[Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10
Jeff Sadowski
jeff.sadowski at gmail.com
Wed Apr 20 21:43:21 UTC 2016
interesting my problem is not the same but similar wbinfo -u worked before
my upgrade from samba 4.1.6 to 4.3.8 (ubuntu) when I did
wbinfo -u before the switch I got a list of users and when I did wbinfo
-g before the switch I got a list of groups. After the switch I got nothing
for a wbinfo -u but a list of groups when I do a wbinfo -g
I tried setting the option client ldap sasl wrapping = plain and now wbinfo
-u I get "Error looking up domain users"
the other 2 steps resuled back to no users but groups still work for me.
On Wed, Apr 20, 2016 at 10:10 AM, L.P.H. van Belle <belle at bazuin.nl> wrote:
> Hai,
>
> Test again but now install 4.4.2
> >> All versions below 4.4.2 are affected i.m.o. <<
>
> My guess, bad patch somewhere, I do think
> security-2016-04-12-prerequisite-v4-4-regression-fixes.metze01.txt
> is the problem, since this is the only patch i remove from the debian
> patches.
> (compaired to the samba 4.4.2 from source and the 4.4.1 from debian)
> (!! Above works for me, i dont know what i did there.. so at own risk. !!)
>
>
> That said, now try/do the following. ;-)
>
> On the dc, set temporarly
> ldap server require strong auth = no
>
> On the member
> Add the line : client ldap sasl wrapping = plain
>
> Now on the member, check wbinfo -g, wbinfo -u,
> With the wbinfo -u, You see a "long" delay, wait for it,
> you should get output.
>
> Now change
> The line : client ldap sasl wrapping = plain
> To
> The line : client ldap sasl wrapping = seal
> Restart samba and winbind
> Again wbinfo -g wbinfo -u , you should see output here again.
>
> Now change
> The line : client ldap sasl wrapping = seal
> To
> The line : client ldap sasl wrapping = sign
>
> Restart samba and winbind
> Again wbinfo -g wbinfo -u , you should see output here again.
>
> So now remove the line, since
> client ldap sasl wrapping = sign is the default, should be working from
> this point.
>
> Now set the server settting back to yes.
> And it should still be working now.
>
> I tested above now on 6 servers, all keep working.
> Dont ask why above works, im not a coder.. but it works for me.
>
>
> Greetz,
>
> Louis
>
>
>
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Dimitar Hristov
> > Verzonden: woensdag 20 april 2016 16:18
> > Aan: Andrew Martin
> > CC: samba at lists.samba.org
> > Onderwerp: Re: [Samba] wbinfo -u, wbinfo -g not working after samba
> update
> > from 4.2.3 to 4.2.10
> >
> > Hi list,
> >
> > Some more useful information - I compiled 4.2.11 on CentOS 7.2, and
> tested
> > with the same configuration files and AD DC, running on MS Windows 2012
> > R2.
> >
> > The issue still remains.
> >
> > Regards,
> > Dimitar
> >
> >
> > > From: dimitar.hristov at outlook.com
> > > To: amartin at xes-inc.com
> > > Date: Wed, 20 Apr 2016 13:23:05 +0200
> > > CC: samba at lists.samba.org
> > > Subject: Re: [Samba] wbinfo -u, wbinfo -g not working after samba
> update
> > from 4.2.3 to 4.2.10
> > >
> > > Hi list,
> > >
> > > I'd like to update you on the issue, as I did some more tests. First,
> > I've added some directives to smb.conf (in italic):
> > >
> > > [global]
> > > netbios name = testserver
> > > security = ADS
> > > workgroup = EXAMPLE
> > > realm = EXAMPLE.COM
> > > log file = /var/log/samba/%m.log
> > > log level = 10
> > > dedicated keytab file = /etc/krb5.keytab
> > > kerberos method = secrets and keytab
> > > winbind refresh tickets = yes
> > > winbind trusted domains only = no
> > > winbind use default domain = yes
> > > winbind enum users = yes
> > > winbind enum groups = yes
> > > winbind separator = +
> > > client ldap sasl wrapping = plain
> > > idmap config EXAMPLE : backend = ad
> > > idmap config EXAMPLE:schema_mode = rfc2307
> > > idmap config EXAMPLE:range = 10000-99999
> > > winbind nss info = rfc2307
> > > load printers = no
> > > printing = bsd
> > > printcap name = /dev/null
> > >
> > >
> > > With "client ldap sasl wrapping = plain" set, the domain doesn't go
> > "offline". This can be seen by comparing the partial log output after
> > "wbinfo -g", with the one in my first email.
