[Samba] Strange problem with winbind on linux domain member (works for 2 minutes...)

[Jakob Curdes]

Hello Rowland, all, see log snippet below.

Am 06.02.2026 um 10:14 schrieb Jakob Curdes via samba:
>
> Am 06.02.2026 um 10:08 schrieb Rowland Penny via samba:
>> On Thu, 5 Feb 2026 18:04:54 +0100
>> Jakob Curdes via samba <samba at lists.samba.org> wrote:
>>
>>
>>> No, this is just a dedicated Sambe fileserver that is not doing
>>> anything else. We have two dedicated samba4 DCs (Ubuntu24), and apart
>>> from this problem everything runs fine.
>>>
>>> Times are in sync, timezones are identical etc. What could the error
>>> message point to?
>>>
>>> Feb 05 13:35:01 *** winbindd[3131]: [2026/02/05 13:35:01.392619, 0]
>>> source3/winbindd/winbindd_samr.c:71(open_internal_samr_conn)
>>>    Feb 05 13:35:01 *** winbindd[3131]:  open_internal_samr_conn:
>>> Could not connect to samr pipe: NT_STATUS_CONNECTION_DISCONNECTED
>> It is fairly obvious what is happening, winbindd is trying to connect
>> to a pipe and getting disconnected, the 'why' is the question, try
>> raising the log level and see if anything pops out in the  logs.
> Ok, will do so and report.
>
Here is a snippet of the relavant log (not winbind.log but 
log.wb-SERVERNAME:

  winbindd_dual_ndrcmd: Running command wbint_LookupName (domain 
'SERVERNAME')
[2026/02/06 21:13:03.136085,  1, pid=2188, effective(0, 0), real(0, 0), 
class=rpc_parse] librpc/ndr/ndr.c:493(ndr_print_function_debug)
        wbint_LookupName: struct wbint_LookupName
           in: struct wbint_LookupName
               domain                   : *
                   domain                   : 'SERVERNAME'
               name                     : *
                   name                     : 'ADMIN'
               flags                    : 0x00000000 (0)
[2026/02/06 21:13:03.136157, 10, pid=2188, effective(0, 0), real(0, 0), 
class=winbind] 
source3/winbindd/winbindd_cache.c:3645(get_global_winbindd_state_offline)
   get_global_winbindd_state_offline: Offline state not set.
[2026/02/06 21:13:03.136182, 10, pid=2188, effective(0, 0), real(0, 0)] 
source3/lib/namemap_cache.c:320(namemap_cache_find_name)
   namemap_cache_find_name: gencache_parse(NAME2SID/SERVERNAME\ADMIN) failed
[2026/02/06 21:13:03.136194, 10, pid=2188, effective(0, 0), real(0, 0), 
class=winbind] source3/winbindd/winbindd_cache.c:1795(wcache_name_to_sid)
   wcache_name_to_sid: namemap_cache_find_name failed
[2026/02/06 21:13:03.136205, 10, pid=2188, effective(0, 0), real(0, 0), 
class=winbind] source3/winbindd/winbindd_cache.c:1831(wb_cache_name_to_sid)
   wb_cache_name_to_sid: name_to_sid: [Cached] - doing backend query for 
name for domain SERVERNAME
[2026/02/06 21:13:03.136217,  3, pid=2188, effective(0, 0), real(0, 0), 
class=winbind] source3/winbindd/winbindd_samr.c:680(sam_name_to_sid)
   sam_name_to_sid: SERVERNAME\ADMIN
[2026/02/06 21:13:03.136230, 10, pid=2188, effective(0, 0), real(0, 0)] 
source3/lib/util_wellknown.c:165(lookup_wellknown_name)
   map_name_to_wellknown_sid: looking up SERVERNAME\ADMIN
[2026/02/06 21:13:03.137630,  5, pid=2188, effective(0, 0), real(0, 0), 
class=rpc_cli] source3/rpc_client/cli_pipe.c:1808(rpc_pipe_bind_send)
   Bind RPC Pipe: host SERVERNAME auth_type 0, auth_level 1
[2026/02/06 21:13:03.137656,  1, pid=2188, effective(0, 0), real(0, 0), 
class=rpc_parse] 
source3/librpc/rpc/dcerpc_helpers.c:79(dcerpc_push_ncacn_packet)

(omitted structure printout)

[2026/02/06 21:13:03.137804,  5, pid=2188, effective(0, 0), real(0, 0), 
class=rpc_cli] source3/rpc_client/cli_pipe.c:800(rpc_api_pipe_send)
   rpc_api_pipe: host SERVERNAME
[2026/02/06 21:13:03.137815,  5, pid=2188, effective(0, 0), real(0, 0), 
class=rpc_cli] source3/rpc_client/cli_pipe.c:185(rpc_write_send)
   rpc_write_send: data_to_write: 72
[2026/02/06 21:13:03.180532,  3, pid=2188, effective(0, 0), real(0, 0), 
class=rpc_cli] 
source3/rpc_client/cli_pipe.c:1858(rpc_pipe_bind_step_one_done)
   rpc_pipe_bind: host SERVERNAME bind request returned 
NT_STATUS_CONNECTION_DISCONNECTED
[2026/02/06 21:13:03.180559,  5, pid=2188, effective(0, 0), real(0, 0), 
class=rpc_cli] source3/rpc_client/cli_pipe.c:844(rpc_api_pipe_trans_done)
   cli_api_pipe failed: NT_STATUS_CONNECTION_DISCONNECTED
[2026/02/06 21:13:03.180579, 10, pid=2188, effective(0, 0), real(0, 0), 
class=rpc_cli] source3/rpc_client/cli_pipe.c:3139(rpc_pipe_open_local_np)
   rpc_pipe_open_local_np: rpc_pipe_bind failed: 
NT_STATUS_CONNECTION_DISCONNECTED
[2026/02/06 21:13:03.180612,  0, pid=2188, effective(0, 0), real(0, 0), 
class=winbind] source3/winbindd/winbindd_samr.c:71(open_internal_samr_conn)
   open_internal_samr_conn: Could not connect to samr pipe: 
NT_STATUS_CONNECTION_DISCONNECTED
[2026/02/06 21:13:03.180975,  1, pid=2188, effective(0, 0), real(0, 0), 
class=rpc_parse] librpc/ndr/ndr.c:493(ndr_print_function_debug)
        wbint_LookupName: struct wbint_LookupName
           out: struct wbint_LookupName
               type                     : *
                   type                     : SID_NAME_USE_NONE (0)
               sid                      : *
                   sid                      : S-0-0

               result                   : NT_STATUS_CONNECTION_DISCONNECTED

I cannot make anything of this, but maybe someone else can?

Regards, Jakob