Bug#821183: [Pkg-samba-maint] Bug#821183: winbind: wbinfo -u is empty, wbinfo -g returns groups with samba as DC, ldap_search_with_timeout timeout
On 17/04/16 21:25, Andrew Bartlett wrote: >>> Which Samba version is on the DC? >> 4.3.3 >>> Does dbcheck pass on the DC? >>> samba-tool dbcheck --cross-ncs >> Yes. Without any error messages. >>> How many users do you have? >> Only about 95. > It would be really helpful to isolate the client from the server here. > Can you take a network sniff with wireshark, find the failing query, > and re-issue it with ldbsearch? That way we can hopefully remove > winbindd from the equation. I will try to do that. I'll need to read some wireshark documentation first. ;-) With a bit of luck I can get back with results before the end of the month. I had a quick look at the source code the other day and it looks as if it might be easier to add more debugging output to log the failed ldap query than to go the wireshark way. Either way, I'll see what I can get.
Bug#821183: [Pkg-samba-maint] Bug#821183: winbind: wbinfo -u is empty, wbinfo -g returns groups with samba as DC, ldap_search_with_timeout timeout
On Sun, 2016-04-17 at 11:19 +0200, John Wyzer wrote: > On 17/04/16 07:16, Andrew Bartlett wrote: > > > I have samba installed as a domain controller. > > > > Which Samba version is on the DC? > 4.3.3 > > > Does dbcheck pass on the DC? > > samba-tool dbcheck --cross-ncs > > Yes. Without any error messages. > > > How many users do you have? > Only about 95. > It would be really helpful to isolate the client from the server here. Can you take a network sniff with wireshark, find the failing query, and re-issue it with ldbsearch? That way we can hopefully remove winbindd from the equation. Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Bug#821183: [Pkg-samba-maint] Bug#821183: winbind: wbinfo -u is empty, wbinfo -g returns groups with samba as DC, ldap_search_with_timeout timeout
On 17/04/16 07:16, Andrew Bartlett wrote: >> I have samba installed as a domain controller. > > Which Samba version is on the DC? 4.3.3 > Does dbcheck pass on the DC? > samba-tool dbcheck --cross-ncs Yes. Without any error messages. > How many users do you have? Only about 95.
Bug#821183: [Pkg-samba-maint] Bug#821183: winbind: wbinfo -u is empty, wbinfo -g returns groups with samba as DC, ldap_search_with_timeout timeout
On Sat, 2016-04-16 at 14:04 +0200, John Wyzer wrote: > Package: winbind > Version: 2:4.2.10+dfsg-0+deb8u2 > Severity: normal > > I have samba installed as a domain controller. Which Samba version is on the DC? Does dbcheck pass on the DC? samba-tool dbcheck --cross-ncs Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Bug#821183: [Pkg-samba-maint] Bug#821183: winbind: wbinfo -u is empty, wbinfo -g returns groups with samba as DC, ldap_search_with_timeout timeout
On Sat, 2016-04-16 at 14:04 +0200, John Wyzer wrote: > Package: winbind > Version: 2:4.2.10+dfsg-0+deb8u2 > Severity: normal > > I have samba installed as a domain controller. > On one of the clients I can no longer get the user information. > wbinfo -u does not return any users while wbinfo -g works fine. > > With increased log levels, I get > > ldap_search_with_timeout((objectCategory=user)) -> Time limit > exceeded How many users do you have? Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba