[Samba] "Idmap module nss already registered" ???

[Frank Huttner]

Hello,

we are running samba 3.3.8 on RHEL 5.5 - connected to Active Directory via winbind. Everything seems to work fine: matching of UID/GID is working which can be tested with ...

wbinfo -i <username>
wbinfo -n <username>
wbinfo -s SID

... BUT it takes about 1 min until a connection to the samba server can be established or until the available samba shares are listed:

net use x: \\sambatest\sharename
(takes about 1 min)

or

net view \\sambatest
(takes about 1 min)

Here is the part from smb.conf which configures the WINBIND connection.

      ...
       template shell =
       winbind enum users = Yes
       winbind enum groups = Yes
       winbind use default domain = Yes
       winbind nss info = rfc2307
       idmap config TESTDOM : range = 100-1000000
       idmap config TESTDOM : schema_mode = rfc2307
       idmap config TESTDOM : readonly = yes
       idmap config TESTDOM : backend = ad

And here is the corresponding nsswitch.conf section:

passwd:     files winbind

These are the entries from log.winbindd-idmap

[2010/06/14 15:59:02,  0] winbindd/idmap.c:smb_register_idmap(149)
  Idmap module nss already registered!

The delay is caused by winbind since without winbind you get fast response.

Any ideas how to speed-up winbind and/or avoiding the "Idmap module nss already registered" error ?

regards