samba - Aug 2021 - - Server reboot taking time when winbind service on-line.

Hi Team,

My client has an issue with  the zone running winbind has some problems
starting.
it takes a lot of time to boot (forever) and login via ssh takes minutes
when winbind is enabled.

After disabling "winbind" service booting fast.

I could see there is no issue in samba configuration.

OS version is : Solaris 11.4 SRU 32

=================[global]
        interfaces = xx.xx.xx.xx
        log file = /var/samba/log/%m.log
        max log size = 100
        nbt client socket address = xx.xx.xx.xx
        realm = WEB.NET.IN
        security = ADS
        server max protocol = NT1
        server string = Samba (%v) auf %h
        unix extensions = No
        username map script = /etc/samba/usermap.sh
        workgroup = NETWORK
        idmap config network : range = 50000-999999
        idmap config network : backend = rid
        idmap config * : range = 30000-39999
        idmap config * : backend = tdb
        hosts allow = 10. 127. localhost
        include = /etc/samba/smb_kaetest.conf
        invalid users = root daemon bin sys adm lp uucp nuucp smmsp listen
sshd instadm noaccess nobody4 svctag postgres webservd gdm
        wide links = Yes
=================
Is this good to disable winbind service in order to avoid any samba share
issue?

See the below error in log.smbdd.

[2021/05/07 17:27:27.552185,  2]
../../source3/lib/dmallocmsg.c:78(register_dmalloc_msgs)
  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2021/05/07 17:32:40.334823,  0]
../../source3/winbindd/winbindd.c:1784(main)
  winbindd version 4.13.1 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2020
[2021/05/07 17:32:40.345937,  2]
../../source3/lib/tallocmsg.c:84(register_msg_pool_usage)
  Registered MSG_REQ_POOL_USAGE
[2021/05/07 17:32:40.346075,  2]
../../source3/lib/dmallocmsg.c:78(register_dmalloc_msgs)
  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED

Any change has to be done from the winbind source file?

Did not find any errors in winbind SVC logs.
(/var/svc/log/network-winbind:default.log)

Could you please advise me.

Thanks & Regards,
B.Suresh

On Tue, 2021-08-10 at 15:40 +0530, suresh b via samba
wrote:
> Hi Team,
> 
> My client has an issue with  the zone running winbind has some
> problems
> starting.
> it takes a lot of time to boot (forever) and login via ssh takes
> minutes
> when winbind is enabled.
It looks like you are using Samba 4.13.1, so you must use winbind if
you are using 'security = ADS' on a domain joined computer.
> 
> After disabling "winbind" service booting fast.
> 
> I could see there is no issue in samba configuration.
Yes there is :-)

'nbt client socket address' is deprecated, try replacing it with
'bind
interfaces only = Yes'
> 
> OS version is : Solaris 11.4 SRU 32
> 
> =================> [global]
>         interfaces = xx.xx.xx.xx
>         log file = /var/samba/log/%m.log
>         max log size = 100
>         nbt client socket address = xx.xx.xx.xx
>         realm = WEB.NET.IN
>         security = ADS
>         server max protocol = NT1
Why are you using NT1 ?
>         server string = Samba (%v) auf %h
>         unix extensions = No
>         username map script = /etc/samba/usermap.sh
What is in 'usermap.sh'
>         workgroup = NETWORK
>         idmap config network : range = 50000-999999
>         idmap config network : backend = rid
>         idmap config * : range = 30000-39999
>         idmap config * : backend = tdb
>         hosts allow = 10. 127. localhost
>         include = /etc/samba/smb_kaetest.conf
What is in the include file
>         invalid users = root daemon bin sys adm lp uucp nuucp smmsp
> listen
> sshd instadm noaccess nobody4 svctag postgres webservd gdm
>         wide links = Yes
> =================> 
> Is this good to disable winbind service in order to avoid any samba
> share
> issue?
No, you will get no share access without winbind.
> 
> See the below error in log.smbdd.
> 
> [2021/05/07 17:27:27.552185,  2]
> ../../source3/lib/dmallocmsg.c:78(register_dmalloc_msgs)
>   Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
> [2021/05/07 17:32:40.334823,  0]
> ../../source3/winbindd/winbindd.c:1784(main)
>   winbindd version 4.13.1 started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2020
> [2021/05/07 17:32:40.345937,  2]
> ../../source3/lib/tallocmsg.c:84(register_msg_pool_usage)
>   Registered MSG_REQ_POOL_USAGE
> [2021/05/07 17:32:40.346075,  2]
> ../../source3/lib/dmallocmsg.c:78(register_dmalloc_msgs)
>   Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
There doesn't seem to be an error there, just winbind starting.
> 
> Any change has to be done from the winbind source file?
I do not think so, I think it is probably a configuration error.

Rowland