> > >
> > > Also, I have tested joining a newly provisioned machine to the domain
> > with 4.2.3 and 4.2.10 - it works without any issues when using 4.2.3, and
> > it doesn't work with 4.2.10. I used "net ads join" with debuglevel=1,
> > please see the output (working one - with 4.2.3, and not working - with
> > 4.2.10):
> > >
> > > ### Join with samba 4.2.10###
> > >
> > > net ads join -U Administrator --debuglevel=1
> > > Enter Administrator's password:
> > > libnet_Join:
> > > libnet_JoinCtx: struct libnet_JoinCtx
> > > in: struct libnet_JoinCtx
> > > dc_name : NULL
> > > machine_name : 'TESTSERVER'
> > > domain_name : *
> > > domain_name : 'EXAMPLE.COM'
> > > account_ou : NULL
> > > admin_account : 'Administrator'
> > > admin_domain : NULL
> > > machine_password : NULL
> > > join_flags : 0x00000023 (35)
> > > 0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS
> > > 0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
> > > 0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
> > > 0: WKSSVC_JOIN_FLAGS_DEFER_SPN
> > > 0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
> > > 0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
> > > 1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
> > > 0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
> > > 0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
> > > 1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
> > > 1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
> > > os_version : NULL
> > > os_name : NULL
> > > create_upn : 0x00 (0)
> > > upn : NULL
> > > modify_config : 0x00 (0)
> > > ads : NULL
> > > debug : 0x01 (1)
> > > use_kerberos : 0x00 (0)
> > > secure_channel_type : SEC_CHAN_WKSTA (2)
> > > Failed to setup SPNEGO negTokenInit request: NT_STATUS_INTERNAL_ERROR
> > > libnet_Join:
> > > libnet_JoinCtx: struct libnet_JoinCtx
> > > out: struct libnet_JoinCtx
> > > account_name : NULL
> > > netbios_domain_name : 'EXAMPLE'
> > > dns_domain_name : 'example.com'
> > > forest_name : 'example.com'
> > > dn : NULL
> > > domain_sid : *
> > > domain_sid : S-1-5-21-1214440339-
> > 1979792683-1801674531
> > > modified_config : 0x00 (0)
> > > error_string : 'Failed to set machine spn: Time
> > limit exceeded
> > > Do you have sufficient permissions to create machine accounts?'
> > > domain_is_ad : 0x01 (1)
> > > result : WERR_GENERAL_FAILURE
> > > Failed to join domain: Failed to set machine spn: Time limit exceeded
> > > Do you have sufficient permissions to create machine accounts?
> > >
> > > ### End join with samba 4.2.10 ###
> > >
> > > ### Join with samba 4.2.3 ###
> > >
> > > net ads join -U Administrator --debuglevel=1
> > > Enter Administrator's password:
> > > libnet_Join:
> > > libnet_JoinCtx: struct libnet_JoinCtx
> > > in: struct libnet_JoinCtx
> > > dc_name : NULL
> > > machine_name : 'TESTSERVER'
> > > domain_name : *
> > > domain_name : 'EXAMPLE.COM'
> > > account_ou : NULL
> > > admin_account : 'Administrator'
> > > admin_domain : NULL
> > > machine_password : NULL
> > > join_flags : 0x00000023 (35)
> > > 0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS
> > > 0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
> > > 0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
> > > 0: WKSSVC_JOIN_FLAGS_DEFER_SPN
> > > 0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
> > > 0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
> > > 1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
> > > 0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
> > > 0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
> > > 1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
> > > 1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
> > > os_version : NULL
> > > os_name : NULL
> > > create_upn : 0x00 (0)
> > > upn : NULL
> > > modify_config : 0x00 (0)
> > > ads : NULL
> > > debug : 0x01 (1)
> > > use_kerberos : 0x00 (0)
> > > secure_channel_type : SEC_CHAN_WKSTA (2)
> > > libnet_Join:
> > > libnet_JoinCtx: struct libnet_JoinCtx
> > > out: struct libnet_JoinCtx
> > > account_name : NULL
> > > netbios_domain_name : 'EXAMPLE'
> > > dns_domain_name : 'example.com'
> > > forest_name : 'example.com'
> > > dn :
> > 'CN=testserver,OU=DefaultBin,DC=example,DC=com'
> > > domain_sid : *
> > > domain_sid : S-1-5-21-1214440339-
> > 1979792683-1801674531
