David Touzeau
2012-Sep-27 07:00 UTC
[Samba] 3.6.8: Winbind/Active Directory: lsass.exe process run cpu to 100%
Dear I have connected samba 3.6.8 to my Active Directory in the lsass.exe run to 100% When stopping winbind the lsass.exe CPU is down to 0% When set winbindd to debug mode, it seems it try to scan the root user every time. I would to know how to ban nsswitch to query winbindd for system internal users such has root, apache..... Here it is my nsswitch.conf : # # Example configuration of GNU Name Service Switch functionality. # If you have the `glibc-doc-reference' and `info' packages installed, try: # `info libc "Name Service Switch"' for information about this file. bind_policy soft passwd: compat ldap winbind group: compat ldap winbind shadow: compat ldap winbind hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 mdns networks: files protocols: db files services: db files ethers: db files rpc: db files netmasks: files netgroup: files nis publickey: files bootparams: files aliases: files automount: ldap files Attached file is the winbindd debug mode:
David Touzeau
2012-Sep-27 07:05 UTC
[Samba] 3.6.8: Winbind/Active Directory: lsass.exe process run cpu to 100%
Dear
I have connected samba 3.6.8 to my Active Directory in the lsass.exe run to
100%
When stopping winbind the lsass.exe CPU is down to 0%
When set winbindd to debug mode, it seems it try to scan the root user every
time.
I would to know how to ban nsswitch to query winbindd for system internal
users such has root, apache.....
Here it is my nsswitch.conf :
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed,
try:
# `info libc "Name Service Switch"' for information about this
file.
bind_policy soft
passwd: compat ldap winbind
group: compat ldap winbind
shadow: compat ldap winbind
hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 mdns
networks: files
protocols: db files
services: db files
ethers: db files
rpc: db files
netmasks: files
netgroup: files nis
publickey: files
bootparams: files
aliases: files
automount: ldap files
the winbindd debug mode:
[2012/09/26 23:34:01.536527, 5] ../lib/util/debug.c:330(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
[2012/09/26 23:34:01.536749, 10]
winbindd/winbindd_dual.c:552(winbind_msg_debug)
winbind_msg_debug: sending message to pid 18317.
[2012/09/26 23:34:01.536786, 10]
lib/messages_local.c:255(messaging_tdb_store)
messaging_tdb_store:
[2012/09/26 23:34:01.536810, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug)
array: struct messaging_array
num_messages : 0x00000001 (1)
messages: ARRAY(1)
messages: struct messaging_rec
msg_version : 0x00000002 (2)
msg_type : MSG_DEBUG (1)
dest: struct server_id
pid : 0x0000478d (18317)
vnn : 0xffffffff (4294967295)
unique_id : 0x0000000000000000 (0)
src: struct server_id
pid : 0x000044ab (17579)
vnn : 0xffffffff (4294967295)
unique_id : 0x0000000000000000 (0)
buf : DATA_BLOB length=3
[0000] 31 30 00 10.
[2012/09/26 23:34:01.537007, 10]
winbindd/winbindd_dual.c:552(winbind_msg_debug)
winbind_msg_debug: sending message to pid 17662.
[2012/09/26 23:34:01.537058, 10]
lib/messages_local.c:255(messaging_tdb_store)
messaging_tdb_store:
[2012/09/26 23:34:01.537084, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug)
array: struct messaging_array
num_messages : 0x00000001 (1)
messages: ARRAY(1)
messages: struct messaging_rec
msg_version : 0x00000002 (2)
msg_type : MSG_DEBUG (1)
dest: struct server_id
pid : 0x000044fe (17662)
vnn : 0xffffffff (4294967295)
unique_id : 0x0000000000000000 (0)
src: struct server_id
pid : 0x000044ab (17579)
vnn : 0xffffffff (4294967295)
unique_id : 0x0000000000000000 (0)
buf : DATA_BLOB length=3
[0000] 31 30 00 10.
[2012/09/26 23:34:01.862537, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 28
[2012/09/26 23:34:01.862618, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:34:01.862646, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[23075]: request interface version
[2012/09/26 23:34:01.862683, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23075:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:34:01.862717, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 30
[2012/09/26 23:34:01.862757, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:34:01.862783, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[23071]: request interface version
[2012/09/26 23:34:01.862815, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23071:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:34:01.862868, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/09/26 23:34:01.862895, 3]
winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
[23075]: request location of privileged pipe
[2012/09/26 23:34:01.862968, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23075:WINBINDD_PRIV_PIPE_DIR]: delivered
response to client
[2012/09/26 23:34:01.863003, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 28, client exited
[2012/09/26 23:34:01.863037, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 28
[2012/09/26 23:34:01.863072, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 31
[2012/09/26 23:34:01.863113, 10] winbindd/winbindd.c:617(process_request)
process_request: Handling async request 23075:GETPWNAM
[2012/09/26 23:34:01.863140, 3]
winbindd/winbindd_getpwnam.c:56(winbindd_getpwnam_send)
getpwnam root
[2012/09/26 23:34:01.863168, 10]
winbindd/winbindd_cache.c:540(refresh_sequence_number)
refresh_sequence_number: AFEONLINE time ok
[2012/09/26 23:34:01.863195, 10]
winbindd/winbindd_cache.c:585(refresh_sequence_number)
refresh_sequence_number: AFEONLINE seq number is now 22685808
[2012/09/26 23:34:01.863234, 10]
winbindd/idmap_ad.c:77(ad_idmap_cached_connection_internal)
ad_idmap_cached_connection: called for domain 'AFEONLINE'
[2012/09/26 23:34:01.863261, 7]
