[Samba] Winbind offline cache and strangeness...

[Data Control Systems - Mike Elkevizth]

The version of samba that comes with Ubuntu 16.04 is very old (4.3.11) and
the offline login feature for winbind simply doesn't work.  I'm not sure if
it's fixed in newer versions or not as I'm still on Ubuntu 18.04 (samba
4.7.6) which also doesn't work.  If you are only using it to authenticate
to an AD controller, you should switch to using sssd.  I have multiple
clients that can be offline from a server for months at a time, and sssd
has never let me down.  Winbind unfortunately isn't up to that task (at
least not with older versions).

On Fri, Sep 11, 2020 at 6:29 AM Marco Gaiarin via samba <
samba at lists.samba.org> wrote:

>
> I've setup a portable system (ubuntu 16.04) joined to my AD domain,
> that in their primary network works as expected.
>
> But in this 'COVID time', the portable start to roam around, and users
> say me that, suddenly after some days of use, get incredibly
> sloooowww... after that users reboot, and cannot get back in, login
> refused.
>
> I've setup a VPN, but clearly if users cannot login back, they cannot
> also fire up the VPN.
>
> Some question:
>
> 1) i know about:
>         https://bugzilla.samba.org/show_bug.cgi?id=14074
>  but this seems not the case: users reboot the portable without
> trouble, it is only after some days of use that 'cache expire'
> (i suppose).
>
> 2) there's some way, supposing to found a way to fire up the VPN, to
>  force a reload of winbind cache? A full samba restart is needed?
>
>
> As a first 'countermeasure' we have created a local user to be able to
> refresh up the winbind cache, but simply firing up the VPN seems does
> not suffices.
>
> Next week i will be able to put my hand on the portable, so i will look
> at logs.
>
>
> In the meantime, thanks.
>
> --
> dott. Marco Gaiarin                                     GNUPG Key ID:
> 240A3D66
>   Associazione ``La Nostra Famiglia''
> http://www.lanostrafamiglia.it/
>   Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento
> (PN)
>   marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f
> +39-0434-842797
>
>                 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
>       http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
>         (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>