> > > modified_config : 0x00 (0)
> > > error_string : NULL
> > > domain_is_ad : 0x01 (1)
> > > result : WERR_OK
> > > Using short domain name -- EXAMPLE
> > > Joined 'TESTSERVER' to dns domain 'example.com'
> > >
> > > ### End join with samba 4.2.3 ###
> > >
> > > ###/var/log/samba/winbind.log - after "wbinfo -g"###
> > >
> > > [2016/04/20 14:01:44.879293, 10, pid=2301, effective(0, 0), real(0, 0),
> > class=winbind] ../source3/winbindd/winbindd.c:725(process_request)
> > > process_request: Handling async request 2429:LIST_GROUPS
> > > [2016/04/20 14:01:44.879299, 3, pid=2301, effective(0, 0), real(0, 0),
> > class=winbind]
> > ../source3/winbindd/winbindd_list_groups.c:58(winbindd_list_groups_send)
> > > list_groups EXAMPLE
> > > [2016/04/20 14:01:44.879313, 1, pid=2301, effective(0, 0), real(0, 0)]
> > ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > > wbint_QueryGroupList: struct wbint_QueryGroupList
> > > in: struct wbint_QueryGroupList
> > > [2016/04/20 14:01:44.879345, 1, pid=2301, effective(0, 0), real(0, 0)]
> > ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > > wbint_QueryGroupList: struct wbint_QueryGroupList
> > > out: struct wbint_QueryGroupList
> > > groups : *
> > > groups: struct wbint_Principals
> > > num_principals : 0
> > > principals: ARRAY(0)
> > > result : NT_STATUS_IO_TIMEOUT
> > > [2016/04/20 14:01:44.879368, 10, pid=2301, effective(0, 0), real(0, 0),
> > class=winbind]
> > ../source3/winbindd/winbindd_list_groups.c:128(winbindd_list_groups_done)
> > > Domain EXAMPLE returned 0 groups
> > > [2016/04/20 14:01:44.879373, 10, pid=2301, effective(0, 0), real(0, 0),
> > class=winbind]
> > ../source3/winbindd/winbindd_list_groups.c:134(winbindd_list_groups_done)
> > > list_groups for domain EXAMPLE failed
> > > [2016/04/20 14:01:44.879378, 10, pid=2301, effective(0, 0), real(0, 0),
> > class=winbind] ../source3/winbindd/winbindd.c:787(wb_request_done)
> > > wb_request_done[2429:LIST_GROUPS]: NT_STATUS_OK
> > >
> > > ###End /var/log/samba/winbind.log - after "wbinfo -g" ###
> > >
> > > Hope that helps, as quite a lot of people are expiriencing the same
> > issue. I missed to provide information about the distributions used for
> > testing - CentOS 7.2, Debian Jessie 8.4
> > >
> > > Regards,
> > > Dimitar
> > >
> > >
> > > > Date: Tue, 19 Apr 2016 08:40:45 -0500
> > > > From: amartin at xes-inc.com
> > > > To: dimitar.hristov at outlook.com
> > > > CC: samba at lists.samba.org
> > > > Subject: Re: [Samba] wbinfo -u, wbinfo -g not working after samba
> > update from 4.2.3 to 4.2.10
> > > >
> > > > I am also having this issue, however in my case it is worse - samba
> > shares do not work
> > > > and "getent passwd <domain user>" also does not work. I tried adding
> > the following to the
> > > > "[global]" section of my smb.conf as suggested elsewhere, but no
> > improvement:
> > > > client ldap sasl wrapping = plain
> > > >
> > > > My smb.conf is very similar to yours, however I also have the
> > following options set:
> > > > encrypt passwords = true
> > > > winbind nss info = rfc2307
> > > >
> > > > Thanks,
> > > >
> > > > Andrew
> > > >
> > > > ----- Original Message -----
> > > > > From: "Dimitar Hristov" <dimitar.hristov at outlook.com>
> > > > > To: samba at lists.samba.org
> > > > > Sent: Tuesday, April 19, 2016 8:23:50 AM
> > > > > Subject: [Samba] wbinfo -u, wbinfo -g not working after samba
> update
> > from 4.2.3 to 4.2.10
> > > > >
> > > > > Hi list,
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > After the badlock patching of all samba machines in our
> > organization
> > > > > (all of them are domain members), some functionalities have
> > stopped
> > > > > working, more particularly:
> > > > >
> > > > >
> > > > > - wbinfo -g (no output at all)
> > > > >
> > > > >
> > > > > - wbinfo -u (no output at all)
> > > > >
> > > > >
> > > > > - getent passwd (displays only local users)
> > > > >
> > > > >
> > > > > - getent group
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > working functionalities:
> > > > >
> > > > >
> > > > > - samba shares are still accessible, with appropriate users set
> > as
> > > > > "valid", "write users" etc
> > > > >
> > > > >
> > > > > - getent passwd <domain user>
> > > > >
> > > > >
> > > > > - wbinfo --name-to-sid
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Configuration files:
