Sigun Nesvarbus
2013-Feb-12 15:13 UTC
[Samba] Can't get working nsswitch, specifically "wbinfo -u"
Hi,
my environment: Win2003 AD + Samba4 as second RW DC on debian wheeze.
Samba compiled from source: samba --version
Version 4.1.0pre1-GIT-c932b13
Installed Samba4 according these:
https://wiki.samba.org/index.php/Main_Page
https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC
https://wiki.samba.org/index.php/Samba4/Winbind
Everything went good according tutorial, until I try get user list with
wbinfo -u
After 4 to 5 minutes (yes, minutes, not seconds) it writes
Error looking up domain users
Interesting, what does not include listing all users, works:
wbinfo --user-info info
CENTRAS\info:*:3000017:100:Test User:/home/CENTRAS/info:/bin/false
wbinfo --user-groups info
list of group's id's
wbinfo --gid-info 3000040
pr_pletra (AD group, where info user belongs)
wbinfo --pam-logon info
Enter info's password:
plaintext password authentication succeeded
id info
works to, I get all AD groups where user belongs
wbinfo -g works, I get AD groups.
I can access samba share, create/read files.
I attached excerpt from wbinfo -u strace. There are timeouts accessing
/usr/local/samba/var/lib/winbindd_privileged
(socket exists and after samba restart is created again)
What's wrong with that? Where to search for a problem? I think I have
similar problem with post <50EE8D9D.2000707 at lillimoth.com> from
2013-01-10, only there were waiting time for a couple of seconds, mine
are couple of minutes and I don't get user list.
May it be, because of more than 1000 AD users we have?
Sig.
-------------- next part --------------
15:19:55.446218 read(3, "/usr/local/samba/var/lib/winbind"..., 45) =
45 <0.000008>
15:19:55.446254 lstat("/usr/local/samba/var/lib/winbindd_privileged",
{st_mode=S_IFDIR|S_ISGID|0750, st_size=4096, ...}) = 0 <0.000010>
15:19:55.446309
lstat("/usr/local/samba/var/lib/winbindd_privileged/pipe",
{st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0 <0.000009>
15:19:55.446361 socket(PF_FILE, SOCK_STREAM, 0) = 4 <0.000011>
15:19:55.446397 fcntl(4, F_GETFL) = 0x2 (flags O_RDWR) <0.000005>
15:19:55.446427 fcntl(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 <0.000006>
15:19:55.446457 fcntl(4, F_GETFD) = 0 <0.000006>
15:19:55.446487 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 <0.000006>
15:19:55.446516 connect(4, {sa_family=AF_FILE,
path="/usr/local/samba/var/lib/winbindd_privileged/pipe"}, 110) = 0
<0.000097>
15:19:55.446655 close(3) = 0 <0.000056>
15:19:55.446740 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 0) = 0 (Timeout)
<0.000007>
15:19:55.446776 write(4,
"0\10\0\0\22\0\0\0\0\0\0\0gk\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"...,
2096) = 2096 <0.000120>
15:19:55.446951 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout)
<5.002095>
15:20:00.449121 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout)
<5.003899>
15:20:05.453109 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout)
<5.003930>
15:20:10.457128 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout)
<5.005036>
15:20:15.462254 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout)
<5.005045>
15:20:20.467382 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout)
<5.001633>
15:20:25.469099 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout)
<5.003915>
15:20:30.473105 close(4) = 0 <0.000018>
15:20:30.473198 write(2, "Error looking up domain users\n", 30Error
looking up domain users
) = 30 <0.000010>
15:20:30.473354 exit_group(1) = ?
