[Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10
Dimitar Hristov
dimitar.hristov at outlook.com
Wed Apr 20 14:18:28 UTC 2016
Hi list,
Some more useful information - I compiled 4.2.11 on CentOS 7.2, and tested with the same configuration files and AD DC, running on MS Windows 2012 R2.
The issue still remains.
Regards,
Dimitar
> From: dimitar.hristov at outlook.com
> To: amartin at xes-inc.com
> Date: Wed, 20 Apr 2016 13:23:05 +0200
> CC: samba at lists.samba.org
> Subject: Re: [Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10
>
> Hi list,
>
> I'd like to update you on the issue, as I did some more tests. First, I've added some directives to smb.conf (in italic):
>
> [global]
> netbios name = testserver
> security = ADS
> workgroup = EXAMPLE
> realm = EXAMPLE.COM
> log file = /var/log/samba/%m.log
> log level = 10
> dedicated keytab file = /etc/krb5.keytab
> kerberos method = secrets and keytab
> winbind refresh tickets = yes
> winbind trusted domains only = no
> winbind use default domain = yes
> winbind enum users = yes
> winbind enum groups = yes
> winbind separator = +
> client ldap sasl wrapping = plain
> idmap config EXAMPLE : backend = ad
> idmap config EXAMPLE:schema_mode = rfc2307
> idmap config EXAMPLE:range = 10000-99999
> winbind nss info = rfc2307
> load printers = no
> printing = bsd
> printcap name = /dev/null
>
>
> With "client ldap sasl wrapping = plain" set, the domain doesn't go "offline". This can be seen by comparing the partial log output after "wbinfo -g", with the one in my first email.
>
> Also, I have tested joining a newly provisioned machine to the domain with 4.2.3 and 4.2.10 - it works without any issues when using 4.2.3, and it doesn't work with 4.2.10. I used "net ads join" with debuglevel=1, please see the output (working one - with 4.2.3, and not working - with 4.2.10):
>
> ### Join with samba 4.2.10###
>
> net ads join -U Administrator --debuglevel=1
> Enter Administrator's password:
> libnet_Join:
> libnet_JoinCtx: struct libnet_JoinCtx
> in: struct libnet_JoinCtx
> dc_name : NULL
> machine_name : 'TESTSERVER'
> domain_name : *
> domain_name : 'EXAMPLE.COM'
> account_ou : NULL
> admin_account : 'Administrator'
> admin_domain : NULL
> machine_password : NULL
> join_flags : 0x00000023 (35)
> 0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS
> 0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
> 0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
> 0: WKSSVC_JOIN_FLAGS_DEFER_SPN
> 0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
> 0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
> 1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
> 0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
> 0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
> 1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
> 1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
> os_version : NULL
> os_name : NULL
> create_upn : 0x00 (0)
> upn : NULL
> modify_config : 0x00 (0)
> ads : NULL
> debug : 0x01 (1)
> use_kerberos : 0x00 (0)
> secure_channel_type : SEC_CHAN_WKSTA (2)
> Failed to setup SPNEGO negTokenInit request: NT_STATUS_INTERNAL_ERROR
> libnet_Join:
> libnet_JoinCtx: struct libnet_JoinCtx
> out: struct libnet_JoinCtx
> account_name : NULL
> netbios_domain_name : 'EXAMPLE'
> dns_domain_name : 'example.com'
> forest_name : 'example.com'
> dn : NULL
> domain_sid : *
> domain_sid : S-1-5-21-1214440339-1979792683-1801674531
> modified_config : 0x00 (0)
> error_string : 'Failed to set machine spn: Time limit exceeded
> Do you have sufficient permissions to create machine accounts?'
> domain_is_ad : 0x01 (1)
> result : WERR_GENERAL_FAILURE
> Failed to join domain: Failed to set machine spn: Time limit exceeded
> Do you have sufficient permissions to create machine accounts?
