thr3ads.net - samba - [Samba] winbind AD nested group issues [Jun 2012]

If this information is useful, please help other people find it:
Share via:

Lars Maes

2012-Jun-25 13:02 UTC

[Samba] winbind AD nested group issues

A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6083 bytes
Desc: not available
URL:
<http://lists.samba.org/pipermail/samba/attachments/20120625/569cea1a/attachment.bin>

Lars Maes

2012-Jun-26 10:36 UTC

head link

[Samba] Winbind AD nested group issues

Dear fellow samba users,

 

I have a weird issue. I?ve installed winbind 3.6.5 from the debian backports
archive and joined is to an AD.

 

Wbinfo ?u is ginving me all domain users.

Wbinfo ?r is giving me the groups a user is members of but here comes the weird
thing. Of some users it gives all Groups including nestedm but some are only
returning 1 group.

 

Hereby some info from winbindd.log debug level 10:

 

[2012/06/25 14:53:03.203496,  6] winbindd/winbindd.c:792(new_connection)

  accepted socket 25

[2012/06/25 14:53:03.203726, 10] winbindd/winbindd.c:642(process_request)

  process_request: request fn INTERFACE_VERSION

[2012/06/25 14:53:03.203830,  3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)

  [13843]: request interface version

[2012/06/25 14:53:03.203931, 10]
winbindd/winbindd.c:738(winbind_client_response_written)

  winbind_client_response_written[13843:INTERFACE_VERSION]: delivered response
to client

[2012/06/25 14:53:03.204102, 10] winbindd/winbindd.c:642(process_request)

  process_request: request fn WINBINDD_PRIV_PIPE_DIR

[2012/06/25 14:53:03.204181,  3]
winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)

  [13843]: request location of privileged pipe

[2012/06/25 14:53:03.204287, 10]
winbindd/winbindd.c:738(winbind_client_response_written)

  winbind_client_response_written[13843:WINBINDD_PRIV_PIPE_DIR]: delivered
response to client

[2012/06/25 14:53:03.204470,  6] winbindd/winbindd.c:792(new_connection)

  accepted socket 32

[2012/06/25 14:53:03.204606,  6]
winbindd/winbindd.c:840(winbind_client_request_read)

  closing socket 25, client exited

[2012/06/25 14:53:03.204760, 10] winbindd/winbindd.c:615(process_request)

  process_request: Handling async request 13843:GETGROUPS

[2012/06/25 14:53:03.204845,  3]
winbindd/winbindd_getgroups.c:61(winbindd_getgroups_send)

  getgroups lars

[2012/06/25 14:53:03.204928,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupName: struct wbint_LookupName

          in: struct wbint_LookupName

              domain                   : *

                  domain                   : 'SKYNET'

              name                     : *

                  name                     : 'LARS'

              flags                    : 0x00000008 (8)

[2012/06/25 14:53:03.205243, 10]
winbindd/winbindd_cache.c:4894(wcache_fetch_ndr)

  Entry has wrong sequence number: 131268

[2012/06/25 14:53:03.213909,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupName: struct wbint_LookupName

          out: struct wbint_LookupName

              type                     : *

                  type                     : SID_NAME_USER (1)

              sid                      : *

                  sid                      :
S-1-5-21-3711188520-3956494374-1303323322-1125

              result                   : NT_STATUS_OK

[2012/06/25 14:53:03.214189,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupUserGroups: struct wbint_LookupUserGroups

          in: struct wbint_LookupUserGroups

              sid                      : *

                  sid                      :
S-1-5-21-3711188520-3956494374-1303323322-1125

[2012/06/25 14:53:03.214387, 10]
winbindd/winbindd_cache.c:4894(wcache_fetch_ndr)

  Entry has wrong sequence number: 131268

[2012/06/25 14:53:03.221577,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupUserGroups: struct wbint_LookupUserGroups

          out: struct wbint_LookupUserGroups

              sids                     : *

                  sids: struct wbint_SidArray

                      num_sids                 : 0x00000001 (1)

                      sids: ARRAY(1)

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-513

              result                   : NT_STATUS_OK

[2012/06/25 14:53:03.221888,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupUserAliases: struct wbint_LookupUserAliases

          in: struct wbint_LookupUserAliases

              sids                     : *

                  sids: struct wbint_SidArray

                      num_sids                 : 0x00000002 (2)

                      sids: ARRAY(2)

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1125

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-513

[2012/06/25 14:53:03.234275,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupUserAliases: struct wbint_LookupUserAliases

          out: struct wbint_LookupUserAliases

              rids                     : *

                  rids: struct wbint_RidArray

                      num_rids                 : 0x00000000 (0)

                      rids: ARRAY(0)

              result                   : NT_STATUS_OK

[2012/06/25 14:53:03.234549,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupUserAliases: struct wbint_LookupUserAliases

          in: struct wbint_LookupUserAliases

              sids                     : *

                  sids: struct wbint_SidArray

                      num_sids                 : 0x00000002 (2)

                      sids: ARRAY(2)

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1125

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-513

[2012/06/25 14:53:03.247027,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupUserAliases: struct wbint_LookupUserAliases

          out: struct wbint_LookupUserAliases

              rids                     : *

                  rids: struct wbint_RidArray

                      num_rids                 : 0x00000000 (0)

                      rids: ARRAY(0)

              result                   : NT_STATUS_OK

[2012/06/25 14:53:03.247319, 10] winbindd/wb_sid2gid.c:57(wb_sid2gid_send)

  idmap_cache_find_sid2gid found 1000513

[2012/06/25 14:53:03.247403, 10] winbindd/winbindd.c:677(wb_request_done)

  wb_request_done[13843:GETGROUPS]: NT_STATUS_OK

[2012/06/25 14:53:03.247521, 10]
winbindd/winbindd.c:738(winbind_client_response_written)

  winbind_client_response_written[13843:GETGROUPS]: delivered response to client

[2012/06/25 14:53:03.248859,  6]
winbindd/winbindd.c:840(winbind_client_request_read)

  closing socket 32, client exited

[2012/06/25 14:53:34.606708,  6] winbindd/winbindd.c:792(new_connection)

  accepted socket 25

[2012/06/25 14:53:34.606961, 10] winbindd/winbindd.c:642(process_request)

  process_request: request fn INTERFACE_VERSION

[2012/06/25 14:53:34.607044,  3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)

  [13845]: request interface version

[2012/06/25 14:53:34.607143, 10]
winbindd/winbindd.c:738(winbind_client_response_written)

  winbind_client_response_written[13845:INTERFACE_VERSION]: delivered response
to client

[2012/06/25 14:53:34.607314, 10] winbindd/winbindd.c:642(process_request)

  process_request: request fn WINBINDD_PRIV_PIPE_DIR

[2012/06/25 14:53:34.607393,  3]
winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)

  [13845]: request location of privileged pipe

[2012/06/25 14:53:34.607504, 10]
winbindd/winbindd.c:738(winbind_client_response_written)

  winbind_client_response_written[13845:WINBINDD_PRIV_PIPE_DIR]: delivered
response to client

[2012/06/25 14:53:34.607996,  6] winbindd/winbindd.c:792(new_connection)

  accepted socket 32

[2012/06/25 14:53:34.608133,  6]
winbindd/winbindd.c:840(winbind_client_request_read)

  closing socket 25, client exited

[2012/06/25 14:53:34.608292, 10] winbindd/winbindd.c:615(process_request)

  process_request: Handling async request 13845:GETGROUPS

[2012/06/25 14:53:34.608374,  3]
winbindd/winbindd_getgroups.c:61(winbindd_getgroups_send)

  getgroups marco

[2012/06/25 14:53:34.608459,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupName: struct wbint_LookupName

          in: struct wbint_LookupName

              domain                   : *

                  domain                   : 'SKYNET'

              name                     : *

                  name                     : 'MARCO'

              flags                    : 0x00000008 (8)

[2012/06/25 14:53:34.608760, 10]
winbindd/winbindd_cache.c:4894(wcache_fetch_ndr)

  Entry has wrong sequence number: 131268

[2012/06/25 14:53:34.617857,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupName: struct wbint_LookupName

          out: struct wbint_LookupName

              type                     : *

                  type                     : SID_NAME_USER (1)

              sid                      : *

                  sid                      :
S-1-5-21-3711188520-3956494374-1303323322-1108

              result                   : NT_STATUS_OK

[2012/06/25 14:53:34.618139,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupUserGroups: struct wbint_LookupUserGroups

          in: struct wbint_LookupUserGroups

              sid                      : *

                  sid                      :
S-1-5-21-3711188520-3956494374-1303323322-1108

[2012/06/25 14:53:34.618332, 10]
winbindd/winbindd_cache.c:4894(wcache_fetch_ndr)