winbindd/idmap_ad.c:92(ad_idmap_cached_connection_internal)
Current tickets expire in 35940 seconds (at 1348731181, time is now
1348695241)
[2012/09/26 23:34:02.453995, 5]
libads/ldap_utils.c:80(ads_do_search_retry_internal)
Search for (uid=root) in <dc=AFEONLINE,dc=NET> gave 0 replies
[2012/09/26 23:34:02.454051, 5]
winbindd/winbindd_cache.c:1247(resolve_alias_to_username)
resolve_alias_to_username: backend query returned
NT_STATUS_OBJECT_NAME_NOT_FOUND
[2012/09/26 23:34:02.454091, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
in: struct wbint_LookupName
domain : *
domain : 'AFEONLINE'
name : *
name : 'ROOT'
flags : 0x00000008 (8)
[2012/09/26 23:34:02.454204, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
out: struct wbint_LookupName
type : *
type : SID_NAME_USER (1)
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
result : NT_STATUS_OK
[2012/09/26 23:34:02.454297, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
in: struct wbint_QueryUser
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
[2012/09/26 23:34:02.454371, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
out: struct wbint_QueryUser
info : *
info: struct wbint_userinfo
acct_name : *
acct_name : 'root'
full_name : *
full_name : 'root'
homedir : NULL
shell : NULL
primary_gid : 0x00000000ffffffff
(4294967295)
user_sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
group_sid :
S-1-5-21-3976651132-1757440908-2095710212-513
result : NT_STATUS_OK
[2012/09/26 23:34:02.454558, 10] winbindd/wb_sid2uid.c:56(wb_sid2uid_send)
idmap_cache_find_sid2uid found -1
[2012/09/26 23:34:02.454593, 5]
winbindd/winbindd_getpwnam.c:137(winbindd_getpwnam_recv)
Could not convert sid S-1-5-21-3976651132-1757440908-2095710212-2930:
NT_STATUS_NONE_MAPPED
[2012/09/26 23:34:02.454632, 10] winbindd/winbindd.c:679(wb_request_done)
wb_request_done[23075:GETPWNAM]: NT_STATUS_NONE_MAPPED
[2012/09/26 23:34:02.455028, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23075:GETPWNAM]: delivered response to
client
[2012/09/26 23:34:02.455078, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 32
[2012/09/26 23:34:02.455126, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:34:02.455153, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[23074]: request interface version
[2012/09/26 23:34:02.455250, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23074:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:34:02.455302, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/09/26 23:34:02.455328, 3]
winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
[23071]: request location of privileged pipe
[2012/09/26 23:34:02.455396, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23071:WINBINDD_PRIV_PIPE_DIR]: delivered
response to client
[2012/09/26 23:34:02.456030, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 30, client exited
[2012/09/26 23:34:02.456067, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 30
[2012/09/26 23:34:02.456104, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 33
[2012/09/26 23:34:02.456149, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:34:02.456175, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[23072]: request interface version
[2012/09/26 23:34:02.456220, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23072:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:34:02.456264, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/09/26 23:34:02.456289, 3]
winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
[23074]: request location of privileged pipe
[2012/09/26 23:34:02.456350, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23074:WINBINDD_PRIV_PIPE_DIR]: delivered
response to client
[2012/09/26 23:34:02.456384, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 31, client exited
[2012/09/26 23:34:02.456419, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 31
[2012/09/26 23:34:02.456459, 10] winbindd/winbindd.c:617(process_request)
process_request: Handling async request 23071:GETPWNAM
[2012/09/26 23:34:02.456486, 3]
winbindd/winbindd_getpwnam.c:56(winbindd_getpwnam_send)
getpwnam root
[2012/09/26 23:34:02.456510, 10]
winbindd/winbindd_cache.c:540(refresh_sequence_number)
refresh_sequence_number: AFEONLINE time ok
[2012/09/26 23:34:02.456530, 10]
winbindd/winbindd_cache.c:585(refresh_sequence_number)
refresh_sequence_number: AFEONLINE seq number is now 22685808
[2012/09/26 23:34:02.456559, 10]
winbindd/idmap_ad.c:77(ad_idmap_cached_connection_internal)
ad_idmap_cached_connection: called for domain 'AFEONLINE'
[2012/09/26 23:34:02.456581, 7]
winbindd/idmap_ad.c:92(ad_idmap_cached_connection_internal)
Current tickets expire in 35939 seconds (at 1348731181, time is now
1348695242)
[2012/09/26 23:34:03.074739, 5]
libads/ldap_utils.c:80(ads_do_search_retry_internal)
Search for (uid=root) in <dc=AFEONLINE,dc=NET> gave 0 replies
[2012/09/26 23:34:03.074828, 5]
winbindd/winbindd_cache.c:1247(resolve_alias_to_username)
resolve_alias_to_username: backend query returned
NT_STATUS_OBJECT_NAME_NOT_FOUND
[2012/09/26 23:34:03.074868, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
in: struct wbint_LookupName
domain : *
domain : 'AFEONLINE'
name : *
name : 'ROOT'
flags : 0x00000008 (8)
[2012/09/26 23:34:03.074988, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
out: struct wbint_LookupName
type : *
type : SID_NAME_USER (1)
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
result : NT_STATUS_OK
[2012/09/26 23:34:03.075077, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
in: struct wbint_QueryUser
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
[2012/09/26 23:34:03.075151, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
out: struct wbint_QueryUser
info : *
info: struct wbint_userinfo
acct_name : *
acct_name : 'root'
