Dimitar Hristov
2016-Apr-19 13:23 UTC
[Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10
Hi list,
After the badlock patching of all samba machines in our organization
(all of them are domain members), some functionalities have stopped
working, more particularly:
- wbinfo -g (no output at all)
- wbinfo -u (no output at all)
- getent passwd (displays only local users)
- getent group
working functionalities:
- samba shares are still accessible, with appropriate users set as
"valid", "write users" etc
- getent passwd <domain user>
- wbinfo --name-to-sid
Configuration files:
- /etc/samba/smb.conf
[global]
workgroup = EXAMPLE
realm = EXAMPLE.COM
security = ADS
dedicated keytab file = /etc/krb5.keytab
kerberos method = secrets and keytab
log file = /var/log/samba/%m.log
load printers = No
printcap name = /dev/null
winbind separator = +
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind refresh tickets = Yes
idmap config example : backend = ad
idmap config * : backend = tdb
printing = bsd
- /etc/krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
dns_lookup_kdc = false
dns_lookup_realm = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
rdns = false
default_realm = EXAMPLE.COM
default_ccache_name = KEYRING:persistent:%{uid}
[realms]
EXAMPLE.COM = {
kdc = example-adc01.example.com
admin_server = example-adc01.example.com
}
[domain_realm]
.example.com = EXAMPLE.COM
example.com = EXAMPLE.COM
- /etc/nsswitch.conf
passwd: files winbind
shadow: files winbind
group: files winbind
initgroups: files
hosts: files dns myhostname
bootparams: nisplus [NOTFOUND=return] files
ethers: files
netmasks: files
networks: files
protocols: files winbind
rpc: files winbind
services: files winbind
netgroup: nisplus sss
publickey: nisplus
automount: files nisplus
aliases: files nisplus
Installed packages:
- working environment
samba-4.2.3-12.el7_2.x86_64
samba-common-4.2.3-12.el7_2.noarch
samba-winbind-modules-4.2.3-12.el7_2.x86_64
samba-winbind-clients-4.2.3-12.el7_2.x86_64
samba-common-tools-4.2.3-12.el7_2.x86_64
samba-common-libs-4.2.3-12.el7_2.x86_64
samba-winbind-4.2.3-12.el7_2.x86_64
samba-libs-4.2.3-12.el7_2.x86_64
samba-client-libs-4.2.3-12.el7_2.x86_64
krb5-workstation-1.13.2-12.el7_2.x86_64
krb5-libs-1.13.2-12.el7_2.x86_64
- not working (after the update)
samba-winbind-4.2.10-6.el7_2.x86_64
samba-libs-4.2.10-6.el7_2.x86_64
samba-common-4.2.10-6.el7_2.noarch
samba-client-libs-4.2.10-6.el7_2.x86_64
samba-winbind-modules-4.2.10-6.el7_2.x86_64
samba-winbind-clients-4.2.10-6.el7_2.x86_64
samba-common-tools-4.2.10-6.el7_2.x86_64
samba-common-libs-4.2.10-6.el7_2.x86_64
samba-4.2.10-6.el7_2.x86_64
krb5-workstation-1.13.2-12.el7_2.x86_64
krb5-libs-1.13.2-12.el7_2.x86_64
---------------------
Partial log output after "wbinfo -g" -
/var/log/samba/winbind.log:
[2016/04/19 14:58:40.635486, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd.c:725(process_request)
process_request: Handling async request 3640:LIST_GROUPS
[2016/04/19 14:58:40.635501, 3, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd_list_groups.c:58(winbindd_list_groups_send)
list_groups EXAMPLE
[2016/04/19 14:58:40.635520, 1, pid=3634, effective(0, 0), real(0,
0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
wbint_QueryGroupList: struct wbint_QueryGroupList
in: struct wbint_QueryGroupList
[2016/04/19 14:58:42.112485, 10, pid=3634, effective(0, 0), real(0,
0)] ../source3/lib/messages.c:252(messaging_recv_cb)
messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from
3635
[2016/04/19 14:58:42.112513, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)
Domain EXAMPLE is marked as offline now.
[2016/04/19 14:58:42.113574, 1, pid=3634, effective(0, 0), real(0,
0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
wbint_QueryGroupList: struct wbint_QueryGroupList
out: struct wbint_QueryGroupList
groups : *
groups: struct wbint_Principals
num_principals : 0
principals: ARRAY(0)
result : NT_STATUS_IO_TIMEOUT
[2016/04/19 14:58:42.113616, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd_list_groups.c:128(winbindd_list_groups_done)
Domain EXAMPLE returned 0 groups
[2016/04/19 14:58:42.113623, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd_list_groups.c:134(winbindd_list_groups_done)
list_groups for domain EXAMPLE failed
[2016/04/19 14:58:42.113630, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd.c:787(wb_request_done)
wb_request_done[3640:LIST_GROUPS]: NT_STATUS_OK
[2016/04/19 14:58:42.113649, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd.c:851(winbind_client_response_written)
winbind_client_response_written[3640:LIST_GROUPS]: delivered
response to client
[2016/04/19 14:58:42.114552, 6, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd.c:957(winbind_client_request_read)
closing socket 28, client exited
[2016/04/19 14:59:13.272624, 10, pid=3634, effective(0, 0), real(0,
0)] ../source3/lib/messages.c:252(messaging_recv_cb)
messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from
3635
[2016/04/19 14:59:13.272656, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)
Domain EXAMPLE is marked as online now.
Partial log output after "wbinfo -u" -
/var/log/samba/winbind.log:
[2016/04/19 15:03:25.308776, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd.c:725(process_request)
process_request: Handling async request 3666:LIST_USERS
[2016/04/19 15:03:25.308788, 3, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd_list_users.c:58(winbindd_list_users_send)
list_users EXAMPLE
[2016/04/19 15:03:25.308808, 1, pid=3634, effective(0, 0), real(0,
0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
wbint_QueryUserList: struct wbint_QueryUserList
in: struct wbint_QueryUserList
[2016/04/19 15:03:29.418016, 10, pid=3634, effective(0, 0), real(0,
0)] ../source3/lib/messages.c:252(messaging_recv_cb)
messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from
3635
[2016/04/19 15:03:29.418040, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)
Domain EXAMPLE is marked as offline now.
