully, then after a bit wbinfo
-p just tells me winbind dies.

I have 3.0.30/winbind on another machine, also amd64 that is working....
So I'm a little confused. (the patch levels and kernels are different on
the two machines)

 

The failing server has mit-krb5-1.6.3-r1 openldap-2.3.41 and kernel
2.6.16-gentoo-r9

Glibc-2.6.1

gcc version 3.4.4 (Gentoo 3.4.4-r1, ssp-3.4.4-1.0, pie-8.7.8)

 

This is an excerpt of the log at the point winbind dies;

At the point this excerpt stops, winbind establishes a hundred or so
connections with ads,

I've snipped it for brevity.

 

 

[2008/06/01 00:16:31, 1] nsswitch/winbindd_ads.c:query_user_list(209)

  Not a user account? atype=0x30000000

[2008/06/01 00:16:31, 1] nsswitch/winbindd_ads.c:query_user_list(209)

  Not a user account? atype=0x30000000

[2008/06/01 00:16:31, 1] nsswitch/winbindd_ads.c:query_user_list(209)

  Not a user account? atype=0x30000000

[2008/06/01 00:16:31, 1] nsswitch/winbindd_ads.c:query_user_list(209)

  Not a user account? atype=0x30000000

[2008/06/01 00:16:31, 1] nsswitch/winbindd_ads.c:query_user_list(209)

  Not a user account? atype=0x30000000

[2008/06/01 00:16:31, 1] nsswitch/winbindd_ads.c:query_user_list(209)

  Not a user account? atype=0x30000000

[2008/06/01 00:16:31, 1] nsswitch/winbindd_ads.c:query_user_list(209)

  Not a user account? atype=0x30000000

[2008/06/01 00:16:31, 1] nsswitch/winbindd_ads.c:query_user_list(209)

  Not a user account? atype=0x30000000

[2008/06/01 00:16:31, 1] nsswitch/winbindd_ads.c:query_user_list(209)

  Not a user account? atype=0x30000000

[2008/06/01 00:16:31, 1] nsswitch/winbindd_ads.c:query_user_list(209)

  Not a user account? atype=0x30000000

[2008/06/01 00:16:31, 1] nsswitch/winbindd_ads.c:query_user_list(209)

  Not a user account? atype=0x30000000

[2008/06/01 00:16:31, 1] nsswitch/winbindd_ads.c:query_user_list(209)

  Not a user account? atype=0x30000000

[2008/06/01 00:17:53, 1] nsswitch/idmap.c:idmap_init(377)

  Initializing idmap domains

[2008/06/01 00:17:53, 1]
libads/ldap_utils.c:ads_do_search_retry_internal(115)

  ads reopen failed after error Referral

[2008/06/01 00:17:53, 1]
libads/ldap_utils.c:ads_do_search_retry_internal(115)

  ads reopen failed after error Referral

[2008/06/01 00:17:54, 1]
libads/ldap_utils.c:ads_do_search_retry_internal(115)

  ads reopen failed after error Referral

[2008/06/01 00:17:54, 1]
libads/ldap_utils.c:ads_do_search_retry_internal(115)

  ads reopen failed after error Referral

[2008/06/01 00:17:54, 1]
libads/ldap_utils.c:ads_do_search_retry_internal(115)

  ads reopen failed after error Referral

[2008/06/01 00:17:54, 1]
libads/ldap_utils.c:ads_do_search_retry_internal(115)

  ads reopen failed after error Referral

.

.

.

.

<snip>

 

 

Anyway, if someone has any suggestions - I'd really appreciate it.

 

 

Cheers,

Rob