full_name : *
full_name : 'root'
homedir : NULL
shell : NULL
primary_gid : 0x00000000ffffffff
(4294967295)
user_sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
group_sid :
S-1-5-21-3976651132-1757440908-2095710212-513
result : NT_STATUS_OK
[2012/09/26 23:34:03.075326, 10] winbindd/wb_sid2uid.c:56(wb_sid2uid_send)
idmap_cache_find_sid2uid found -1
[2012/09/26 23:34:03.075372, 5]
winbindd/winbindd_getpwnam.c:137(winbindd_getpwnam_recv)
Could not convert sid S-1-5-21-3976651132-1757440908-2095710212-2930:
NT_STATUS_NONE_MAPPED
[2012/09/26 23:34:03.075401, 10] winbindd/winbindd.c:679(wb_request_done)
wb_request_done[23071:GETPWNAM]: NT_STATUS_NONE_MAPPED
[2012/09/26 23:34:03.075836, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23071:GETPWNAM]: delivered response to
client
[2012/09/26 23:34:03.075884, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 34
[2012/09/26 23:34:03.075934, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:34:03.075961, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[23073]: request interface version
[2012/09/26 23:34:03.076009, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23073:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:34:03.076119, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/09/26 23:34:03.076146, 3]
winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
[23072]: request location of privileged pipe
[2012/09/26 23:34:03.076217, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23072:WINBINDD_PRIV_PIPE_DIR]: delivered
response to client
[2012/09/26 23:34:03.076817, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 32, client exited
[2012/09/26 23:34:03.076858, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 32
[2012/09/26 23:34:03.076905, 10] winbindd/winbindd.c:617(process_request)
process_request: Handling async request 23074:GETPWNAM
[2012/09/26 23:34:03.076933, 3]
winbindd/winbindd_getpwnam.c:56(winbindd_getpwnam_send)
getpwnam root
[2012/09/26 23:34:03.076956, 10]
winbindd/winbindd_cache.c:540(refresh_sequence_number)
refresh_sequence_number: AFEONLINE time ok
[2012/09/26 23:34:03.076978, 10]
winbindd/winbindd_cache.c:585(refresh_sequence_number)
refresh_sequence_number: AFEONLINE seq number is now 22685808
[2012/09/26 23:34:03.077143, 10]
winbindd/idmap_ad.c:77(ad_idmap_cached_connection_internal)
ad_idmap_cached_connection: called for domain 'AFEONLINE'
[2012/09/26 23:34:03.077167, 7]
winbindd/idmap_ad.c:92(ad_idmap_cached_connection_internal)
Current tickets expire in 35938 seconds (at 1348731181, time is now
1348695243)
[2012/09/26 23:34:03.672034, 5]
libads/ldap_utils.c:80(ads_do_search_retry_internal)
Search for (uid=root) in <dc=AFEONLINE,dc=NET> gave 0 replies
[2012/09/26 23:34:03.672123, 5]
winbindd/winbindd_cache.c:1247(resolve_alias_to_username)
resolve_alias_to_username: backend query returned
NT_STATUS_OBJECT_NAME_NOT_FOUND
[2012/09/26 23:34:03.672162, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
in: struct wbint_LookupName
domain : *
domain : 'AFEONLINE'
name : *
name : 'ROOT'
flags : 0x00000008 (8)
[2012/09/26 23:34:03.672275, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
out: struct wbint_LookupName
type : *
type : SID_NAME_USER (1)
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
result : NT_STATUS_OK
[2012/09/26 23:34:03.672364, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
in: struct wbint_QueryUser
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
[2012/09/26 23:34:03.672436, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
out: struct wbint_QueryUser
info : *
info: struct wbint_userinfo
acct_name : *
acct_name : 'root'
full_name : *
full_name : 'root'
homedir : NULL
shell : NULL
primary_gid : 0x00000000ffffffff
(4294967295)
user_sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
group_sid :
S-1-5-21-3976651132-1757440908-2095710212-513
result : NT_STATUS_OK
[2012/09/26 23:34:03.672595, 10] winbindd/wb_sid2uid.c:56(wb_sid2uid_send)
idmap_cache_find_sid2uid found -1
[2012/09/26 23:34:03.672626, 5]
winbindd/winbindd_getpwnam.c:137(winbindd_getpwnam_recv)
Could not convert sid S-1-5-21-3976651132-1757440908-2095710212-2930:
NT_STATUS_NONE_MAPPED
[2012/09/26 23:34:03.672653, 10] winbindd/winbindd.c:679(wb_request_done)
wb_request_done[23074:GETPWNAM]: NT_STATUS_NONE_MAPPED
[2012/09/26 23:34:03.673087, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23074:GETPWNAM]: delivered response to
client
[2012/09/26 23:34:03.673135, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 35
[2012/09/26 23:34:03.673186, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:34:03.673213, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[23082]: request interface version
[2012/09/26 23:34:03.673407, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23082:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:34:03.673449, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 34, client exited
[2012/09/26 23:34:03.673496, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/09/26 23:34:03.673530, 3]
winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
[23073]: request location of privileged pipe
[2012/09/26 23:34:03.673599, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23073:WINBINDD_PRIV_PIPE_DIR]: delivered
response to client
[2012/09/26 23:34:03.673635, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 33, client exited
[2012/09/26 23:34:03.673670, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 33
[2012/09/26 23:34:03.673716, 10] winbindd/winbindd.c:617(process_request)
process_request: Handling async request 23072:GETPWNAM
[2012/09/26 23:34:03.673744, 3]
winbindd/winbindd_getpwnam.c:56(winbindd_getpwnam_send)
getpwnam root
[2012/09/26 23:34:03.673767, 10]
winbindd/winbindd_cache.c:540(refresh_sequence_number)