[2016/04/19 15:03:29.418101, 1, pid=3634, effective(0, 0), real(0,
0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
wbint_QueryUserList: struct wbint_QueryUserList
out: struct wbint_QueryUserList
users : *
users: struct wbint_userinfos
num_userinfos : 0x00000000 (0)
userinfos: ARRAY(0)
result : NT_STATUS_IO_TIMEOUT
[2016/04/19 15:03:29.418172, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd_list_users.c:128(winbindd_list_users_done)
Domain EXAMPLE returned 0 users
[2016/04/19 15:03:29.418180, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd_list_users.c:134(winbindd_list_users_done)
List_users for domain EXAMPLE failed
[2016/04/19 15:03:29.418187, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd.c:787(wb_request_done)
wb_request_done[3666:LIST_USERS]: NT_STATUS_OK
[2016/04/19 15:03:29.418206, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd.c:851(winbind_client_response_written)
winbind_client_response_written[3666:LIST_USERS]: delivered
response to client
[2016/04/19 15:03:29.420295, 6, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd.c:957(winbind_client_request_read)
closing socket 28, client exited
[2016/04/19 15:04:00.414647, 10, pid=3634, effective(0, 0), real(0,
0)] ../source3/lib/messages.c:252(messaging_recv_cb)
messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from
3635
[2016/04/19 15:04:00.414669, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)
Domain EXAMPLE is marked as online now.
Partial log output after "getent passwd" -
/var/log/samba/winbind.log (the local users get displayed,
domain users - do not):
[2016/04/19 15:04:41.367195, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd.c:725(process_request)
process_request: Handling async request 3673:GETPWENT
[2016/04/19 15:04:41.367208, 3, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd_getpwent.c:50(winbindd_getpwent_send)
[ 3673]: getpwent
[2016/04/19 15:04:41.367307, 1, pid=3634, effective(0, 0), real(0,
0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
wbint_QueryUserList: struct wbint_QueryUserList
in: struct wbint_QueryUserList
[2016/04/19 15:04:41.367621, 1, pid=3634, effective(0, 0), real(0,
0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
wbint_QueryUserList: struct wbint_QueryUserList
out: struct wbint_QueryUserList
users : *
users: struct wbint_userinfos
num_userinfos : 0x00000000 (0)
userinfos: ARRAY(0)
result : NT_STATUS_OK
[2016/04/19 15:04:41.367652, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/wb_query_user_list.c:69(wb_query_user_list_done)
dcerpc_wbint_QueryUserList returned 0 users
[2016/04/19 15:04:41.367661, 1, pid=3634, effective(0, 0), real(0,
0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
wbint_QueryUserList: struct wbint_QueryUserList
in: struct wbint_QueryUserList
[2016/04/19 15:04:41.367680, 1, pid=3634, effective(0, 0), real(0,
0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
wbint_QueryUserList: struct wbint_QueryUserList
out: struct wbint_QueryUserList
users : *
users: struct wbint_userinfos
num_userinfos : 0x00000000 (0)
userinfos: ARRAY(0)
result : NT_STATUS_IO_TIMEOUT
[2016/04/19 15:04:41.367700, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/wb_next_pwent.c:109(wb_next_pwent_fetch_done)
query_user_list for domain EXAMPLE returned NT_STATUS_IO_TIMEOUT
[2016/04/19 15:04:41.367707, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd_getpwent.c:95(winbindd_getpwent_done)
winbindd_getpwent_done: done with 0 users
[2016/04/19 15:04:41.367712, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd.c:787(wb_request_done)
wb_request_done[3673:GETPWENT]: NT_STATUS_NO_MORE_ENTRIES
[2016/04/19 15:04:41.367726, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd.c:851(winbind_client_response_written)
winbind_client_response_written[3673:GETPWENT]: delivered response
to client
[2016/04/19 15:04:41.367900, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd.c:725(process_request)
process_request: Handling async request 3673:ENDPWENT
[2016/04/19 15:04:41.367916, 10, pid=3634, effective(0, 0), real(0,
0), class=winbind]
../source3/winbindd/winbindd.c:787(wb_request_done)
wb_request_done[3673:ENDPWENT]: NT_STATUS_OK
I think that the issue is similar to the issues described by L.P.H.
van Belle and Luca Bertoncello.
The Domain Controllers are MS Windows Server 2012 R2, AD Scheme is
2012.
Any ideas on how to solve this?