> > > > >
> > > > >
> > > > > - /etc/samba/smb.conf
> > > > >
> > > > >
> > > > > [global]
> > > > >
> > > > >
> > > > > workgroup = EXAMPLE
> > > > >
> > > > >
> > > > > realm = EXAMPLE.COM
> > > > >
> > > > >
> > > > > security = ADS
> > > > >
> > > > >
> > > > > dedicated keytab file = /etc/krb5.keytab
> > > > >
> > > > >
> > > > > kerberos method = secrets and keytab
> > > > >
> > > > >
> > > > > log file = /var/log/samba/%m.log
> > > > >
> > > > >
> > > > > load printers = No
> > > > >
> > > > >
> > > > > printcap name = /dev/null
> > > > >
> > > > >
> > > > > winbind separator = +
> > > > >
> > > > >
> > > > > winbind enum users = Yes
> > > > >
> > > > >
> > > > > winbind enum groups = Yes
> > > > >
> > > > >
> > > > > winbind use default domain = Yes
> > > > >
> > > > >
> > > > > winbind refresh tickets = Yes
> > > > >
> > > > >
> > > > > idmap config example : backend = ad
> > > > >
> > > > >
> > > > > idmap config * : backend = tdb
> > > > >
> > > > >
> > > > > printing = bsd
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > - /etc/krb5.conf
> > > > >
> > > > >
> > > > > [logging]
> > > > >
> > > > >
> > > > > default = FILE:/var/log/krb5libs.log
> > > > >
> > > > >
> > > > > kdc = FILE:/var/log/krb5kdc.log
> > > > >
> > > > >
> > > > > admin_server = FILE:/var/log/kadmind.log
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > [libdefaults]
> > > > >
> > > > >
> > > > > dns_lookup_kdc = false
> > > > >
> > > > >
> > > > > dns_lookup_realm = false
> > > > >
> > > > >
> > > > > ticket_lifetime = 24h
> > > > >
> > > > >
> > > > > renew_lifetime = 7d
> > > > >
> > > > >
> > > > > forwardable = true
> > > > >
> > > > >
> > > > > rdns = false
> > > > >
> > > > >
> > > > > default_realm = EXAMPLE.COM
> > > > >
> > > > >
> > > > > default_ccache_name = KEYRING:persistent:%{uid}
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > [realms]
> > > > >
> > > > >
> > > > > EXAMPLE.COM = {
> > > > >
> > > > >
> > > > > kdc = example-adc01.example.com
> > > > >
> > > > >
> > > > > admin_server = example-adc01.example.com
> > > > >
> > > > >
> > > > > }
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > [domain_realm]
> > > > >
> > > > >
> > > > > .example.com = EXAMPLE.COM
> > > > >
> > > > >
> > > > > example.com = EXAMPLE.COM
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > - /etc/nsswitch.conf
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > passwd: files winbind
> > > > >
> > > > >
> > > > > shadow: files winbind
> > > > >
> > > > >
> > > > > group: files winbind
> > > > >
> > > > >
> > > > > initgroups: files
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > hosts: files dns myhostname
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > bootparams: nisplus [NOTFOUND=return] files
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > ethers: files
> > > > >
> > > > >
> > > > > netmasks: files
> > > > >
> > > > >
> > > > > networks: files
> > > > >
> > > > >
> > > > > protocols: files winbind
> > > > >
> > > > >
> > > > > rpc: files winbind
> > > > >
> > > > >
> > > > > services: files winbind
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > netgroup: nisplus sss
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > publickey: nisplus
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > automount: files nisplus
> > > > >
> > > > >
> > > > > aliases: files nisplus
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Installed packages:
> > > > >
> > > > >
> > > > > - working environment
> > > > >
> > > > >
> > > > > samba-4.2.3-12.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-common-4.2.3-12.el7_2.noarch
> > > > >
> > > > >
> > > > > samba-winbind-modules-4.2.3-12.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-winbind-clients-4.2.3-12.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-common-tools-4.2.3-12.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-common-libs-4.2.3-12.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-winbind-4.2.3-12.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-libs-4.2.3-12.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-client-libs-4.2.3-12.el7_2.x86_64
> > > > >
> > > > >
> > > > > krb5-workstation-1.13.2-12.el7_2.x86_64
> > > > >
> > > > >
> > > > > krb5-libs-1.13.2-12.el7_2.x86_64
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > - not working (after the update)
> > > > >
> > > > >
> > > > > samba-winbind-4.2.10-6.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-libs-4.2.10-6.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-common-4.2.10-6.el7_2.noarch
> > > > >
> > > > >
> > > > > samba-client-libs-4.2.10-6.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-winbind-modules-4.2.10-6.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-winbind-clients-4.2.10-6.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-common-tools-4.2.10-6.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-common-libs-4.2.10-6.el7_2.x86_64
> > > > >
> > > > >
> > > > > samba-4.2.10-6.el7_2.x86_64
> > > > >
> > > > >
> > > > > krb5-workstation-1.13.2-12.el7_2.x86_64
> > > > >
> > > > >
> > > > > krb5-libs-1.13.2-12.el7_2.x86_64
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > ---------------------
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Partial log output after "wbinfo -g" -
> > > > > /var/log/samba/winbind.log:
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > [2016/04/19 14:58:40.635486, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > > ../source3/winbindd/winbindd.c:725(process_request)
> > > > >
> > > > >
> > > > > process_request: Handling async request 3640:LIST_GROUPS
> > > > >
> > > > >
> > > > > [2016/04/19 14:58:40.635501, 3, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/winbindd_list_groups.c:58(winbindd_list_groups_send)
> > > > >
> > > > >
> > > > > list_groups EXAMPLE
> > > > >
> > > > >
> > > > > [2016/04/19 14:58:40.635520, 1, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > > > >
> > > > >
> > > > > wbint_QueryGroupList: struct wbint_QueryGroupList
> > > > >
> > > > >
> > > > > in: struct wbint_QueryGroupList
> > > > >
> > > > >
> > > > > [2016/04/19 14:58:42.112485, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> > > > >
> > > > >
> > > > > messaging_recv_cb: Received message 0x40c len 8 (num_fds:0)
> > from
> > > > > 3635
> > > > >
> > > > >
> > > > > [2016/04/19 14:58:42.112513, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)
> > > > >
> > > > >
> > > > > Domain EXAMPLE is marked as offline now.
> > > > >
> > > > >
> > > > > [2016/04/19 14:58:42.113574, 1, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > > > >
> > > > >
> > > > > wbint_QueryGroupList: struct wbint_QueryGroupList
> > > > >
> > > > >
> > > > > out: struct wbint_QueryGroupList
> > > > >
> > > > >
> > > > > groups : *
> > > > >
> > > > >
> > > > > groups: struct wbint_Principals
> > > > >
> > > > >
> > > > > num_principals : 0
> > > > >
> > > > >
> > > > > principals: ARRAY(0)
> > > > >
> > > > >
> > > > > result : NT_STATUS_IO_TIMEOUT
> > > > >
> > > > >
> > > > > [2016/04/19 14:58:42.113616, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/winbindd_list_groups.c:128(winbindd_list_groups_done)
> > > > >
> > > > >
> > > > > Domain EXAMPLE returned 0 groups
> > > > >
> > > > >
> > > > > [2016/04/19 14:58:42.113623, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/winbindd_list_groups.c:134(winbindd_list_groups_done)
> > > > >
> > > > >
> > > > > list_groups for domain EXAMPLE failed
> > > > >
> > > > >
> > > > > [2016/04/19 14:58:42.113630, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > > ../source3/winbindd/winbindd.c:787(wb_request_done)
> > > > >
> > > > >
> > > > > wb_request_done[3640:LIST_GROUPS]: NT_STATUS_OK
> > > > >
> > > > >
> > > > > [2016/04/19 14:58:42.113649, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> > > > >
> > > > >
> > > > > winbind_client_response_written[3640:LIST_GROUPS]: delivered
> > > > > response to client
> > > > >
> > > > >
> > > > > [2016/04/19 14:58:42.114552, 6, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > > ../source3/winbindd/winbindd.c:957(winbind_client_request_read)
> > > > >
> > > > >
> > > > > closing socket 28, client exited
> > > > >
> > > > >
> > > > > [2016/04/19 14:59:13.272624, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> > > > >
> > > > >
> > > > > messaging_recv_cb: Received message 0x40b len 8 (num_fds:0)
> > from
> > > > > 3635
> > > > >
> > > > >
> > > > > [2016/04/19 14:59:13.272656, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)
> > > > >
> > > > >
> > > > > Domain EXAMPLE is marked as online now.