refresh_sequence_number: AFEONLINE time ok
[2012/09/26 23:34:03.673788, 10]
winbindd/winbindd_cache.c:585(refresh_sequence_number)
refresh_sequence_number: AFEONLINE seq number is now 22685808
[2012/09/26 23:34:03.673817, 10]
winbindd/idmap_ad.c:77(ad_idmap_cached_connection_internal)
ad_idmap_cached_connection: called for domain 'AFEONLINE'
[2012/09/26 23:34:03.673840, 7]
winbindd/idmap_ad.c:92(ad_idmap_cached_connection_internal)
Current tickets expire in 35938 seconds (at 1348731181, time is now
1348695243)
[2012/09/26 23:34:04.246427, 5]
libads/ldap_utils.c:80(ads_do_search_retry_internal)
Search for (uid=root) in <dc=AFEONLINE,dc=NET> gave 0 replies
[2012/09/26 23:34:04.246509, 5]
winbindd/winbindd_cache.c:1247(resolve_alias_to_username)
resolve_alias_to_username: backend query returned
NT_STATUS_OBJECT_NAME_NOT_FOUND
[2012/09/26 23:34:04.246551, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
in: struct wbint_LookupName
domain : *
domain : 'AFEONLINE'
name : *
name : 'ROOT'
flags : 0x00000008 (8)
[2012/09/26 23:34:04.246674, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
out: struct wbint_LookupName
type : *
type : SID_NAME_USER (1)
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
result : NT_STATUS_OK
[2012/09/26 23:34:04.246769, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
in: struct wbint_QueryUser
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
[2012/09/26 23:34:04.246843, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
out: struct wbint_QueryUser
info : *
info: struct wbint_userinfo
acct_name : *
acct_name : 'root'
full_name : *
full_name : 'root'
homedir : NULL
shell : NULL
primary_gid : 0x00000000ffffffff
(4294967295)
user_sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
group_sid :
S-1-5-21-3976651132-1757440908-2095710212-513
result : NT_STATUS_OK
[2012/09/26 23:34:04.247000, 10] winbindd/wb_sid2uid.c:56(wb_sid2uid_send)
idmap_cache_find_sid2uid found -1
[2012/09/26 23:34:04.247066, 5]
winbindd/winbindd_getpwnam.c:137(winbindd_getpwnam_recv)
Could not convert sid S-1-5-21-3976651132-1757440908-2095710212-2930:
NT_STATUS_NONE_MAPPED
[2012/09/26 23:34:04.247103, 10] winbindd/winbindd.c:679(wb_request_done)
wb_request_done[23072:GETPWNAM]: NT_STATUS_NONE_MAPPED
[2012/09/26 23:34:04.247592, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23072:GETPWNAM]: delivered response to
client
[2012/09/26 23:34:04.247637, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 28, client exited
[2012/09/26 23:34:04.247678, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 28
[2012/09/26 23:34:04.247854, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:34:04.247887, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[23083]: request interface version
[2012/09/26 23:34:04.248580, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23083:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:34:04.248628, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 35, client exited
[2012/09/26 23:34:04.249023, 10] winbindd/winbindd.c:617(process_request)
process_request: Handling async request 23073:GETPWNAM
[2012/09/26 23:34:04.249059, 3]
winbindd/winbindd_getpwnam.c:56(winbindd_getpwnam_send)
getpwnam root
[2012/09/26 23:34:04.249083, 10]
winbindd/winbindd_cache.c:540(refresh_sequence_number)
refresh_sequence_number: AFEONLINE time ok
[2012/09/26 23:34:04.249105, 10]
winbindd/winbindd_cache.c:585(refresh_sequence_number)
refresh_sequence_number: AFEONLINE seq number is now 22685808
[2012/09/26 23:34:04.249134, 10]
winbindd/idmap_ad.c:77(ad_idmap_cached_connection_internal)
ad_idmap_cached_connection: called for domain 'AFEONLINE'
[2012/09/26 23:34:04.249157, 7]
winbindd/idmap_ad.c:92(ad_idmap_cached_connection_internal)
Current tickets expire in 35937 seconds (at 1348731181, time is now
1348695244)
[2012/09/26 23:34:04.834278, 5]
libads/ldap_utils.c:80(ads_do_search_retry_internal)
Search for (uid=root) in <dc=AFEONLINE,dc=NET> gave 0 replies
[2012/09/26 23:34:04.834367, 5]
winbindd/winbindd_cache.c:1247(resolve_alias_to_username)
resolve_alias_to_username: backend query returned
NT_STATUS_OBJECT_NAME_NOT_FOUND
[2012/09/26 23:34:04.834407, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
in: struct wbint_LookupName
domain : *
domain : 'AFEONLINE'
name : *
name : 'ROOT'
flags : 0x00000008 (8)
[2012/09/26 23:34:04.834522, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
out: struct wbint_LookupName
type : *
type : SID_NAME_USER (1)
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
result : NT_STATUS_OK
[2012/09/26 23:34:04.834612, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
in: struct wbint_QueryUser
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
[2012/09/26 23:34:04.834687, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
out: struct wbint_QueryUser
info : *
info: struct wbint_userinfo
acct_name : *
acct_name : 'root'
full_name : *
full_name : 'root'
homedir : NULL
shell : NULL
primary_gid : 0x00000000ffffffff
(4294967295)
user_sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
group_sid :
S-1-5-21-3976651132-1757440908-2095710212-513
result : NT_STATUS_OK
[2012/09/26 23:34:04.834855, 10] winbindd/wb_sid2uid.c:56(wb_sid2uid_send)
idmap_cache_find_sid2uid found -1
[2012/09/26 23:34:04.834887, 5]
winbindd/winbindd_getpwnam.c:137(winbindd_getpwnam_recv)
Could not convert sid S-1-5-21-3976651132-1757440908-2095710212-2930:
NT_STATUS_NONE_MAPPED
[2012/09/26 23:34:04.834914, 10] winbindd/winbindd.c:679(wb_request_done)
wb_request_done[23073:GETPWNAM]: NT_STATUS_NONE_MAPPED
[2012/09/26 23:34:04.835359, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23073:GETPWNAM]: delivered response to
client
[2012/09/26 23:34:04.835404, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 30, client exited