Thanks,
Dimitar
Andrew Martin
2016-Apr-19 13:40 UTC
[Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10
I am also having this issue, however in my case it is worse - samba shares do not work and "getent passwd <domain user>" also does not work. I tried adding the following to the "[global]" section of my smb.conf as suggested elsewhere, but no improvement: client ldap sasl wrapping = plain My smb.conf is very similar to yours, however I also have the following options set: encrypt passwords = true winbind nss info = rfc2307 Thanks, Andrew ----- Original Message -----> From: "Dimitar Hristov" <dimitar.hristov at outlook.com> > To: samba at lists.samba.org > Sent: Tuesday, April 19, 2016 8:23:50 AM > Subject: [Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10 > > Hi list, > > > > > > After the badlock patching of all samba machines in our organization > (all of them are domain members), some functionalities have stopped > working, more particularly: > > > - wbinfo -g (no output at all) > > > - wbinfo -u (no output at all) > > > - getent passwd (displays only local users) > > > - getent group > > > > > > working functionalities: > > > - samba shares are still accessible, with appropriate users set as > "valid", "write users" etc > > > - getent passwd <domain user> > > > - wbinfo --name-to-sid > > > > > > > > > Configuration files: > > > - /etc/samba/smb.conf > > > [global] > > > workgroup = EXAMPLE > > > realm = EXAMPLE.COM > > > security = ADS > > > dedicated keytab file = /etc/krb5.keytab > > > kerberos method = secrets and keytab > > > log file = /var/log/samba/%m.log > > > load printers = No > > > printcap name = /dev/null > > > winbind separator = + > > > winbind enum users = Yes > > > winbind enum groups = Yes > > > winbind use default domain = Yes > > > winbind refresh tickets = Yes > > > idmap config example : backend = ad > > > idmap config * : backend = tdb > > > printing = bsd > > > > > > - /etc/krb5.conf > > > [logging] > > > default = FILE:/var/log/krb5libs.log > > > kdc = FILE:/var/log/krb5kdc.log > > > admin_server = FILE:/var/log/kadmind.log > > > > > > [libdefaults] > > > dns_lookup_kdc = false > > > dns_lookup_realm = false > > > ticket_lifetime = 24h > > > renew_lifetime = 7d > > > forwardable = true > > > rdns = false > > > default_realm = EXAMPLE.COM > > > default_ccache_name = KEYRING:persistent:%{uid} > > > > > > [realms] > > > EXAMPLE.COM = { > > > kdc = example-adc01.example.com > > > admin_server = example-adc01.example.com > > > } > > > > > > [domain_realm] > > > .example.com = EXAMPLE.COM > > > example.com = EXAMPLE.COM > > > > > > - /etc/nsswitch.conf > > > > > > passwd: files winbind > > > shadow: files winbind > > > group: files winbind > > > initgroups: files > > > > > > hosts: files dns myhostname > > > > > > bootparams: nisplus [NOTFOUND=return] files > > > > > > ethers: files > > > netmasks: files > > > networks: files > > > protocols: files winbind > > > rpc: files winbind > > > services: files winbind > > > > > > netgroup: nisplus sss > > > > > > publickey: nisplus > > > > > > automount: files nisplus > > > aliases: files nisplus > > > > > > Installed packages: > > > - working environment > > > samba-4.2.3-12.el7_2.x86_64 > > > samba-common-4.2.3-12.el7_2.noarch > > > samba-winbind-modules-4.2.3-12.el7_2.x86_64 > > > samba-winbind-clients-4.2.3-12.el7_2.x86_64 > > > samba-common-tools-4.2.3-12.el7_2.x86_64 > > > samba-common-libs-4.2.3-12.el7_2.x86_64 > > > samba-winbind-4.2.3-12.el7_2.x86_64 > > > samba-libs-4.2.3-12.el7_2.x86_64 > > > samba-client-libs-4.2.3-12.el7_2.x86_64 > > > krb5-workstation-1.13.2-12.el7_2.x86_64 > > > krb5-libs-1.13.2-12.el7_2.x86_64 > > > > > > - not working (after the update) > > > samba-winbind-4.2.10-6.el7_2.x86_64 > > > samba-libs-4.2.10-6.el7_2.x86_64 > > > samba-common-4.2.10-6.el7_2.noarch > > > samba-client-libs-4.2.10-6.el7_2.x86_64 > > > samba-winbind-modules-4.2.10-6.el7_2.x86_64 > > > samba-winbind-clients-4.2.10-6.el7_2.x86_64 > > > samba-common-tools-4.2.10-6.el7_2.x86_64 > > > samba-common-libs-4.2.10-6.el7_2.x86_64 > > > samba-4.2.10-6.el7_2.x86_64 > > > krb5-workstation-1.13.2-12.el7_2.x86_64 > > > krb5-libs-1.13.2-12.el7_2.x86_64 > > > > > > --------------------- > > > > > > Partial log output after "wbinfo -g" - > /var/log/samba/winbind.log: > > > > > > [2016/04/19 14:58:40.635486, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd.c:725(process_request) > > > process_request: Handling async request 3640:LIST_GROUPS > > > [2016/04/19 14:58:40.635501, 3, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd_list_groups.c:58(winbindd_list_groups_send) > > > list_groups EXAMPLE > > > [2016/04/19 14:58:40.635520, 1, pid=3634, effective(0, 0), real(0, > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > > > wbint_QueryGroupList: struct wbint_QueryGroupList > > > in: struct wbint_QueryGroupList > > > [2016/04/19 14:58:42.112485, 10, pid=3634, effective(0, 0), real(0, > 0)] ../source3/lib/messages.c:252(messaging_recv_cb) > > > messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from > 3635 > > > [2016/04/19 14:58:42.112513, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline) > > > Domain EXAMPLE is marked as offline now. > > > [2016/04/19 14:58:42.113574, 1, pid=3634, effective(0, 0), real(0, > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > > > wbint_QueryGroupList: struct wbint_QueryGroupList > > > out: struct wbint_QueryGroupList > > > groups : * > > > groups: struct wbint_Principals > > > num_principals : 0 > > > principals: ARRAY(0) > > > result : NT_STATUS_IO_TIMEOUT > > > [2016/04/19 14:58:42.113616, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd_list_groups.c:128(winbindd_list_groups_done) > > > Domain EXAMPLE returned 0 groups > > > [2016/04/19 14:58:42.113623, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd_list_groups.c:134(winbindd_list_groups_done) > > > list_groups for domain EXAMPLE failed > > > [2016/04/19 14:58:42.113630, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd.c:787(wb_request_done) > > > wb_request_done[3640:LIST_GROUPS]: NT_STATUS_OK > > > [2016/04/19 14:58:42.113649, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd.c:851(winbind_client_response_written) > > > winbind_client_response_written[3640:LIST_GROUPS]: delivered > response to client > > > [2016/04/19 14:58:42.114552, 6, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd.c:957(winbind_client_request_read) > > > closing socket 28, client exited > > > [2016/04/19 14:59:13.272624, 10, pid=3634, effective(0, 0), real(0, > 0)] ../source3/lib/messages.c:252(messaging_recv_cb) > > > messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from > 3635 > > > [2016/04/19 14:59:13.272656, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online) > > > Domain EXAMPLE is marked as online now. > > > > > Partial log output after "wbinfo -u" - > /var/log/samba/winbind.log: > > > > > > [2016/04/19 15:03:25.308776, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd.c:725(process_request) > > > process_request: Handling async request 3666:LIST_USERS > > > [2016/04/19 15:03:25.308788, 3, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd_list_users.c:58(winbindd_list_users_send) > > > list_users EXAMPLE > > > [2016/04/19 15:03:25.308808, 1, pid=3634, effective(0, 0), real(0, > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > > > wbint_QueryUserList: struct wbint_QueryUserList > > > in: struct wbint_QueryUserList > > > [2016/04/19 15:03:29.418016, 10, pid=3634, effective(0, 0), real(0, > 0)] ../source3/lib/messages.c:252(messaging_recv_cb) > > > messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from > 3635 > > > [2016/04/19 15:03:29.418040, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline) > > > Domain EXAMPLE is marked as offline now. > > > [2016/04/19 15:03:29.418101, 1, pid=3634, effective(0, 0), real(0, > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > > > wbint_QueryUserList: struct wbint_QueryUserList > > > out: struct wbint_QueryUserList > > > users : * > > > users: struct wbint_userinfos > > > num_userinfos : 0x00000000 (0) > > > userinfos: ARRAY(0) > > > result : NT_STATUS_IO_TIMEOUT > > > [2016/04/19 15:03:29.418172, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd_list_users.c:128(winbindd_list_users_done) > > > Domain EXAMPLE returned 0 users > > > [2016/04/19 15:03:29.418180, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd_list_users.c:134(winbindd_list_users_done) > > > List_users for domain EXAMPLE failed > > > [2016/04/19 15:03:29.418187, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd.c:787(wb_request_done) > > > wb_request_done[3666:LIST_USERS]: NT_STATUS_OK > > > [2016/04/19 15:03:29.418206, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd.c:851(winbind_client_response_written) > > > winbind_client_response_written[3666:LIST_USERS]: delivered > response to client > > > [2016/04/19 15:03:29.420295, 6, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd.c:957(winbind_client_request_read) > > > closing socket 28, client exited > > > [2016/04/19 15:04:00.414647, 10, pid=3634, effective(0, 0), real(0, > 0)] ../source3/lib/messages.c:252(messaging_recv_cb) > > > messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from > 3635 > > > [2016/04/19 15:04:00.414669, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online) > > > Domain EXAMPLE is marked as online now. > > > > > Partial log output after "getent passwd" - > /var/log/samba/winbind.log (the local users get displayed, > domain users - do not): > > > > > > [2016/04/19 15:04:41.367195, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd.c:725(process_request) > > > process_request: Handling async request 3673:GETPWENT > > > [2016/04/19 15:04:41.367208, 3, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd_getpwent.c:50(winbindd_getpwent_send) > > > [ 3673]: getpwent > > > [2016/04/19 15:04:41.367307, 1, pid=3634, effective(0, 0), real(0, > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > > > wbint_QueryUserList: struct wbint_QueryUserList > > > in: struct wbint_QueryUserList > > > [2016/04/19 15:04:41.367621, 1, pid=3634, effective(0, 0), real(0, > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > > > wbint_QueryUserList: struct wbint_QueryUserList > > > out: struct wbint_QueryUserList > > > users : * > > > users: struct wbint_userinfos > > > num_userinfos : 0x00000000 (0) > > > userinfos: ARRAY(0) > > > result : NT_STATUS_OK > > > [2016/04/19 15:04:41.367652, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/wb_query_user_list.c:69(wb_query_user_list_done) > > > dcerpc_wbint_QueryUserList returned 0 users > > > [2016/04/19 15:04:41.367661, 1, pid=3634, effective(0, 0), real(0, > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > > > wbint_QueryUserList: struct wbint_QueryUserList > > > in: struct wbint_QueryUserList > > > [2016/04/19 15:04:41.367680, 1, pid=3634, effective(0, 0), real(0, > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > > > wbint_QueryUserList: struct wbint_QueryUserList > > > out: struct wbint_QueryUserList > > > users : * > > > users: struct wbint_userinfos > > > num_userinfos : 0x00000000 (0) > > > userinfos: ARRAY(0) > > > result : NT_STATUS_IO_TIMEOUT > > > [2016/04/19 15:04:41.367700, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/wb_next_pwent.c:109(wb_next_pwent_fetch_done) > > > query_user_list for domain EXAMPLE returned NT_STATUS_IO_TIMEOUT > > > [2016/04/19 15:04:41.367707, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd_getpwent.c:95(winbindd_getpwent_done) > > > winbindd_getpwent_done: done with 0 users > > > [2016/04/19 15:04:41.367712, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd.c:787(wb_request_done) > > > wb_request_done[3673:GETPWENT]: NT_STATUS_NO_MORE_ENTRIES > > > [2016/04/19 15:04:41.367726, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd.c:851(winbind_client_response_written) > > > winbind_client_response_written[3673:GETPWENT]: delivered response > to client > > > [2016/04/19 15:04:41.367900, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd.c:725(process_request) > > > process_request: Handling async request 3673:ENDPWENT > > > [2016/04/19 15:04:41.367916, 10, pid=3634, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd.c:787(wb_request_done) > > > wb_request_done[3673:ENDPWENT]: NT_STATUS_OK > > > > > > I think that the issue is similar to the issues described by L.P.H. > van Belle and Luca Bertoncello. > > > > > > The Domain Controllers are MS Windows Server 2012 R2, AD Scheme is > 2012. > > > > > > Any ideas on how to solve this? > > > > > > Thanks, > > > Dimitar > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
Dimitar Hristov
2016-Apr-20 11:23 UTC
[Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10
Hi list,
I'd like to update you on the issue, as I did some more tests. First,
I've added some directives to smb.conf (in italic):
[global]
netbios name = testserver
security = ADS
workgroup = EXAMPLE
realm = EXAMPLE.COM
log file = /var/log/samba/%m.log
log level = 10
dedicated keytab file = /etc/krb5.keytab
kerberos method = secrets and keytab
winbind refresh tickets = yes
winbind trusted domains only = no
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
winbind separator = +
client ldap sasl wrapping = plain
idmap config EXAMPLE : backend = ad
idmap config EXAMPLE:schema_mode = rfc2307
idmap config EXAMPLE:range = 10000-99999
winbind nss info = rfc2307
load printers = no
printing = bsd
printcap name = /dev/null
With "client ldap sasl wrapping = plain" set, the domain doesn't
go "offline". This can be seen by comparing the partial log output
after "wbinfo -g", with the one in my first email.