  Entry has wrong sequence number: 131268

[2012/06/25 14:53:34.626107,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupUserGroups: struct wbint_LookupUserGroups

          out: struct wbint_LookupUserGroups

              sids                     : *

                  sids: struct wbint_SidArray

                      num_sids                 : 0x00000005 (5)

                      sids: ARRAY(5)

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-513

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1509

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1119

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1510

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1136

              result                   : NT_STATUS_OK

[2012/06/25 14:53:34.626573,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupUserAliases: struct wbint_LookupUserAliases

          in: struct wbint_LookupUserAliases

              sids                     : *

                  sids: struct wbint_SidArray

                      num_sids                 : 0x00000006 (6)

                      sids: ARRAY(6)

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1108

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-513

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1509

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1119

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1510

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1136

[2012/06/25 14:53:34.634512,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupUserAliases: struct wbint_LookupUserAliases

          out: struct wbint_LookupUserAliases

              rids                     : *

                  rids: struct wbint_RidArray

                      num_rids                 : 0x00000000 (0)

                      rids: ARRAY(0)

              result                   : NT_STATUS_OK

[2012/06/25 14:53:34.634787,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupUserAliases: struct wbint_LookupUserAliases

          in: struct wbint_LookupUserAliases

              sids                     : *

                  sids: struct wbint_SidArray

                      num_sids                 : 0x00000006 (6)

                      sids: ARRAY(6)

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1108

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-513

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1509

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1119

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1510

                          sids                     :
S-1-5-21-3711188520-3956494374-1303323322-1136

[2012/06/25 14:53:34.642731,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)

       wbint_LookupUserAliases: struct wbint_LookupUserAliases

          out: struct wbint_LookupUserAliases

              rids                     : *

                  rids: struct wbint_RidArray

                      num_rids                 : 0x00000000 (0)

                      rids: ARRAY(0)

              result                   : NT_STATUS_OK

[2012/06/25 14:53:34.643024, 10] winbindd/wb_sid2gid.c:57(wb_sid2gid_send)

  idmap_cache_find_sid2gid found 1000513

[2012/06/25 14:53:34.643122, 10] winbindd/wb_sid2gid.c:57(wb_sid2gid_send)

  idmap_cache_find_sid2gid found 1001509

[2012/06/25 14:53:34.643216, 10] winbindd/wb_sid2gid.c:57(wb_sid2gid_send)

  idmap_cache_find_sid2gid found 1001119

[2012/06/25 14:53:34.643310, 10] winbindd/wb_sid2gid.c:57(wb_sid2gid_send)

  idmap_cache_find_sid2gid found 1001510

[2012/06/25 14:53:34.643403, 10] winbindd/wb_sid2gid.c:57(wb_sid2gid_send)

  idmap_cache_find_sid2gid found 1001136

[2012/06/25 14:53:34.643483, 10] winbindd/winbindd.c:677(wb_request_done)

  wb_request_done[13845:GETGROUPS]: NT_STATUS_OK

[2012/06/25 14:53:34.643581, 10]
winbindd/winbindd.c:738(winbind_client_response_written)

  winbind_client_response_written[13845:GETGROUPS]: delivered response to client

[2012/06/25 14:53:34.644778,  6]
winbindd/winbindd.c:840(winbind_client_request_read)

  closing socket 32, client exited

 

these are 2 lookups of users that are in the same Group.

 

Can anyone help me with this?

 

 

Met vriendelijke groet,

Lars Maes
Systeembeheer
T: 046-4203929
F: 046-4583267

logo_handtekening
Business Park Stein 414
6181MD Elsloo
Postbus 518
6180AA Elsloo
T: 046-4203900
F: 046-4583083

Reasonably Related Threads

Search for more seemingly similar threads

samba - Jun 2012 - winbind AD nested group issues

[Samba] winbind AD nested group issues

[Samba] Winbind AD nested group issues

Reasonably Related Threads