>
> ### End join with samba 4.2.10 ###
>
> ### Join with samba 4.2.3 ###
>
> net ads join -U Administrator --debuglevel=1
> Enter Administrator's password:
> libnet_Join:
> libnet_JoinCtx: struct libnet_JoinCtx
> in: struct libnet_JoinCtx
> dc_name : NULL
> machine_name : 'TESTSERVER'
> domain_name : *
> domain_name : 'EXAMPLE.COM'
> account_ou : NULL
> admin_account : 'Administrator'
> admin_domain : NULL
> machine_password : NULL
> join_flags : 0x00000023 (35)
> 0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS
> 0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
> 0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
> 0: WKSSVC_JOIN_FLAGS_DEFER_SPN
> 0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
> 0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
> 1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
> 0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
> 0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
> 1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
> 1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
> os_version : NULL
> os_name : NULL
> create_upn : 0x00 (0)
> upn : NULL
> modify_config : 0x00 (0)
> ads : NULL
> debug : 0x01 (1)
> use_kerberos : 0x00 (0)
> secure_channel_type : SEC_CHAN_WKSTA (2)
> libnet_Join:
> libnet_JoinCtx: struct libnet_JoinCtx
> out: struct libnet_JoinCtx
> account_name : NULL
> netbios_domain_name : 'EXAMPLE'
> dns_domain_name : 'example.com'
> forest_name : 'example.com'
> dn : 'CN=testserver,OU=DefaultBin,DC=example,DC=com'
> domain_sid : *
> domain_sid : S-1-5-21-1214440339-1979792683-1801674531
> modified_config : 0x00 (0)
> error_string : NULL
> domain_is_ad : 0x01 (1)
> result : WERR_OK
> Using short domain name -- EXAMPLE
> Joined 'TESTSERVER' to dns domain 'example.com'
>
> ### End join with samba 4.2.3 ###
>
> ###/var/log/samba/winbind.log - after "wbinfo -g"###
>
> [2016/04/20 14:01:44.879293, 10, pid=2301, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:725(process_request)
> process_request: Handling async request 2429:LIST_GROUPS
> [2016/04/20 14:01:44.879299, 3, pid=2301, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_list_groups.c:58(winbindd_list_groups_send)
> list_groups EXAMPLE
> [2016/04/20 14:01:44.879313, 1, pid=2301, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> wbint_QueryGroupList: struct wbint_QueryGroupList
> in: struct wbint_QueryGroupList
> [2016/04/20 14:01:44.879345, 1, pid=2301, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> wbint_QueryGroupList: struct wbint_QueryGroupList
> out: struct wbint_QueryGroupList
> groups : *
> groups: struct wbint_Principals
> num_principals : 0
> principals: ARRAY(0)
> result : NT_STATUS_IO_TIMEOUT
> [2016/04/20 14:01:44.879368, 10, pid=2301, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_list_groups.c:128(winbindd_list_groups_done)
> Domain EXAMPLE returned 0 groups
> [2016/04/20 14:01:44.879373, 10, pid=2301, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_list_groups.c:134(winbindd_list_groups_done)
> list_groups for domain EXAMPLE failed
> [2016/04/20 14:01:44.879378, 10, pid=2301, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:787(wb_request_done)
> wb_request_done[2429:LIST_GROUPS]: NT_STATUS_OK
>
> ###End /var/log/samba/winbind.log - after "wbinfo -g" ###
>
> Hope that helps, as quite a lot of people are expiriencing the same issue. I missed to provide information about the distributions used for testing - CentOS 7.2, Debian Jessie 8.4
>
> Regards,
> Dimitar
>
>
> > Date: Tue, 19 Apr 2016 08:40:45 -0500
> > From: amartin at xes-inc.com
> > To: dimitar.hristov at outlook.com
> > CC: samba at lists.samba.org
> > Subject: Re: [Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10
> >
> > I am also having this issue, however in my case it is worse - samba shares do not work
> > and "getent passwd <domain user>" also does not work. I tried adding the following to the
> > "[global]" section of my smb.conf as suggested elsewhere, but no improvement:
> > client ldap sasl wrapping = plain
> >
> > My smb.conf is very similar to yours, however I also have the following options set:
