Hi all, I did upgrade from samba 3.0.28 to 3.4.1 on a domain member server. Now it seems there is a problem with reverse name resolving of winbind. The tools "ls" and "getfacl" shows UIDs instead of the usernames. When I run id "<username>" the username and the UID are shown correctly. After using "id" the name is also listed fine in the output of "ls" or "getfacl" for this user. The problem also exists w/ samba 3.4.2. Any ideas? Thanks, Alex PS: "id <username>", "getent passwd <username>" and "wbinfo -u" are working fine.
passwd: compat winbind group: compat winbind Michael Wood schrieb:> 2009/10/5 Alexander F?disch <foedisch at eva.mpg.de>: >> Hi all, >> >> I did upgrade from samba 3.0.28 to 3.4.1 on a domain member server. Now it >> seems there is a problem with reverse name resolving of winbind. >> >> The tools "ls" and "getfacl" shows UIDs instead of the usernames. When I run >> id "<username>" the username and the UID are shown correctly. After using >> "id" the name is also listed fine in the output of "ls" or "getfacl" for >> this user. >> >> The problem also exists w/ samba 3.4.2. >> >> >> Any ideas? > > What does your /etc/nsswitch.conf file look like? >-- Mit besten Gr??en / Best Regards Alexander F?disch Max Planck Institute for Evolutionary Anthropology -Central IT Department- Deutscher Platz 6 D-04103 Leipzig Phone: +49 (0)341 3550-168 +49 (0)341 3550-154 Fax: +49 (0)341 3550-119 Email: foedisch at eva.mpg.de -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 5905 bytes Desc: S/MIME Cryptographic Signature URL: <http://lists.samba.org/pipermail/samba/attachments/20091005/7ca23a82/attachment.bin>
Does nobody have the same problem? Same behaviour w/ 3.4.3 It also takes a "long" time resolving names: # date; id <user>; date Mi Nov 25 14:08:55 CET 2009 uid=<...> Gruppen=<...> Mi Nov 25 14:09:01 CET 2009 Sometimes it tooks more than 10 seconds... Sometimes users get an error message "Access denied", even filesystem permissions and samba settings are correct. I think samba /winbind is running in a timout while resolving names and so samba cannot grant access to files / folders. Any ideas what we can do? Thanks, Alex Alexander F?disch schrieb:> Hi all, > > I did upgrade from samba 3.0.28 to 3.4.1 on a domain member server. Now > it seems there is a problem with reverse name resolving of winbind. > > The tools "ls" and "getfacl" shows UIDs instead of the usernames. When I > run id "<username>" the username and the UID are shown correctly. After > using "id" the name is also listed fine in the output of "ls" or > "getfacl" for this user. > > The problem also exists w/ samba 3.4.2. > > > Any ideas? > > > Thanks, > Alex > > PS: > "id <username>", "getent passwd <username>" and "wbinfo -u" are working > fine. >
On Wed, Nov 25, 2009 at 6:15 AM, Alexander F?disch <foedisch at eva.mpg.de>wrote:> Does nobody have the same problem? Same behaviour w/ 3.4.3 > It also takes a "long" time resolving names: > > # date; id <user>; date > Mi Nov 25 14:08:55 CET 2009 > uid=<...> Gruppen=<...> > Mi Nov 25 14:09:01 CET 2009 > > Sometimes it tooks more than 10 seconds... > > Sometimes users get an error message "Access denied", even filesystem > permissions and samba settings are correct. I think samba /winbind is > running in a timout while resolving names and so samba cannot grant access > to files / folders. > > > Any ideas what we can do? >Can you find any hints in the log.winbindd log or the log.wb-<domain> log. I had problems like that in the past, but they sem to be resolved in 3.4.2. You may have a different problem. Robert LeBlanc Life Sciences & Undergraduate Education Computer Support Brigham Young University
Hi,
unfortunately the hole logfile is filled with:
[2009/11/25 15:59:20, 2] winbindd/winbindd.c:878(remove_client)
final write to client failed: Broken pipe
what is that??
our winbind-config:
idmap backend = rid:EVAN=10000-50000
idmap gid = 10000-50000
idmap uid = 10000-50000
winbind enum users = yes
winbind enum groups = yes
winbind trusted domains only = no
winbind use default domain = yes
allow trusted domains = no
strict locking = no
wide links = no
socket options = SO_SNDBUF=131072 SO_RCVBUF=131072 TCP_NODELAY
IPTOS_LOWDELAY SO_KEEPALIVE
use sendfile = yes
max xmit = 65535
read raw = no
write raw = no
large readwrite = yes
Best
Alex
Robert LeBlanc schrieb:> On Wed, Nov 25, 2009 at 6:15 AM, Alexander F?disch <foedisch at
eva.mpg.de
> <mailto:foedisch at eva.mpg.de>> wrote:
>
> Does nobody have the same problem? Same behaviour w/ 3.4.3
> It also takes a "long" time resolving names:
>
> # date; id <user>; date
> Mi Nov 25 14:08:55 CET 2009
> uid=<...> Gruppen=<...>
> Mi Nov 25 14:09:01 CET 2009
>
> Sometimes it tooks more than 10 seconds...
>
> Sometimes users get an error message "Access denied", even
> filesystem permissions and samba settings are correct. I think samba
> /winbind is running in a timout while resolving names and so samba
> cannot grant access to files / folders.
>
>
> Any ideas what we can do?
>
>
> Can you find any hints in the log.winbindd log or the log.wb-<domain>
> log. I had problems like that in the past, but they sem to be resolved
> in 3.4.2. You may have a different problem.
>
>
> Robert LeBlanc
> Life Sciences & Undergraduate Education Computer Support
> Brigham Young University
>