[2012/09/26 23:34:04.835444, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 30
[2012/09/26 23:34:04.835492, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:34:04.835538, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[23087]: request interface version
[2012/09/26 23:34:04.835733, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23087:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:34:04.835775, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 28, client exited
[2012/09/26 23:34:04.835822, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:34:04.835849, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[23091]: request interface version
[2012/09/26 23:34:04.836451, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23091:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:34:04.836531, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 30, client exited
[2012/09/26 23:34:04.837378, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 28
[2012/09/26 23:34:04.837428, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:34:04.837455, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[23117]: request interface version
[2012/09/26 23:34:04.837487, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[23117:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:34:04.837594, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 28, client exited
[2012/09/26 23:34:05.148439, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 33, client exited
[2012/09/26 23:34:05.169897, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 31, client exited
[2012/09/26 23:34:05.866364, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 32, client exited
[2012/09/26 23:34:37.917832, 10] winbindd/winbindd.c:617(process_request)
process_request: Handling async request 26398:PAM_AUTH_CRAP
[2012/09/26 23:34:37.917912, 3]
winbindd/winbindd_pam_auth_crap.c:56(winbindd_pam_auth_crap_send)
[26398]: pam auth crap domain: [AFEONLINE] user: jbeunel
[2012/09/26 23:34:37.999389, 10] winbindd/winbindd.c:679(wb_request_done)
wb_request_done[26398:PAM_AUTH_CRAP]: NT_STATUS_OK
[2012/09/26 23:34:37.999461, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[26398:PAM_AUTH_CRAP]: delivered response
to client
[2012/09/26 23:34:40.929245, 10]
lib/messages_local.c:74(messaging_tdb_signal_handler)
messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
[2012/09/26 23:34:40.929294, 10] lib/messages_local.c:466(message_dispatch)
message_dispatch: received_messages = 1
[2012/09/26 23:34:40.929334, 10]
lib/messages_local.c:215(messaging_tdb_fetch)
messaging_tdb_fetch:
[2012/09/26 23:34:40.929357, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug)
result: struct messaging_array
num_messages : 0x00000001 (1)
messages: ARRAY(1)
messages: struct messaging_rec
msg_version : 0x00000002 (2)
msg_type : MSG_PING (2)
dest: struct server_id
pid : 0x000044ab (17579)
vnn : 0xffffffff (4294967295)
unique_id : 0x0000000000000000 (0)
src: struct server_id
pid : 0x00005f0d (24333)
vnn : 0xffffffff (4294967295)
unique_id : 0x0000000000000000 (0)
buf : DATA_BLOB length=0
[2012/09/26 23:34:40.929510, 1] lib/messages.c:75(ping_message)
INFO: Received PING message from PID 24333 [`]
[2012/09/26 23:34:40.929544, 10]
lib/messages_local.c:255(messaging_tdb_store)
messaging_tdb_store:
[2012/09/26 23:34:40.929585, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug)
array: struct messaging_array
num_messages : 0x00000001 (1)
messages: ARRAY(1)
messages: struct messaging_rec
msg_version : 0x00000002 (2)
msg_type : MSG_PONG (3)
dest: struct server_id
pid : 0x00005f0d (24333)
vnn : 0xffffffff (4294967295)
unique_id : 0x0000000000000000 (0)
src: struct server_id
pid : 0x000044ab (17579)
vnn : 0xffffffff (4294967295)
unique_id : 0x0000000000000000 (0)
buf : DATA_BLOB length=0
[2012/09/26 23:35:01.870190, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 28
[2012/09/26 23:35:01.870269, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 30
[2012/09/26 23:35:01.870313, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:35:01.870339, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[25145]: request interface version
[2012/09/26 23:35:01.870374, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25145:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:35:01.870407, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 31
[2012/09/26 23:35:01.870447, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:35:01.870472, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[25147]: request interface version
[2012/09/26 23:35:01.870504, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25147:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:35:01.870539, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:35:01.870564, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[25156]: request interface version
[2012/09/26 23:35:01.870595, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25156:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:35:01.877600, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 32
[2012/09/26 23:35:01.877701, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/09/26 23:35:01.877740, 3]
winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
[25156]: request location of privileged pipe
[2012/09/26 23:35:01.877854, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25156:WINBINDD_PRIV_PIPE_DIR]: delivered
response to client
[2012/09/26 23:35:01.877910, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 31, client exited
[2012/09/26 23:35:01.877963, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 31
[2012/09/26 23:35:01.878032, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/09/26 23:35:01.878073, 3]
winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