> > encrypt passwords = true
> > winbind nss info = rfc2307
> >
> > Thanks,
> >
> > Andrew
> >
> > ----- Original Message -----
> > > From: "Dimitar Hristov" <dimitar.hristov at outlook.com>
> > > To: samba at lists.samba.org
> > > Sent: Tuesday, April 19, 2016 8:23:50 AM
> > > Subject: [Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10
> > >
> > > Hi list,
> > >
> > >
> > >
> > >
> > >
> > > After the badlock patching of all samba machines in our organization
> > > (all of them are domain members), some functionalities have stopped
> > > working, more particularly:
> > >
> > >
> > > - wbinfo -g (no output at all)
> > >
> > >
> > > - wbinfo -u (no output at all)
> > >
> > >
> > > - getent passwd (displays only local users)
> > >
> > >
> > > - getent group
> > >
> > >
> > >
> > >
> > >
> > > working functionalities:
> > >
> > >
> > > - samba shares are still accessible, with appropriate users set as
> > > "valid", "write users" etc
> > >
> > >
> > > - getent passwd <domain user>
> > >
> > >
> > > - wbinfo --name-to-sid
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > Configuration files:
> > >
> > >
> > > - /etc/samba/smb.conf
> > >
> > >
> > > [global]
> > >
> > >
> > > workgroup = EXAMPLE
> > >
> > >
> > > realm = EXAMPLE.COM
> > >
> > >
> > > security = ADS
> > >
> > >
> > > dedicated keytab file = /etc/krb5.keytab
> > >
> > >
> > > kerberos method = secrets and keytab
> > >
> > >
> > > log file = /var/log/samba/%m.log
> > >
> > >
> > > load printers = No
> > >
> > >
> > > printcap name = /dev/null
> > >
> > >
> > > winbind separator = +
> > >
> > >
> > > winbind enum users = Yes
> > >
> > >
> > > winbind enum groups = Yes
> > >
> > >
> > > winbind use default domain = Yes
> > >
> > >
> > > winbind refresh tickets = Yes
> > >
> > >
> > > idmap config example : backend = ad
> > >
> > >
> > > idmap config * : backend = tdb
> > >
> > >
> > > printing = bsd
> > >
> > >
> > >
> > >
> > >
> > > - /etc/krb5.conf
> > >
> > >
> > > [logging]
> > >
> > >
> > > default = FILE:/var/log/krb5libs.log
> > >
> > >
> > > kdc = FILE:/var/log/krb5kdc.log
> > >
> > >
> > > admin_server = FILE:/var/log/kadmind.log
> > >
> > >
> > >
> > >
> > >
> > > [libdefaults]
> > >
> > >
> > > dns_lookup_kdc = false
> > >
> > >
> > > dns_lookup_realm = false
> > >
> > >
> > > ticket_lifetime = 24h
> > >
> > >
> > > renew_lifetime = 7d
> > >
> > >
> > > forwardable = true
> > >
> > >
> > > rdns = false
> > >
> > >
> > > default_realm = EXAMPLE.COM
> > >
> > >
> > > default_ccache_name = KEYRING:persistent:%{uid}
> > >
> > >
> > >
> > >
> > >
> > > [realms]
> > >
> > >
> > > EXAMPLE.COM = {
> > >
> > >
> > > kdc = example-adc01.example.com
> > >
> > >
> > > admin_server = example-adc01.example.com
> > >
> > >
> > > }
> > >
> > >
> > >
> > >
> > >
> > > [domain_realm]
> > >
> > >
> > > .example.com = EXAMPLE.COM
> > >
> > >
> > > example.com = EXAMPLE.COM
> > >
> > >
> > >
> > >
> > >
> > > - /etc/nsswitch.conf
> > >
> > >
> > >
> > >
> > >
> > > passwd: files winbind
> > >
> > >
> > > shadow: files winbind
> > >
> > >
> > > group: files winbind
> > >
> > >
> > > initgroups: files
> > >
> > >
> > >
> > >
> > >
> > > hosts: files dns myhostname
> > >
> > >
> > >
> > >
> > >
> > > bootparams: nisplus [NOTFOUND=return] files
> > >
> > >
> > >
> > >
> > >
> > > ethers: files
> > >
> > >
> > > netmasks: files
> > >
> > >
> > > networks: files
> > >
> > >
> > > protocols: files winbind
> > >
> > >
> > > rpc: files winbind
> > >
> > >
> > > services: files winbind
> > >
> > >
> > >
> > >
> > >
> > > netgroup: nisplus sss
> > >
> > >
> > >
> > >
> > >
> > > publickey: nisplus
> > >
> > >
> > >
> > >
> > >
> > > automount: files nisplus
> > >
> > >
> > > aliases: files nisplus
> > >
> > >
> > >
> > >
> > >
> > > Installed packages:
> > >
> > >
> > > - working environment
> > >
> > >
> > > samba-4.2.3-12.el7_2.x86_64
> > >
> > >
> > > samba-common-4.2.3-12.el7_2.noarch
> > >
> > >
> > > samba-winbind-modules-4.2.3-12.el7_2.x86_64
> > >
> > >
> > > samba-winbind-clients-4.2.3-12.el7_2.x86_64
> > >
> > >
> > > samba-common-tools-4.2.3-12.el7_2.x86_64
> > >
> > >
> > > samba-common-libs-4.2.3-12.el7_2.x86_64
> > >
> > >
> > > samba-winbind-4.2.3-12.el7_2.x86_64
> > >
> > >
> > > samba-libs-4.2.3-12.el7_2.x86_64
> > >
> > >
> > > samba-client-libs-4.2.3-12.el7_2.x86_64
> > >
> > >
> > > krb5-workstation-1.13.2-12.el7_2.x86_64
> > >
> > >
> > > krb5-libs-1.13.2-12.el7_2.x86_64
> > >
> > >
> > >
> > >
> > >
> > > - not working (after the update)
> > >
> > >
> > > samba-winbind-4.2.10-6.el7_2.x86_64
> > >
> > >
> > > samba-libs-4.2.10-6.el7_2.x86_64
> > >
> > >
> > > samba-common-4.2.10-6.el7_2.noarch
> > >
> > >
> > > samba-client-libs-4.2.10-6.el7_2.x86_64
> > >
> > >
> > > samba-winbind-modules-4.2.10-6.el7_2.x86_64
> > >
> > >
> > > samba-winbind-clients-4.2.10-6.el7_2.x86_64
> > >
> > >
> > > samba-common-tools-4.2.10-6.el7_2.x86_64
> > >
> > >
> > > samba-common-libs-4.2.10-6.el7_2.x86_64
> > >
> > >
> > > samba-4.2.10-6.el7_2.x86_64
> > >
> > >
> > > krb5-workstation-1.13.2-12.el7_2.x86_64
> > >
> > >
> > > krb5-libs-1.13.2-12.el7_2.x86_64
> > >
> > >
> > >
> > >
> > >
> > > ---------------------
> > >
> > >
> > >
> > >
> > >
> > > Partial log output after "wbinfo -g" -
> > > /var/log/samba/winbind.log:
> > >
> > >
> > >
> > >
> > >
> > > [2016/04/19 14:58:40.635486, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd.c:725(process_request)
> > >
> > >
> > > process_request: Handling async request 3640:LIST_GROUPS
> > >
> > >
> > > [2016/04/19 14:58:40.635501, 3, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd_list_groups.c:58(winbindd_list_groups_send)
> > >
> > >
> > > list_groups EXAMPLE
> > >
> > >
> > > [2016/04/19 14:58:40.635520, 1, pid=3634, effective(0, 0), real(0,
> > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > >
> > >
> > > wbint_QueryGroupList: struct wbint_QueryGroupList
> > >
> > >
> > > in: struct wbint_QueryGroupList
> > >
> > >
> > > [2016/04/19 14:58:42.112485, 10, pid=3634, effective(0, 0), real(0,
> > > 0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> > >
> > >
> > > messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from
> > > 3635
> > >
> > >
> > > [2016/04/19 14:58:42.112513, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)
> > >
> > >
> > > Domain EXAMPLE is marked as offline now.
> > >
> > >
> > > [2016/04/19 14:58:42.113574, 1, pid=3634, effective(0, 0), real(0,
> > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > >
> > >
> > > wbint_QueryGroupList: struct wbint_QueryGroupList
> > >
> > >
> > > out: struct wbint_QueryGroupList
> > >
> > >
> > > groups : *
> > >
> > >
> > > groups: struct wbint_Principals
> > >
> > >
> > > num_principals : 0
> > >
> > >
> > > principals: ARRAY(0)
> > >
> > >
> > > result : NT_STATUS_IO_TIMEOUT
> > >
> > >
> > > [2016/04/19 14:58:42.113616, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd_list_groups.c:128(winbindd_list_groups_done)
> > >
> > >
> > > Domain EXAMPLE returned 0 groups
> > >
> > >
> > > [2016/04/19 14:58:42.113623, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd_list_groups.c:134(winbindd_list_groups_done)
> > >
> > >
> > > list_groups for domain EXAMPLE failed
> > >
> > >
> > > [2016/04/19 14:58:42.113630, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd.c:787(wb_request_done)
> > >
> > >
> > > wb_request_done[3640:LIST_GROUPS]: NT_STATUS_OK
> > >
> > >
> > > [2016/04/19 14:58:42.113649, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> > >
> > >
> > > winbind_client_response_written[3640:LIST_GROUPS]: delivered
> > > response to client
> > >
> > >
> > > [2016/04/19 14:58:42.114552, 6, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd.c:957(winbind_client_request_read)
> > >
> > >
> > > closing socket 28, client exited
> > >
> > >
> > > [2016/04/19 14:59:13.272624, 10, pid=3634, effective(0, 0), real(0,
> > > 0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> > >
> > >
> > > messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from
> > > 3635
> > >
> > >
> > > [2016/04/19 14:59:13.272656, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)
> > >
> > >
> > > Domain EXAMPLE is marked as online now.
> > >
> > >
> > >
> > >
> > > Partial log output after "wbinfo -u" -
> > > /var/log/samba/winbind.log:
> > >
> > >
> > >
> > >
> > >
> > > [2016/04/19 15:03:25.308776, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd.c:725(process_request)
> > >
> > >
> > > process_request: Handling async request 3666:LIST_USERS
> > >
> > >
> > > [2016/04/19 15:03:25.308788, 3, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd_list_users.c:58(winbindd_list_users_send)
> > >
> > >
> > > list_users EXAMPLE
> > >
> > >
> > > [2016/04/19 15:03:25.308808, 1, pid=3634, effective(0, 0), real(0,
> > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > >
> > >
> > > wbint_QueryUserList: struct wbint_QueryUserList
> > >
> > >
> > > in: struct wbint_QueryUserList
> > >
> > >
> > > [2016/04/19 15:03:29.418016, 10, pid=3634, effective(0, 0), real(0,
> > > 0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> > >
> > >
> > > messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from
> > > 3635
> > >
> > >
> > > [2016/04/19 15:03:29.418040, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)
> > >
> > >
> > > Domain EXAMPLE is marked as offline now.
> > >
> > >
> > > [2016/04/19 15:03:29.418101, 1, pid=3634, effective(0, 0), real(0,
> > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > >
> > >
> > > wbint_QueryUserList: struct wbint_QueryUserList
> > >
> > >
> > > out: struct wbint_QueryUserList
> > >
> > >
> > > users : *
> > >
> > >
> > > users: struct wbint_userinfos
> > >
> > >
> > > num_userinfos : 0x00000000 (0)
> > >
> > >
> > > userinfos: ARRAY(0)
> > >
> > >
> > > result : NT_STATUS_IO_TIMEOUT
> > >
> > >
> > > [2016/04/19 15:03:29.418172, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd_list_users.c:128(winbindd_list_users_done)
> > >
> > >
> > > Domain EXAMPLE returned 0 users
> > >
> > >
> > > [2016/04/19 15:03:29.418180, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd_list_users.c:134(winbindd_list_users_done)
> > >
> > >
> > > List_users for domain EXAMPLE failed
> > >
> > >
> > > [2016/04/19 15:03:29.418187, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd.c:787(wb_request_done)
> > >
> > >
> > > wb_request_done[3666:LIST_USERS]: NT_STATUS_OK
> > >
> > >
> > > [2016/04/19 15:03:29.418206, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> > >
> > >
> > > winbind_client_response_written[3666:LIST_USERS]: delivered
> > > response to client
> > >
> > >
> > > [2016/04/19 15:03:29.420295, 6, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd.c:957(winbind_client_request_read)
> > >
> > >
> > > closing socket 28, client exited
> > >
> > >
> > > [2016/04/19 15:04:00.414647, 10, pid=3634, effective(0, 0), real(0,
> > > 0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> > >
> > >
> > > messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from
> > > 3635
> > >
> > >
> > > [2016/04/19 15:04:00.414669, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)
> > >
> > >
> > > Domain EXAMPLE is marked as online now.
> > >
> > >
> > >
> > >
> > > Partial log output after "getent passwd" -
> > > /var/log/samba/winbind.log (the local users get displayed,
> > > domain users - do not):
> > >
> > >
> > >
> > >
> > >
> > > [2016/04/19 15:04:41.367195, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd.c:725(process_request)
> > >
> > >
> > > process_request: Handling async request 3673:GETPWENT
> > >
> > >
> > > [2016/04/19 15:04:41.367208, 3, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd_getpwent.c:50(winbindd_getpwent_send)
> > >
> > >
> > > [ 3673]: getpwent
> > >
> > >
> > > [2016/04/19 15:04:41.367307, 1, pid=3634, effective(0, 0), real(0,
> > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > >
> > >
> > > wbint_QueryUserList: struct wbint_QueryUserList
> > >
> > >
> > > in: struct wbint_QueryUserList
> > >
> > >
> > > [2016/04/19 15:04:41.367621, 1, pid=3634, effective(0, 0), real(0,
> > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > >
> > >
> > > wbint_QueryUserList: struct wbint_QueryUserList
> > >
> > >
> > > out: struct wbint_QueryUserList
> > >
> > >
> > > users : *
> > >
> > >
> > > users: struct wbint_userinfos
> > >
> > >
> > > num_userinfos : 0x00000000 (0)
> > >
> > >
> > > userinfos: ARRAY(0)
> > >
> > >
> > > result : NT_STATUS_OK
> > >
> > >
> > > [2016/04/19 15:04:41.367652, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/wb_query_user_list.c:69(wb_query_user_list_done)
> > >
> > >
> > > dcerpc_wbint_QueryUserList returned 0 users
> > >
> > >
> > > [2016/04/19 15:04:41.367661, 1, pid=3634, effective(0, 0), real(0,
> > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > >
> > >
> > > wbint_QueryUserList: struct wbint_QueryUserList
> > >
> > >
> > > in: struct wbint_QueryUserList
> > >
> > >
> > > [2016/04/19 15:04:41.367680, 1, pid=3634, effective(0, 0), real(0,
> > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > >
> > >
> > > wbint_QueryUserList: struct wbint_QueryUserList
> > >
> > >
> > > out: struct wbint_QueryUserList
> > >
> > >
> > > users : *
> > >
> > >
> > > users: struct wbint_userinfos
> > >
> > >
> > > num_userinfos : 0x00000000 (0)
> > >
> > >
> > > userinfos: ARRAY(0)
> > >
> > >
> > > result : NT_STATUS_IO_TIMEOUT
> > >
> > >
> > > [2016/04/19 15:04:41.367700, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/wb_next_pwent.c:109(wb_next_pwent_fetch_done)
> > >
> > >
> > > query_user_list for domain EXAMPLE returned NT_STATUS_IO_TIMEOUT
> > >
> > >
> > > [2016/04/19 15:04:41.367707, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd_getpwent.c:95(winbindd_getpwent_done)
> > >
> > >
> > > winbindd_getpwent_done: done with 0 users
> > >
> > >
> > > [2016/04/19 15:04:41.367712, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd.c:787(wb_request_done)
> > >
> > >
> > > wb_request_done[3673:GETPWENT]: NT_STATUS_NO_MORE_ENTRIES
> > >
> > >
> > > [2016/04/19 15:04:41.367726, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> > >
> > >
> > > winbind_client_response_written[3673:GETPWENT]: delivered response
> > > to client
> > >
> > >
> > > [2016/04/19 15:04:41.367900, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd.c:725(process_request)
> > >
> > >
> > > process_request: Handling async request 3673:ENDPWENT
> > >
> > >
> > > [2016/04/19 15:04:41.367916, 10, pid=3634, effective(0, 0), real(0,
> > > 0), class=winbind]
> > > ../source3/winbindd/winbindd.c:787(wb_request_done)
> > >
> > >
> > > wb_request_done[3673:ENDPWENT]: NT_STATUS_OK
> > >
> > >
> > >
> > >
> > >
> > > I think that the issue is similar to the issues described by L.P.H.
> > > van Belle and Luca Bertoncello.
> > >
> > >
> > >
> > >
> > >
> > > The Domain Controllers are MS Windows Server 2012 R2, AD Scheme is
> > > 2012.
> > >
> > >
> > >
> > >
> > >
> > > Any ideas on how to solve this?
> > >
> > >
> > >
> > >
> > >
> > > Thanks,
> > >
> > >
> > > Dimitar
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions: https://lists.samba.org/mailman/options/samba
> > >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
More information about the samba
mailing list