Also, I have tested joining a newly provisioned machine to the domain with 4.2.3
and 4.2.10 - it works without any issues when using 4.2.3, and it doesn't
work with 4.2.10. I used "net ads join" with debuglevel=1, please see
the output (working one - with 4.2.3, and not working - with 4.2.10):
### Join with samba 4.2.10###
net ads join -U Administrator --debuglevel=1
Enter Administrator's password:
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
in: struct libnet_JoinCtx
dc_name : NULL
machine_name : 'TESTSERVER'
domain_name : *
domain_name : 'EXAMPLE.COM'
account_ou : NULL
admin_account : 'Administrator'
admin_domain : NULL
machine_password : NULL
join_flags : 0x00000023 (35)
0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS
0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
0: WKSSVC_JOIN_FLAGS_DEFER_SPN
0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
os_version : NULL
os_name : NULL
create_upn : 0x00 (0)
upn : NULL
modify_config : 0x00 (0)
ads : NULL
debug : 0x01 (1)
use_kerberos : 0x00 (0)
secure_channel_type : SEC_CHAN_WKSTA (2)
Failed to setup SPNEGO negTokenInit request: NT_STATUS_INTERNAL_ERROR
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
out: struct libnet_JoinCtx
account_name : NULL
netbios_domain_name : 'EXAMPLE'
dns_domain_name : 'example.com'
forest_name : 'example.com'
dn : NULL
domain_sid : *
domain_sid :
S-1-5-21-1214440339-1979792683-1801674531
modified_config : 0x00 (0)
error_string : 'Failed to set machine spn: Time
limit exceeded
Do you have sufficient permissions to create machine accounts?'
domain_is_ad : 0x01 (1)
result : WERR_GENERAL_FAILURE
Failed to join domain: Failed to set machine spn: Time limit exceeded
Do you have sufficient permissions to create machine accounts?
### End join with samba 4.2.10 ###
### Join with samba 4.2.3 ###
net ads join -U Administrator --debuglevel=1
Enter Administrator's password:
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
in: struct libnet_JoinCtx
dc_name : NULL
machine_name : 'TESTSERVER'
domain_name : *
domain_name : 'EXAMPLE.COM'
account_ou : NULL
admin_account : 'Administrator'
admin_domain : NULL
machine_password : NULL
join_flags : 0x00000023 (35)
0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS
0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
0: WKSSVC_JOIN_FLAGS_DEFER_SPN
0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
os_version : NULL
os_name : NULL
create_upn : 0x00 (0)
upn : NULL
modify_config : 0x00 (0)
ads : NULL
debug : 0x01 (1)
use_kerberos : 0x00 (0)
secure_channel_type : SEC_CHAN_WKSTA (2)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
out: struct libnet_JoinCtx
account_name : NULL
netbios_domain_name : 'EXAMPLE'
dns_domain_name : 'example.com'
forest_name : 'example.com'
dn :
'CN=testserver,OU=DefaultBin,DC=example,DC=com'
domain_sid : *
domain_sid :
S-1-5-21-1214440339-1979792683-1801674531
modified_config : 0x00 (0)
error_string : NULL
domain_is_ad : 0x01 (1)
result : WERR_OK
Using short domain name -- EXAMPLE
Joined 'TESTSERVER' to dns domain 'example.com'
### End join with samba 4.2.3 ###
###/var/log/samba/winbind.log - after "wbinfo -g"###
[2016/04/20 14:01:44.879293, 10, pid=2301, effective(0, 0), real(0, 0),
class=winbind] ../source3/winbindd/winbindd.c:725(process_request)
process_request: Handling async request 2429:LIST_GROUPS
[2016/04/20 14:01:44.879299, 3, pid=2301, effective(0, 0), real(0, 0),
class=winbind]
../source3/winbindd/winbindd_list_groups.c:58(winbindd_list_groups_send)
list_groups EXAMPLE
[2016/04/20 14:01:44.879313, 1, pid=2301, effective(0, 0), real(0, 0)]
../librpc/ndr/ndr.c:439(ndr_print_function_debug)
wbint_QueryGroupList: struct wbint_QueryGroupList
in: struct wbint_QueryGroupList
[2016/04/20 14:01:44.879345, 1, pid=2301, effective(0, 0), real(0, 0)]
../librpc/ndr/ndr.c:439(ndr_print_function_debug)
wbint_QueryGroupList: struct wbint_QueryGroupList
out: struct wbint_QueryGroupList
groups : *
groups: struct wbint_Principals
num_principals : 0
principals: ARRAY(0)
result : NT_STATUS_IO_TIMEOUT
[2016/04/20 14:01:44.879368, 10, pid=2301, effective(0, 0), real(0, 0),
class=winbind]
../source3/winbindd/winbindd_list_groups.c:128(winbindd_list_groups_done)
Domain EXAMPLE returned 0 groups
[2016/04/20 14:01:44.879373, 10, pid=2301, effective(0, 0), real(0, 0),
class=winbind]
../source3/winbindd/winbindd_list_groups.c:134(winbindd_list_groups_done)
list_groups for domain EXAMPLE failed
[2016/04/20 14:01:44.879378, 10, pid=2301, effective(0, 0), real(0, 0),
class=winbind] ../source3/winbindd/winbindd.c:787(wb_request_done)
wb_request_done[2429:LIST_GROUPS]: NT_STATUS_OK
###End /var/log/samba/winbind.log - after "wbinfo -g" ###