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Partial log output after "wbinfo -u" -
> > > > > /var/log/samba/winbind.log:
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > [2016/04/19 15:03:25.308776, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > > ../source3/winbindd/winbindd.c:725(process_request)
> > > > >
> > > > >
> > > > > process_request: Handling async request 3666:LIST_USERS
> > > > >
> > > > >
> > > > > [2016/04/19 15:03:25.308788, 3, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/winbindd_list_users.c:58(winbindd_list_users_send)
> > > > >
> > > > >
> > > > > list_users EXAMPLE
> > > > >
> > > > >
> > > > > [2016/04/19 15:03:25.308808, 1, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > > > >
> > > > >
> > > > > wbint_QueryUserList: struct wbint_QueryUserList
> > > > >
> > > > >
> > > > > in: struct wbint_QueryUserList
> > > > >
> > > > >
> > > > > [2016/04/19 15:03:29.418016, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> > > > >
> > > > >
> > > > > messaging_recv_cb: Received message 0x40c len 8 (num_fds:0)
> > from
> > > > > 3635
> > > > >
> > > > >
> > > > > [2016/04/19 15:03:29.418040, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)
> > > > >
> > > > >
> > > > > Domain EXAMPLE is marked as offline now.
> > > > >
> > > > >
> > > > > [2016/04/19 15:03:29.418101, 1, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > > > >
> > > > >
> > > > > wbint_QueryUserList: struct wbint_QueryUserList
> > > > >
> > > > >
> > > > > out: struct wbint_QueryUserList
> > > > >
> > > > >
> > > > > users : *
> > > > >
> > > > >
> > > > > users: struct wbint_userinfos
> > > > >
> > > > >
> > > > > num_userinfos : 0x00000000 (0)
> > > > >
> > > > >
> > > > > userinfos: ARRAY(0)
> > > > >
> > > > >
> > > > > result : NT_STATUS_IO_TIMEOUT
> > > > >
> > > > >
> > > > > [2016/04/19 15:03:29.418172, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/winbindd_list_users.c:128(winbindd_list_users_done)
> > > > >
> > > > >
> > > > > Domain EXAMPLE returned 0 users
> > > > >
> > > > >
> > > > > [2016/04/19 15:03:29.418180, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/winbindd_list_users.c:134(winbindd_list_users_done)
> > > > >
> > > > >
> > > > > List_users for domain EXAMPLE failed
> > > > >
> > > > >
> > > > > [2016/04/19 15:03:29.418187, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > > ../source3/winbindd/winbindd.c:787(wb_request_done)
> > > > >
> > > > >
> > > > > wb_request_done[3666:LIST_USERS]: NT_STATUS_OK
> > > > >
> > > > >
> > > > > [2016/04/19 15:03:29.418206, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> > > > >
> > > > >
> > > > > winbind_client_response_written[3666:LIST_USERS]: delivered
> > > > > response to client
> > > > >
> > > > >
> > > > > [2016/04/19 15:03:29.420295, 6, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > > ../source3/winbindd/winbindd.c:957(winbind_client_request_read)
> > > > >
> > > > >
> > > > > closing socket 28, client exited
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:00.414647, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> > > > >
> > > > >
> > > > > messaging_recv_cb: Received message 0x40b len 8 (num_fds:0)
> > from
> > > > > 3635
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:00.414669, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)
> > > > >
> > > > >
> > > > > Domain EXAMPLE is marked as online now.