[25147]: request location of privileged pipe
[2012/09/26 23:35:01.878160, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25147:WINBINDD_PRIV_PIPE_DIR]: delivered
response to client
[2012/09/26 23:35:01.878222, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 30, client exited
[2012/09/26 23:35:01.878290, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/09/26 23:35:01.878328, 3]
winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
[25145]: request location of privileged pipe
[2012/09/26 23:35:01.878416, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25145:WINBINDD_PRIV_PIPE_DIR]: delivered
response to client
[2012/09/26 23:35:01.878464, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 28, client exited
[2012/09/26 23:35:01.878513, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 28
[2012/09/26 23:35:01.878580, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:35:01.878620, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[25146]: request interface version
[2012/09/26 23:35:01.878685, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25146:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:35:01.878741, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 30
[2012/09/26 23:35:01.878805, 10] winbindd/winbindd.c:617(process_request)
process_request: Handling async request 25156:GETPWNAM
[2012/09/26 23:35:01.878846, 3]
winbindd/winbindd_getpwnam.c:56(winbindd_getpwnam_send)
getpwnam root
[2012/09/26 23:35:01.878886, 10]
winbindd/winbindd_cache.c:540(refresh_sequence_number)
refresh_sequence_number: AFEONLINE time ok
[2012/09/26 23:35:01.878922, 10]
winbindd/winbindd_cache.c:585(refresh_sequence_number)
refresh_sequence_number: AFEONLINE seq number is now 22685808
[2012/09/26 23:35:01.878969, 10]
winbindd/idmap_ad.c:77(ad_idmap_cached_connection_internal)
ad_idmap_cached_connection: called for domain 'AFEONLINE'
[2012/09/26 23:35:01.879004, 7]
winbindd/idmap_ad.c:92(ad_idmap_cached_connection_internal)
Current tickets expire in 35880 seconds (at 1348731181, time is now
1348695301)
[2012/09/26 23:35:02.472919, 5]
libads/ldap_utils.c:80(ads_do_search_retry_internal)
Search for (uid=root) in <dc=AFEONLINE,dc=NET> gave 0 replies
[2012/09/26 23:35:02.473003, 5]
winbindd/winbindd_cache.c:1247(resolve_alias_to_username)
resolve_alias_to_username: backend query returned
NT_STATUS_OBJECT_NAME_NOT_FOUND
[2012/09/26 23:35:02.473043, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
in: struct wbint_LookupName
domain : *
domain : 'AFEONLINE'
name : *
name : 'ROOT'
flags : 0x00000008 (8)
[2012/09/26 23:35:02.473155, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
out: struct wbint_LookupName
type : *
type : SID_NAME_USER (1)
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
result : NT_STATUS_OK
[2012/09/26 23:35:02.473253, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
in: struct wbint_QueryUser
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
[2012/09/26 23:35:02.473326, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
out: struct wbint_QueryUser
info : *
info: struct wbint_userinfo
acct_name : *
acct_name : 'root'
full_name : *
full_name : 'root'
homedir : NULL
shell : NULL
primary_gid : 0x00000000ffffffff
(4294967295)
user_sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
group_sid :
S-1-5-21-3976651132-1757440908-2095710212-513
result : NT_STATUS_OK
[2012/09/26 23:35:02.473485, 10] winbindd/wb_sid2uid.c:56(wb_sid2uid_send)
idmap_cache_find_sid2uid found -1
[2012/09/26 23:35:02.473516, 5]
winbindd/winbindd_getpwnam.c:137(winbindd_getpwnam_recv)
Could not convert sid S-1-5-21-3976651132-1757440908-2095710212-2930:
NT_STATUS_NONE_MAPPED
[2012/09/26 23:35:02.473543, 10] winbindd/winbindd.c:679(wb_request_done)
wb_request_done[25156:GETPWNAM]: NT_STATUS_NONE_MAPPED
[2012/09/26 23:35:02.473985, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25156:GETPWNAM]: delivered response to
client
[2012/09/26 23:35:02.474033, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 33
[2012/09/26 23:35:02.474083, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:35:02.474111, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[25149]: request interface version
[2012/09/26 23:35:02.474159, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25149:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:35:02.474274, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/09/26 23:35:02.474301, 3]
winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
[25146]: request location of privileged pipe
[2012/09/26 23:35:02.474396, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25146:WINBINDD_PRIV_PIPE_DIR]: delivered
response to client
[2012/09/26 23:35:02.474435, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 32, client exited
[2012/09/26 23:35:02.474471, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 32
[2012/09/26 23:35:02.474517, 10] winbindd/winbindd.c:617(process_request)
process_request: Handling async request 25147:GETPWNAM
[2012/09/26 23:35:02.474546, 3]
winbindd/winbindd_getpwnam.c:56(winbindd_getpwnam_send)
getpwnam root
[2012/09/26 23:35:02.474570, 10]
winbindd/winbindd_cache.c:540(refresh_sequence_number)
refresh_sequence_number: AFEONLINE time ok
[2012/09/26 23:35:02.474591, 10]
winbindd/winbindd_cache.c:585(refresh_sequence_number)
refresh_sequence_number: AFEONLINE seq number is now 22685808
[2012/09/26 23:35:02.474620, 10]
winbindd/idmap_ad.c:77(ad_idmap_cached_connection_internal)
ad_idmap_cached_connection: called for domain 'AFEONLINE'
[2012/09/26 23:35:02.474643, 7]
winbindd/idmap_ad.c:92(ad_idmap_cached_connection_internal)
Current tickets expire in 35879 seconds (at 1348731181, time is now
1348695302)
[2012/09/26 23:35:03.081860, 5]
libads/ldap_utils.c:80(ads_do_search_retry_internal)