Hope that helps, as quite a lot of people are expiriencing the same issue. I
missed to provide information about the distributions used for testing - CentOS
7.2, Debian Jessie 8.4
Regards,
Dimitar
> Date: Tue, 19 Apr 2016 08:40:45 -0500
> From: amartin at xes-inc.com
> To: dimitar.hristov at outlook.com
> CC: samba at lists.samba.org
> Subject: Re: [Samba] wbinfo -u, wbinfo -g not working after samba update
from 4.2.3 to 4.2.10
>
> I am also having this issue, however in my case it is worse - samba shares
do not work
> and "getent passwd <domain user>" also does not work. I
tried adding the following to the
> "[global]" section of my smb.conf as suggested elsewhere, but no
improvement:
> client ldap sasl wrapping = plain
>
> My smb.conf is very similar to yours, however I also have the following
options set:
> encrypt passwords = true
> winbind nss info = rfc2307
>
> Thanks,
>
> Andrew
>
> ----- Original Message -----
> > From: "Dimitar Hristov" <dimitar.hristov at
outlook.com>
> > To: samba at lists.samba.org
> > Sent: Tuesday, April 19, 2016 8:23:50 AM
> > Subject: [Samba] wbinfo -u, wbinfo -g not working after samba update
from 4.2.3 to 4.2.10
> >
> > Hi list,
> >
> >
> >
> >
> >
> > After the badlock patching of all samba machines in our
organization
> > (all of them are domain members), some functionalities have
stopped
> > working, more particularly:
> >
> >
> > - wbinfo -g (no output at all)
> >
> >
> > - wbinfo -u (no output at all)
> >
> >
> > - getent passwd (displays only local users)
> >
> >
> > - getent group
> >
> >
> >
> >
> >
> > working functionalities:
> >
> >
> > - samba shares are still accessible, with appropriate users set as
> > "valid", "write users" etc
> >
> >
> > - getent passwd <domain user>
> >
> >
> > - wbinfo --name-to-sid
> >
> >
> >
> >
> >
> >
> >
> >
> > Configuration files:
> >
> >
> > - /etc/samba/smb.conf
> >
> >
> > [global]
> >
> >
> > workgroup = EXAMPLE
> >
> >
> > realm = EXAMPLE.COM
> >
> >
> > security = ADS
> >
> >
> > dedicated keytab file = /etc/krb5.keytab
> >
> >
> > kerberos method = secrets and keytab
> >
> >
> > log file = /var/log/samba/%m.log
> >
> >
> > load printers = No
> >
> >
> > printcap name = /dev/null
> >
> >
> > winbind separator = +
> >
> >
> > winbind enum users = Yes
> >
> >
> > winbind enum groups = Yes
> >
> >
> > winbind use default domain = Yes
> >
> >
> > winbind refresh tickets = Yes
> >
> >
> > idmap config example : backend = ad
> >
> >
> > idmap config * : backend = tdb
> >
> >
> > printing = bsd
> >
> >
> >
> >
> >
> > - /etc/krb5.conf
> >
> >
> > [logging]
> >
> >
> > default = FILE:/var/log/krb5libs.log
> >
> >
> > kdc = FILE:/var/log/krb5kdc.log
> >
> >
> > admin_server = FILE:/var/log/kadmind.log
> >
> >
> >
> >
> >
> > [libdefaults]
> >
> >
> > dns_lookup_kdc = false
> >
> >
> > dns_lookup_realm = false
> >
> >
> > ticket_lifetime = 24h
> >
> >
> > renew_lifetime = 7d
> >
> >
> > forwardable = true
> >
> >
> > rdns = false
> >
> >
> > default_realm = EXAMPLE.COM
> >
> >
> > default_ccache_name = KEYRING:persistent:%{uid}
> >
> >
> >
> >
> >
> > [realms]
> >
> >
> > EXAMPLE.COM = {
> >
> >
> > kdc = example-adc01.example.com
> >
> >
> > admin_server = example-adc01.example.com
> >
> >
> > }
> >
> >
> >
> >
> >
> > [domain_realm]
> >
> >
> > .example.com = EXAMPLE.COM
> >
> >
> > example.com = EXAMPLE.COM
> >
> >
> >
> >
> >
> > - /etc/nsswitch.conf
> >
> >
> >
> >
> >
> > passwd: files winbind
> >
> >
> > shadow: files winbind
> >
> >
> > group: files winbind
> >
> >
> > initgroups: files
> >
> >
> >
> >
> >
> > hosts: files dns myhostname
> >
> >
> >
> >
> >
> > bootparams: nisplus [NOTFOUND=return] files
> >
> >
> >
> >
> >
> > ethers: files
> >
> >
> > netmasks: files
> >
> >
> > networks: files
> >
> >
> > protocols: files winbind
> >
> >
> > rpc: files winbind
> >
> >
> > services: files winbind
> >
> >
> >
> >
> >
> > netgroup: nisplus sss
> >
> >
> >
> >
> >
> > publickey: nisplus
> >
> >
> >
> >
> >
> > automount: files nisplus
> >
> >
> > aliases: files nisplus
> >
> >
> >
> >
> >
> > Installed packages:
> >
> >
> > - working environment
> >
> >
> > samba-4.2.3-12.el7_2.x86_64
> >
> >
> > samba-common-4.2.3-12.el7_2.noarch
> >
> >
> > samba-winbind-modules-4.2.3-12.el7_2.x86_64
> >
> >
> > samba-winbind-clients-4.2.3-12.el7_2.x86_64
> >
> >
> > samba-common-tools-4.2.3-12.el7_2.x86_64
> >
> >
> > samba-common-libs-4.2.3-12.el7_2.x86_64
> >
> >
> > samba-winbind-4.2.3-12.el7_2.x86_64
> >
> >
> > samba-libs-4.2.3-12.el7_2.x86_64
> >
> >
> > samba-client-libs-4.2.3-12.el7_2.x86_64
> >
> >
> > krb5-workstation-1.13.2-12.el7_2.x86_64
> >
> >
> > krb5-libs-1.13.2-12.el7_2.x86_64
> >
> >
> >
