Bug#821183: [Pkg-samba-maint] Bug#821183: winbind: wbinfo -u is empty, wbinfo -g returns groups with samba as DC, ldap_search_with_timeout timeout

2016-04-18 Thread John Wyzer
On 17/04/16 21:25, Andrew Bartlett wrote:
>>> Which Samba version is on the DC?
>> 4.3.3

>>>  Does dbcheck pass on the DC?
>>> samba-tool dbcheck --cross-ncs
>> Yes. Without any error messages.

>>> How many users do you have?
>> Only about 95.

> It would be really helpful to isolate the client from the server here. 
>  Can you take a network sniff with wireshark, find the failing query,
> and re-issue it with ldbsearch?  That way we can hopefully remove
> winbindd from the equation.

I will try to do that.
I'll need to read some wireshark documentation first. ;-)
With a bit of luck I can get back with results before the end of the month.

I had a quick look at the source code the other day and it looks as if
it might be easier to add more debugging output to log the failed ldap
query than to go the wireshark way.

Either way, I'll see what I can get.



Bug#821183: [Pkg-samba-maint] Bug#821183: winbind: wbinfo -u is empty, wbinfo -g returns groups with samba as DC, ldap_search_with_timeout timeout

2016-04-17 Thread Andrew Bartlett
On Sun, 2016-04-17 at 11:19 +0200, John Wyzer wrote:
> On 17/04/16 07:16, Andrew Bartlett wrote:
> > > I have samba installed as a domain controller.
> > 
> > Which Samba version is on the DC?
> 4.3.3
> 
> >  Does dbcheck pass on the DC?
> > samba-tool dbcheck --cross-ncs
> 
> Yes. Without any error messages.
> 
> > How many users do you have?
> Only about 95.
> 

It would be really helpful to isolate the client from the server here. 
 Can you take a network sniff with wireshark, find the failing query,
and re-issue it with ldbsearch?  That way we can hopefully remove
winbindd from the equation.

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett   http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT  http://catalyst.net.nz/services/samba



Bug#821183: [Pkg-samba-maint] Bug#821183: winbind: wbinfo -u is empty, wbinfo -g returns groups with samba as DC, ldap_search_with_timeout timeout

2016-04-17 Thread John Wyzer
On 17/04/16 07:16, Andrew Bartlett wrote:
>> I have samba installed as a domain controller.
> 
> Which Samba version is on the DC?
4.3.3

>  Does dbcheck pass on the DC?
> samba-tool dbcheck --cross-ncs

Yes. Without any error messages.

> How many users do you have?
Only about 95.



Bug#821183: [Pkg-samba-maint] Bug#821183: winbind: wbinfo -u is empty, wbinfo -g returns groups with samba as DC, ldap_search_with_timeout timeout

2016-04-16 Thread Andrew Bartlett
On Sat, 2016-04-16 at 14:04 +0200, John Wyzer wrote:
> Package: winbind
> Version: 2:4.2.10+dfsg-0+deb8u2
> Severity: normal
> 
> I have samba installed as a domain controller.

Which Samba version is on the DC?  Does dbcheck pass on the DC?

samba-tool dbcheck --cross-ncs

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett   http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT  http://catalyst.net.nz/services/samba



Bug#821183: [Pkg-samba-maint] Bug#821183: winbind: wbinfo -u is empty, wbinfo -g returns groups with samba as DC, ldap_search_with_timeout timeout

2016-04-16 Thread Andrew Bartlett
On Sat, 2016-04-16 at 14:04 +0200, John Wyzer wrote:
> Package: winbind
> Version: 2:4.2.10+dfsg-0+deb8u2
> Severity: normal
> 
> I have samba installed as a domain controller.
> On one of the clients I can no longer get the user information. 
> wbinfo -u does not return any users while wbinfo -g works fine.
> 
> With increased log levels, I get 
> 
> ldap_search_with_timeout((objectCategory=user)) -> Time limit
> exceeded 

How many users do you have?

Andrew Bartlett

-- 
Andrew Bartlett   http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT  http://catalyst.net.nz/services/samba