Search for (uid=root) in <dc=AFEONLINE,dc=NET> gave 0 replies
[2012/09/26 23:35:03.081938, 5]
winbindd/winbindd_cache.c:1247(resolve_alias_to_username)
resolve_alias_to_username: backend query returned
NT_STATUS_OBJECT_NAME_NOT_FOUND
[2012/09/26 23:35:03.081979, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
in: struct wbint_LookupName
domain : *
domain : 'AFEONLINE'
name : *
name : 'ROOT'
flags : 0x00000008 (8)
[2012/09/26 23:35:03.082091, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
out: struct wbint_LookupName
type : *
type : SID_NAME_USER (1)
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
result : NT_STATUS_OK
[2012/09/26 23:35:03.082180, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
in: struct wbint_QueryUser
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
[2012/09/26 23:35:03.082253, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
out: struct wbint_QueryUser
info : *
info: struct wbint_userinfo
acct_name : *
acct_name : 'root'
full_name : *
full_name : 'root'
homedir : NULL
shell : NULL
primary_gid : 0x00000000ffffffff
(4294967295)
user_sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
group_sid :
S-1-5-21-3976651132-1757440908-2095710212-513
result : NT_STATUS_OK
[2012/09/26 23:35:03.082410, 10] winbindd/wb_sid2uid.c:56(wb_sid2uid_send)
idmap_cache_find_sid2uid found -1
[2012/09/26 23:35:03.082441, 5]
winbindd/winbindd_getpwnam.c:137(winbindd_getpwnam_recv)
Could not convert sid S-1-5-21-3976651132-1757440908-2095710212-2930:
NT_STATUS_NONE_MAPPED
[2012/09/26 23:35:03.082468, 10] winbindd/winbindd.c:679(wb_request_done)
wb_request_done[25147:GETPWNAM]: NT_STATUS_NONE_MAPPED
[2012/09/26 23:35:03.082895, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25147:GETPWNAM]: delivered response to
client
[2012/09/26 23:35:03.082944, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 34
[2012/09/26 23:35:03.082993, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:35:03.083020, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[25152]: request interface version
[2012/09/26 23:35:03.083069, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25152:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:35:03.083117, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/09/26 23:35:03.083143, 3]
winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
[25149]: request location of privileged pipe
[2012/09/26 23:35:03.083212, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25149:WINBINDD_PRIV_PIPE_DIR]: delivered
response to client
[2012/09/26 23:35:03.083249, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 28, client exited
[2012/09/26 23:35:03.083284, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 28
[2012/09/26 23:35:03.083330, 10] winbindd/winbindd.c:617(process_request)
process_request: Handling async request 25145:GETPWNAM
[2012/09/26 23:35:03.083361, 3]
winbindd/winbindd_getpwnam.c:56(winbindd_getpwnam_send)
getpwnam root
[2012/09/26 23:35:03.083385, 10]
winbindd/winbindd_cache.c:540(refresh_sequence_number)
refresh_sequence_number: AFEONLINE time ok
[2012/09/26 23:35:03.083406, 10]
winbindd/winbindd_cache.c:585(refresh_sequence_number)
refresh_sequence_number: AFEONLINE seq number is now 22685808
[2012/09/26 23:35:03.083434, 10]
winbindd/idmap_ad.c:77(ad_idmap_cached_connection_internal)
ad_idmap_cached_connection: called for domain 'AFEONLINE'
[2012/09/26 23:35:03.083457, 7]
winbindd/idmap_ad.c:92(ad_idmap_cached_connection_internal)
Current tickets expire in 35878 seconds (at 1348731181, time is now
1348695303)
[2012/09/26 23:35:03.680789, 5]
libads/ldap_utils.c:80(ads_do_search_retry_internal)
Search for (uid=root) in <dc=AFEONLINE,dc=NET> gave 0 replies
[2012/09/26 23:35:03.680883, 5]
winbindd/winbindd_cache.c:1247(resolve_alias_to_username)
resolve_alias_to_username: backend query returned
NT_STATUS_OBJECT_NAME_NOT_FOUND
[2012/09/26 23:35:03.680924, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
in: struct wbint_LookupName
domain : *
domain : 'AFEONLINE'
name : *
name : 'ROOT'
flags : 0x00000008 (8)
[2012/09/26 23:35:03.681044, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
out: struct wbint_LookupName
type : *
type : SID_NAME_USER (1)
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
result : NT_STATUS_OK
[2012/09/26 23:35:03.681135, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
in: struct wbint_QueryUser
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
[2012/09/26 23:35:03.681222, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
out: struct wbint_QueryUser
info : *
info: struct wbint_userinfo
acct_name : *
acct_name : 'root'
full_name : *
full_name : 'root'
homedir : NULL
shell : NULL
primary_gid : 0x00000000ffffffff
(4294967295)
user_sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
group_sid :
S-1-5-21-3976651132-1757440908-2095710212-513
result : NT_STATUS_OK
[2012/09/26 23:35:03.681395, 10] winbindd/wb_sid2uid.c:56(wb_sid2uid_send)
idmap_cache_find_sid2uid found -1
[2012/09/26 23:35:03.681429, 5]
winbindd/winbindd_getpwnam.c:137(winbindd_getpwnam_recv)
Could not convert sid S-1-5-21-3976651132-1757440908-2095710212-2930:
NT_STATUS_NONE_MAPPED
[2012/09/26 23:35:03.681456, 10] winbindd/winbindd.c:679(wb_request_done)
wb_request_done[25145:GETPWNAM]: NT_STATUS_NONE_MAPPED
[2012/09/26 23:35:03.681922, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25145:GETPWNAM]: delivered response to
client
[2012/09/26 23:35:03.681971, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 35
[2012/09/26 23:35:03.682022, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn INTERFACE_VERSION
[2012/09/26 23:35:03.682049, 3]
winbindd/winbindd_misc.c:384(winbindd_interface_version)
[25150]: request interface version