> >
> >
> > - not working (after the update)
> >
> >
> > samba-winbind-4.2.10-6.el7_2.x86_64
> >
> >
> > samba-libs-4.2.10-6.el7_2.x86_64
> >
> >
> > samba-common-4.2.10-6.el7_2.noarch
> >
> >
> > samba-client-libs-4.2.10-6.el7_2.x86_64
> >
> >
> > samba-winbind-modules-4.2.10-6.el7_2.x86_64
> >
> >
> > samba-winbind-clients-4.2.10-6.el7_2.x86_64
> >
> >
> > samba-common-tools-4.2.10-6.el7_2.x86_64
> >
> >
> > samba-common-libs-4.2.10-6.el7_2.x86_64
> >
> >
> > samba-4.2.10-6.el7_2.x86_64
> >
> >
> > krb5-workstation-1.13.2-12.el7_2.x86_64
> >
> >
> > krb5-libs-1.13.2-12.el7_2.x86_64
> >
> >
> >
> >
> >
> > ---------------------
> >
> >
> >
> >
> >
> > Partial log output after "wbinfo -g" -
> > /var/log/samba/winbind.log:
> >
> >
> >
> >
> >
> > [2016/04/19 14:58:40.635486, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd.c:725(process_request)
> >
> >
> > process_request: Handling async request 3640:LIST_GROUPS
> >
> >
> > [2016/04/19 14:58:40.635501, 3, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> >
../source3/winbindd/winbindd_list_groups.c:58(winbindd_list_groups_send)
> >
> >
> > list_groups EXAMPLE
> >
> >
> > [2016/04/19 14:58:40.635520, 1, pid=3634, effective(0, 0),
real(0,
> > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> >
> >
> > wbint_QueryGroupList: struct wbint_QueryGroupList
> >
> >
> > in: struct wbint_QueryGroupList
> >
> >
> > [2016/04/19 14:58:42.112485, 10, pid=3634, effective(0, 0),
real(0,
> > 0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> >
> >
> > messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from
> > 3635
> >
> >
> > [2016/04/19 14:58:42.112513, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)
> >
> >
> > Domain EXAMPLE is marked as offline now.
> >
> >
> > [2016/04/19 14:58:42.113574, 1, pid=3634, effective(0, 0),
real(0,
> > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> >
> >
> > wbint_QueryGroupList: struct wbint_QueryGroupList
> >
> >
> > out: struct wbint_QueryGroupList
> >
> >
> > groups : *
> >
> >
> > groups: struct wbint_Principals
> >
> >
> > num_principals : 0
> >
> >
> > principals: ARRAY(0)
> >
> >
> > result : NT_STATUS_IO_TIMEOUT
> >
> >
> > [2016/04/19 14:58:42.113616, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> >
../source3/winbindd/winbindd_list_groups.c:128(winbindd_list_groups_done)
> >
> >
> > Domain EXAMPLE returned 0 groups
> >
> >
> > [2016/04/19 14:58:42.113623, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> >
../source3/winbindd/winbindd_list_groups.c:134(winbindd_list_groups_done)
> >
> >
> > list_groups for domain EXAMPLE failed
> >
> >
> > [2016/04/19 14:58:42.113630, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd.c:787(wb_request_done)
> >
> >
> > wb_request_done[3640:LIST_GROUPS]: NT_STATUS_OK
> >
> >
> > [2016/04/19 14:58:42.113649, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> >
../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> >
> >
> > winbind_client_response_written[3640:LIST_GROUPS]: delivered
> > response to client
> >
> >
> > [2016/04/19 14:58:42.114552, 6, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd.c:957(winbind_client_request_read)
> >
> >
> > closing socket 28, client exited
> >
> >
> > [2016/04/19 14:59:13.272624, 10, pid=3634, effective(0, 0),
real(0,
> > 0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> >
> >
> > messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from
> > 3635
> >
> >
> > [2016/04/19 14:59:13.272656, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)
> >
> >
> > Domain EXAMPLE is marked as online now.
> >
> >
> >
> >
> > Partial log output after "wbinfo -u" -
> > /var/log/samba/winbind.log:
> >
> >
> >
> >
> >
> > [2016/04/19 15:03:25.308776, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd.c:725(process_request)
> >
> >
> > process_request: Handling async request 3666:LIST_USERS
> >
> >
> > [2016/04/19 15:03:25.308788, 3, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> >
../source3/winbindd/winbindd_list_users.c:58(winbindd_list_users_send)
> >
> >
> > list_users EXAMPLE
> >
> >
> > [2016/04/19 15:03:25.308808, 1, pid=3634, effective(0, 0),
real(0,
> > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> >
> >
> > wbint_QueryUserList: struct wbint_QueryUserList
> >
> >
> > in: struct wbint_QueryUserList
> >
> >
> > [2016/04/19 15:03:29.418016, 10, pid=3634, effective(0, 0),
real(0,
> > 0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> >
> >
> > messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from
> > 3635
> >
> >
> > [2016/04/19 15:03:29.418040, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)
> >
> >
> > Domain EXAMPLE is marked as offline now.
