[Samba] winbind stop working after some hours

Daniele samba.10.danber at spamgourmet.com
Mon Apr 30 01:53:01 MDT 2012


Hi, I am trying to use squid proxy with validation on win 2003 active 
directory to filter internet navigation and for it I installed an ubuntu 
10.04 server 64 bit with samba.
My installation looks ok, the server is joined to the AD, ntlm is able 
to validate user, wbinfo report corret information and squid works good.
The problem arise after some hours: winbind become not able to resolv 
info for users and to retrieve info for groups, so squid become not able 
to know id a user belong to a group allowed to navigate and refuse 
connection.
Restarting winbind solve the problem for some hours.
wbinfo report no particular problem; just give back messages like "could 
not get info for user xx" and also setting debuglevel to various numbers 
reports (to me) no significant clues.
I made a workaround scheduling a restart of winbind service at every 
half hour and it works, but is not so elegant ...
Do you have any suggestion to solve this problem?
Thank you
Daniele

samba/winbind version is 3.4.7
squid is 2.7.STABLE7
os is 2.6.32-41-server #88-Ubuntu x86_64 GNU/Linux

smb.conf:
[global]
     workgroup = CED
     realm = CED.AOS
     server string = Samba Server Version %v
     security = ADS
     password server = 172.18.10.24 172.18.10.23
     name resolve order = lmhosts host bcast
     ldap ssl = no
     idmap uid = 15000-25000
     idmap gid = 15000-25000
     winbind separator = +
     winbind enum users = Yes
     winbind enum groups = Yes
     winbind use default domain = Yes
     cups options = raw
[homes]
     comment = Home Directories
     read only = No
     browseable = No
     browsable = No

[printers]
     comment = All Printers
     path = /var/spool/samba
     printable = Yes
     browseable = No
     browsable = No

----
Le informazioni contenute in questa comunicazione e gli eventuali documenti allegati hanno carattere confidenziale e sono ad uso esclusivo del destinatario. Nel caso in cui questa comunicazione Vi sia pervenuta per errore, Vi informiamo che la sua diffusione e riproduzione e' contraria alla legge, pertanto Vi preghiamo di darci prontamente avviso e di cancellare quanto ricevuto.
Grazie.

This e-mail message and any files transmitted with it contain confidential information intended only for the person(s) to whom it is addressed. If you are not the intended recipient, you are hereby notified that any use or distribution of this e-mail is strictly prohibited: please notify the sender and delete the original message.
Thank you.


More information about the samba mailing list