[2012/09/26 23:35:03.682107, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25150:INTERFACE_VERSION]: delivered
response to client
[2012/09/26 23:35:03.682159, 10] winbindd/winbindd.c:644(process_request)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/09/26 23:35:03.682186, 3]
winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
[25152]: request location of privileged pipe
[2012/09/26 23:35:03.682264, 10]
winbindd/winbindd.c:740(winbind_client_response_written)
winbind_client_response_written[25152:WINBINDD_PRIV_PIPE_DIR]: delivered
response to client
[2012/09/26 23:35:03.682301, 6]
winbindd/winbindd.c:842(winbind_client_request_read)
closing socket 33, client exited
[2012/09/26 23:35:03.682338, 6] winbindd/winbindd.c:794(new_connection)
accepted socket 33
[2012/09/26 23:35:03.682384, 10] winbindd/winbindd.c:617(process_request)
process_request: Handling async request 25146:GETPWNAM
[2012/09/26 23:35:03.682412, 3]
winbindd/winbindd_getpwnam.c:56(winbindd_getpwnam_send)
getpwnam root
[2012/09/26 23:35:03.682435, 10]
winbindd/winbindd_cache.c:540(refresh_sequence_number)
refresh_sequence_number: AFEONLINE time ok
[2012/09/26 23:35:03.682456, 10]
winbindd/winbindd_cache.c:585(refresh_sequence_number)
refresh_sequence_number: AFEONLINE seq number is now 22685808
[2012/09/26 23:35:03.682484, 10]
winbindd/idmap_ad.c:77(ad_idmap_cached_connection_internal)
ad_idmap_cached_connection: called for domain 'AFEONLINE'
[2012/09/26 23:35:03.682508, 7]
winbindd/idmap_ad.c:92(ad_idmap_cached_connection_internal)
Current tickets expire in 35878 seconds (at 1348731181, time is now
1348695303)
[2012/09/26 23:35:04.264370, 5]
libads/ldap_utils.c:80(ads_do_search_retry_internal)
Search for (uid=root) in <dc=AFEONLINE,dc=NET> gave 0 replies
[2012/09/26 23:35:04.264462, 5]
winbindd/winbindd_cache.c:1247(resolve_alias_to_username)
resolve_alias_to_username: backend query returned
NT_STATUS_OBJECT_NAME_NOT_FOUND
[2012/09/26 23:35:04.264503, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
in: struct wbint_LookupName
domain : *
domain : 'AFEONLINE'
name : *
name : 'ROOT'
flags : 0x00000008 (8)
[2012/09/26 23:35:04.264618, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
out: struct wbint_LookupName
type : *
type : SID_NAME_USER (1)
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
result : NT_STATUS_OK
[2012/09/26 23:35:04.264708, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
in: struct wbint_QueryUser
sid : *
sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
[2012/09/26 23:35:04.264782, 1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
wbint_QueryUser: struct wbint_QueryUser
out: struct wbint_QueryUser
info : *
info: struct wbint_userinfo
acct_name : *
acct_name : 'root'
full_name : *
full_name : 'root'
homedir : NULL
shell : NULL
primary_gid : 0x00000000ffffffff
(4294967295)
user_sid :
S-1-5-21-3976651132-1757440908-2095710212-2930
group_sid :
S-1-5-21-3976651132-1757440908-2095710212-513
result : NT_STATUS_OK
Michael Wood
2012-Sep-28 07:34 UTC
[Samba] 3.6.8: Winbind/Active Directory: lsass.exe process run cpu to 100%
On 27 September 2012 09:00, David Touzeau <david at touzeau.eu> wrote:> Dear > I have connected samba 3.6.8 to my Active Directory in the lsass.exe run to > 100% > When stopping winbind the lsass.exe CPU is down to 0% > When set winbindd to debug mode, it seems it try to scan the root user every > time. > I would to know how to ban nsswitch to query winbindd for system internal > users such has root, apache..... > > Here it is my nsswitch.conf : > > # > # Example configuration of GNU Name Service Switch functionality. > # If you have the `glibc-doc-reference' and `info' packages installed, try: > # `info libc "Name Service Switch"' for information about this file. > bind_policy soft > > passwd: compat ldap winbind > group: compat ldap winbind > shadow: compat ldap winbind > > hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 mdns > networks: files > > protocols: db files > services: db files > ethers: db files > rpc: db files > netmasks: files > netgroup: files nis > publickey: files > bootparams: files > aliases: files > automount: ldap files > > Attached file is the winbindd debug mode:The list strips attachments. Try pasting it inline if not too large. Otherwise, put it on pastebin and send the link. -- Michael Wood <esiotrot at gmail.com>
Heather Choi
2012-Sep-29 02:52 UTC
[Samba] 3.6.8: Winbind/Active Directory: lsass.exe process run cpu to 100%
You definitely should have "files" placed *before* winbind of passwd, group and shadow, like: passwd: files winbind shadow: files winbind group: files winbind Otherwise, you will be hitting AD a whole ton for localized users and definitely root with services running. On 09/27/2012 02:00 AM, David Touzeau wrote:> Dear > I have connected samba 3.6.8 to my Active Directory in the lsass.exe > run to 100% > When stopping winbind the lsass.exe CPU is down to 0% > When set winbindd to debug mode, it seems it try to scan the root user > every time. > I would to know how to ban nsswitch to query winbindd for system > internal users such has root, apache..... > > Here it is my nsswitch.conf : > > # > # Example configuration of GNU Name Service Switch functionality. > # If you have the `glibc-doc-reference' and `info' packages installed, > try: > # `info libc "Name Service Switch"' for information about this file. > bind_policy soft > > passwd: compat ldap winbind > group: compat ldap winbind > shadow: compat ldap winbind > > hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 mdns > networks: files > > protocols: db files > services: db files > ethers: db files > rpc: db files > netmasks: files > netgroup: files nis > publickey: files > bootparams: files > aliases: files > automount: ldap files > > Attached file is the winbindd debug mode: > >