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Partial log output after "getent passwd" -
> > > > > /var/log/samba/winbind.log (the local users get
> displayed,
> > > > > domain users - do not):
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:41.367195, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > > ../source3/winbindd/winbindd.c:725(process_request)
> > > > >
> > > > >
> > > > > process_request: Handling async request 3673:GETPWENT
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:41.367208, 3, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/winbindd_getpwent.c:50(winbindd_getpwent_send)
> > > > >
> > > > >
> > > > > [ 3673]: getpwent
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:41.367307, 1, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > > > >
> > > > >
> > > > > wbint_QueryUserList: struct wbint_QueryUserList
> > > > >
> > > > >
> > > > > in: struct wbint_QueryUserList
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:41.367621, 1, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > > > >
> > > > >
> > > > > wbint_QueryUserList: struct wbint_QueryUserList
> > > > >
> > > > >
> > > > > out: struct wbint_QueryUserList
> > > > >
> > > > >
> > > > > users : *
> > > > >
> > > > >
> > > > > users: struct wbint_userinfos
> > > > >
> > > > >
> > > > > num_userinfos : 0x00000000 (0)
> > > > >
> > > > >
> > > > > userinfos: ARRAY(0)
> > > > >
> > > > >
> > > > > result : NT_STATUS_OK
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:41.367652, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/wb_query_user_list.c:69(wb_query_user_list_done)
> > > > >
> > > > >
> > > > > dcerpc_wbint_QueryUserList returned 0 users
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:41.367661, 1, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > > > >
> > > > >
> > > > > wbint_QueryUserList: struct wbint_QueryUserList
> > > > >
> > > > >
> > > > > in: struct wbint_QueryUserList
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:41.367680, 1, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > > > >
> > > > >
> > > > > wbint_QueryUserList: struct wbint_QueryUserList
> > > > >
> > > > >
> > > > > out: struct wbint_QueryUserList
> > > > >
> > > > >
> > > > > users : *
> > > > >
> > > > >
> > > > > users: struct wbint_userinfos
> > > > >
> > > > >
> > > > > num_userinfos : 0x00000000 (0)
> > > > >
> > > > >
> > > > > userinfos: ARRAY(0)
> > > > >
> > > > >
> > > > > result : NT_STATUS_IO_TIMEOUT
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:41.367700, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/wb_next_pwent.c:109(wb_next_pwent_fetch_done)
> > > > >
> > > > >
> > > > > query_user_list for domain EXAMPLE returned
> > NT_STATUS_IO_TIMEOUT
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:41.367707, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/winbindd_getpwent.c:95(winbindd_getpwent_done)
> > > > >
> > > > >
> > > > > winbindd_getpwent_done: done with 0 users
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:41.367712, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > > ../source3/winbindd/winbindd.c:787(wb_request_done)
> > > > >
> > > > >
> > > > > wb_request_done[3673:GETPWENT]: NT_STATUS_NO_MORE_ENTRIES
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:41.367726, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > >
> > ../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> > > > >
> > > > >
> > > > > winbind_client_response_written[3673:GETPWENT]: delivered
> > response
> > > > > to client
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:41.367900, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > > ../source3/winbindd/winbindd.c:725(process_request)
> > > > >
> > > > >
> > > > > process_request: Handling async request 3673:ENDPWENT
> > > > >
> > > > >
> > > > > [2016/04/19 15:04:41.367916, 10, pid=3634, effective(0, 0),
> > real(0,
> > > > > 0), class=winbind]
> > > > > ../source3/winbindd/winbindd.c:787(wb_request_done)
> > > > >
> > > > >
> > > > > wb_request_done[3673:ENDPWENT]: NT_STATUS_OK
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > I think that the issue is similar to the issues described by
> > L.P.H.
> > > > > van Belle and Luca Bertoncello.
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > The Domain Controllers are MS Windows Server 2012 R2, AD Scheme
> > is
> > > > > 2012.
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Any ideas on how to solve this?
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Thanks,
> > > > >
> > > > >
> > > > > Dimitar
> > > > > --
> > > > > To unsubscribe from this list go to the following URL and read the
> > > > > instructions: https://lists.samba.org/mailman/options/samba
> > > > >
> > > >
> > > > --
> > > > To unsubscribe from this list go to the following URL and read the
> > > > instructions: https://lists.samba.org/mailman/options/samba
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions: https://lists.samba.org/mailman/options/samba
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
More information about the samba
mailing list