> >
> >
> > [2016/04/19 15:03:29.418101, 1, pid=3634, effective(0, 0),
real(0,
> > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> >
> >
> > wbint_QueryUserList: struct wbint_QueryUserList
> >
> >
> > out: struct wbint_QueryUserList
> >
> >
> > users : *
> >
> >
> > users: struct wbint_userinfos
> >
> >
> > num_userinfos : 0x00000000 (0)
> >
> >
> > userinfos: ARRAY(0)
> >
> >
> > result : NT_STATUS_IO_TIMEOUT
> >
> >
> > [2016/04/19 15:03:29.418172, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> >
../source3/winbindd/winbindd_list_users.c:128(winbindd_list_users_done)
> >
> >
> > Domain EXAMPLE returned 0 users
> >
> >
> > [2016/04/19 15:03:29.418180, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> >
../source3/winbindd/winbindd_list_users.c:134(winbindd_list_users_done)
> >
> >
> > List_users for domain EXAMPLE failed
> >
> >
> > [2016/04/19 15:03:29.418187, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd.c:787(wb_request_done)
> >
> >
> > wb_request_done[3666:LIST_USERS]: NT_STATUS_OK
> >
> >
> > [2016/04/19 15:03:29.418206, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> >
../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> >
> >
> > winbind_client_response_written[3666:LIST_USERS]: delivered
> > response to client
> >
> >
> > [2016/04/19 15:03:29.420295, 6, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd.c:957(winbind_client_request_read)
> >
> >
> > closing socket 28, client exited
> >
> >
> > [2016/04/19 15:04:00.414647, 10, pid=3634, effective(0, 0),
real(0,
> > 0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> >
> >
> > messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from
> > 3635
> >
> >
> > [2016/04/19 15:04:00.414669, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)
> >
> >
> > Domain EXAMPLE is marked as online now.
> >
> >
> >
> >
> > Partial log output after "getent passwd" -
> > /var/log/samba/winbind.log (the local users get displayed,
> > domain users - do not):
> >
> >
> >
> >
> >
> > [2016/04/19 15:04:41.367195, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd.c:725(process_request)
> >
> >
> > process_request: Handling async request 3673:GETPWENT
> >
> >
> > [2016/04/19 15:04:41.367208, 3, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd_getpwent.c:50(winbindd_getpwent_send)
> >
> >
> > [ 3673]: getpwent
> >
> >
> > [2016/04/19 15:04:41.367307, 1, pid=3634, effective(0, 0),
real(0,
> > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> >
> >
> > wbint_QueryUserList: struct wbint_QueryUserList
> >
> >
> > in: struct wbint_QueryUserList
> >
> >
> > [2016/04/19 15:04:41.367621, 1, pid=3634, effective(0, 0),
real(0,
> > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> >
> >
> > wbint_QueryUserList: struct wbint_QueryUserList
> >
> >
> > out: struct wbint_QueryUserList
> >
> >
> > users : *
> >
> >
> > users: struct wbint_userinfos
> >
> >
> > num_userinfos : 0x00000000 (0)
> >
> >
> > userinfos: ARRAY(0)
> >
> >
> > result : NT_STATUS_OK
> >
> >
> > [2016/04/19 15:04:41.367652, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> >
../source3/winbindd/wb_query_user_list.c:69(wb_query_user_list_done)
> >
> >
> > dcerpc_wbint_QueryUserList returned 0 users
> >
> >
> > [2016/04/19 15:04:41.367661, 1, pid=3634, effective(0, 0),
real(0,
> > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> >
> >
> > wbint_QueryUserList: struct wbint_QueryUserList
> >
> >
> > in: struct wbint_QueryUserList
> >
> >
> > [2016/04/19 15:04:41.367680, 1, pid=3634, effective(0, 0),
real(0,
> > 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> >
> >
> > wbint_QueryUserList: struct wbint_QueryUserList
> >
> >
> > out: struct wbint_QueryUserList
> >
> >
> > users : *
> >
> >
> > users: struct wbint_userinfos
> >
> >
> > num_userinfos : 0x00000000 (0)
> >
> >
> > userinfos: ARRAY(0)
> >
> >
> > result : NT_STATUS_IO_TIMEOUT
> >
> >
> > [2016/04/19 15:04:41.367700, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/wb_next_pwent.c:109(wb_next_pwent_fetch_done)
> >
> >
> > query_user_list for domain EXAMPLE returned NT_STATUS_IO_TIMEOUT
> >
> >
> > [2016/04/19 15:04:41.367707, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd_getpwent.c:95(winbindd_getpwent_done)
> >
> >
> > winbindd_getpwent_done: done with 0 users
> >
> >
> > [2016/04/19 15:04:41.367712, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd.c:787(wb_request_done)
> >
> >
> > wb_request_done[3673:GETPWENT]: NT_STATUS_NO_MORE_ENTRIES
> >
> >
> > [2016/04/19 15:04:41.367726, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> >
../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> >
> >
> > winbind_client_response_written[3673:GETPWENT]: delivered
response
> > to client
> >
> >
> > [2016/04/19 15:04:41.367900, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd.c:725(process_request)
> >
> >
> > process_request: Handling async request 3673:ENDPWENT
> >
> >
> > [2016/04/19 15:04:41.367916, 10, pid=3634, effective(0, 0),
real(0,
> > 0), class=winbind]
> > ../source3/winbindd/winbindd.c:787(wb_request_done)
> >
> >
> > wb_request_done[3673:ENDPWENT]: NT_STATUS_OK
> >
> >
> >
> >
> >
> > I think that the issue is similar to the issues described by
L.P.H.
> > van Belle and Luca Bertoncello.
> >
> >
> >
> >
> >
> > The Domain Controllers are MS Windows Server 2012 R2, AD Scheme is
> > 2012.
> >
> >
> >
> >
> >
> > Any ideas on how to solve this?
> >
> >
> >
> >
> >
> > Thanks,
> >
> >
> > Dimitar
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
> >
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
Reasonably Related Threads
- wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10
- Problems after migration from samba 3.5.2 to samba 4.3.1
- Ubuntu 14.04 samba update
- FW: Domain member seems to work, wbinfo -u not (update4)
- Problems after migration from samba 3.5.2 to samba 4.3.1