Simon Fonteneau
2013-Nov-28 23:24 UTC
[Samba] Can't get working nsswitch, specifically "wbinfo -u"
Hello Sorry for my bad english, I'm french. I have a similar problem We use samba4 since September 2014. Since October, a "wbinfo-u" gives 100% CPU and After 4 to 5 minutes it writes Error looking up domain users but the other controls of wbinfo works normally. We work with samba 4.1.2 With a new "provisioning" (with database empty), "wbinfo -u" works correctly. I think there is a problem with our database. But sambatool dbcheck the command does not reconsider error. We have 1500 users and 500 PC I can not find a solution. Can you help me? Simon Fonteneau Lyc?e Sainte marie du port http://www.stemarieduport.fr On Tue, Feb 12, 2013 at 08:13:59 AM,/Sigun Nesvarbus/ wrote :> Hi, > my environment: Win2003 AD + Samba4 as second RW DC on debian wheeze. > Samba compiled from source: samba --version > Version 4.1.0pre1-GIT-c932b13 > > Installed Samba4 according these: > https://wiki.samba.org/index.php/Main_Page > https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC > https://wiki.samba.org/index.php/Samba4/Winbind > > Everything went good according tutorial, until I try get user list with > wbinfo -u > After 4 to 5 minutes (yes, minutes, not seconds) it writes > Error looking up domain users > > Interesting, what does not include listing all users, works: > wbinfo --user-info info > CENTRAS\info:*:3000017:100:Test User:/home/CENTRAS/info:/bin/false > > wbinfo --user-groups info > list of group's id's > > wbinfo --gid-info 3000040 > pr_pletra (AD group, where info user belongs) > > wbinfo --pam-logon info > Enter info's password: > plaintext password authentication succeeded > > id info > works to, I get all AD groups where user belongs > > wbinfo -g works, I get AD groups. > > I can access samba share, create/read files. > > I attached excerpt from wbinfo -u strace. There are timeouts accessing > /usr/local/samba/var/lib/winbindd_privileged > (socket exists and after samba restart is created again) > > What's wrong with that? Where to search for a problem? I think I have > similar problem with post <50EE8D9D.2000707 at lillimoth.com <https://lists.samba.org/mailman/listinfo/samba>> from > 2013-01-10, only there were waiting time for a couple of seconds, mine > are couple of minutes and I don't get user list. > > May it be, because of more than 1000 AD users we have? > > Sig. > > -------------- next part -------------- > 15:19:55.446218 read(3, "/usr/local/samba/var/lib/winbind"..., 45) = 45 <0.000008> > 15:19:55.446254 lstat("/usr/local/samba/var/lib/winbindd_privileged", {st_mode=S_IFDIR|S_ISGID|0750, st_size=4096, ...}) = 0 <0.000010> > 15:19:55.446309 lstat("/usr/local/samba/var/lib/winbindd_privileged/pipe", {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0 <0.000009> > 15:19:55.446361 socket(PF_FILE, SOCK_STREAM, 0) = 4 <0.000011> > 15:19:55.446397 fcntl(4, F_GETFL) = 0x2 (flags O_RDWR) <0.000005> > 15:19:55.446427 fcntl(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 <0.000006> > 15:19:55.446457 fcntl(4, F_GETFD) = 0 <0.000006> > 15:19:55.446487 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 <0.000006> > 15:19:55.446516 connect(4, {sa_family=AF_FILE, path="/usr/local/samba/var/lib/winbindd_privileged/pipe"}, 110) = 0 <0.000097> > 15:19:55.446655 close(3) = 0 <0.000056> > 15:19:55.446740 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 0) = 0 (Timeout) <0.000007> > 15:19:55.446776 write(4, "0\10\0\0\22\0\0\0\0\0\0\0gk\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 2096) = 2096 <0.000120> > 15:19:55.446951 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout) <5.002095> > 15:20:00.449121 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout) <5.003899> > 15:20:05.453109 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout) <5.003930> > 15:20:10.457128 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout) <5.005036> > 15:20:15.462254 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout) <5.005045> > 15:20:20.467382 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout) <5.001633> > 15:20:25.469099 poll([{fd=4, events=POLLIN|POLLHUP}], 1, 5000) = 0 (Timeout) <5.003915> > 15:20:30.473105 close(4) = 0 <0.000018> > 15:20:30.473198 write(2, "Error looking up domain users\n", 30Error looking up domain users > ) = 30 <0.000010> > 15:20:30.473354 exit_group(1) = ? >-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba