Hi,
we have a winbind issue with Samba (Version 4.2.7-SerNet-RedHat-19.el6)
on one of our servers. After a while (once a day) one of the winbind
daemons causes a very high cpu load (100%). This load remains until we
kill this process.
This server is a member of a AD domain with several trusted domains. I
think this happens because winbind has problems with one of the trusted
domains (ALS2) and is not able to gather information about this domain.
ALS2 is trusted but the subnet is not reachable from the server's subnet
(security...).
Samba 4.1.x does not have these issues.
Kind regards,
Martin
#winbindd -i -d9
[16738]: request interface version (version = 27)
[16738]: request location of privileged pipe
accepted socket 24
closing socket 22, client exited
[16738]: domain_info [ALS2]
Deregistering messaging pointer for type 33 - private_data=(nil)
Deregistering messaging pointer for type 13 - private_data=(nil)
Deregistering messaging pointer for type 1028 - private_data=(nil)
Deregistering messaging pointer for type 1027 - private_data=(nil)
Deregistering messaging pointer for type 1029 - private_data=(nil)
Deregistering messaging pointer for type 1280 - private_data=(nil)
Deregistering messaging pointer for type 1033 - private_data=(nil)
Deregistering messaging pointer for type 1 - private_data=(nil)
Deregistering messaging pointer for type 1036 - private_data=(nil)
Deregistering messaging pointer for type 1035 - private_data=(nil)
Registering messaging pointer for type 1028 - private_data=(nil)
Registering messaging pointer for type 1027 - private_data=(nil)
Registering messaging pointer for type 1280 - private_data=(nil)
Registering messaging pointer for type 1 - private_data=(nil)
Registering messaging pointer for type 1034 - private_data=(nil)
Overriding messaging pointer for type 1034 - private_data=(nil)
child daemon request 35
Finished processing child request 35
child daemon request 51
connection_ok: Connection to (null) for domain ALS2 is not connected
set_dc_type_and_flags_trustinfo: domain ALS2
connection_ok: Connection to (null) for domain ARRI is not connected
set_dc_type_and_flags_trustinfo: No connection to our domain!
Opening cache file at /var/cache/samba/gencache.tdb
Opening cache file at /var/cache/samba/gencache_notrans.tdb
saf_fetch: failed to find server for "ALS2" domain
connection_ok: Connection to (null) for domain ARRI is not connected
saf_fetch: Returning "ADMUC1.arri.de" for "ARRI" domain
check_negative_conn_cache returning result 0 for domain ARRI server
ADMUC1.arri.de
check_negative_conn_cache returning result 0 for domain ARRI server
ADMUC1.arri.de
sitename_fetch: Returning sitename for ARRI.DE:
"MuenchenTuerkenstrasse"
name ADMUC1.arri.de#20 found.
Connecting to 192.168.100.100 at port 445
connecting to ADMUC1.arri.de from SUPERMDC with kerberos principal
[SUPERMDC$@ARRI.DE] and realm [arri.de]
Doing spnego session setup (blob length=108)
got OID=1.2.840.48018.1.2.2
got OID=1.2.840.113554.1.2.2
got OID=1.2.840.113554.1.2.2.3
got OID=1.3.6.1.4.1.311.2.2.10
got principal=not_defined_in_RFC4178 at please_ignore
cli_session_setup_spnego: using target hostname not SPNEGO principal
cli_session_setup_spnego: guessed server
principal=cifs/ADMUC1.arri.de at ARRI.DE
Doing kerberos session setup
ads_cleanup_expired_creds: Ticket in ccache[MEMORY:cliconnect]
expiration Fri, 26 Feb 2016 01:43:53 CET
signed SMB2 message
signed SMB2 message
Deregistering messaging pointer for type 1030 - private_data=(nil)
Deregistering messaging pointer for type 1031 - private_data=(nil)
rpccli_setup_netlogon_creds: using cached netlogon_creds
cli[SUPERMDC$/SUPERMDC] to ADMUC1.arri.de
signed SMB2 message
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'sasl-DIGEST-MD5' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
Starting GENSEC mechanism schannel
Bind RPC Pipe: host ADMUC1.arri.de auth_type 68, auth_level 6
create_generic_auth_rpc_bind_req: generate first token
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 72
check_bind_response: accepted!
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
seed a452389d:b1f1e19b
seed+time fb214bc6:b1f1e19b
CLIENT 863d9dc4:a52fd1c2
seed+time+1 fb214bc7:b1f1e19b
SERVER 963b953d:391bf076
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 80
../librpc/rpc/dcerpc_util.c:141: auth_pad_length 8
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 320
../librpc/rpc/dcerpc_util.c:141: auth_pad_length 0
sitename_fetch: Returning sitename for ARRI.DE:
"MuenchenTuerkenstrasse"
name hv3KArch.Berlin.als2#20 found.
check_negative_conn_cache returning result 0 for domain ALS2 server
hv3KArch.Berlin.als2
Connecting to 192.168.200.9 at port 445
E2BIG: convert_string(UTF-8,CP850): srclen=21 destlen=16 -
'HV3KARCH.BERLIN.ALS2'
Connecting to 192.168.200.9 at port 139
accepted socket 22
[16738]: request interface version (version = 27)
[16738]: request location of privileged pipe
closing socket 22, client exited
accepted socket 22
[16738]: domain_info [ALS2]
add_failed_connection_entry: added domain ALS2 (hv3KArch.Berlin.als2) to
failed conn cache
add_failed_connection_entry: added domain Berlin.als2
(hv3KArch.Berlin.als2) to failed conn cache
Finished processing child request 51
child daemon request 35
Finished processing child request 35
child daemon request 35
Finished processing child request 35
child daemon request 51
Finished processing child request 51
Could not write response[16738:DOMAIN_INFO] to client: Broken pipe
child daemon request 35
Finished processing child request 35
closing socket 22, client exited
Registering messaging pointer for type 1030 - private_data=(nil)
Registering messaging pointer for type 1031 - private_data=(nil)
Deregistering messaging pointer for type 1028 - private_data=(nil)
Deregistering messaging pointer for type 1027 - private_data=(nil)
Deregistering messaging pointer for type 1280 - private_data=(nil)
Deregistering messaging pointer for type 1 - private_data=(nil)
connection_ok: Connection to ADMUC1.arri.de for domain ARRI is not
connected
saf_fetch: Returning "ADMUC1.arri.de" for "ARRI" domain
check_negative_conn_cache returning result 0 for domain ARRI server
ADMUC1.arri.de
check_negative_conn_cache returning result 0 for domain ARRI server
ADMUC1.arri.de
sitename_fetch: Returning sitename for ARRI.DE:
"MuenchenTuerkenstrasse"
name ADMUC1.arri.de#20 found.
Connecting to 192.168.100.100 at port 445
connecting to ADMUC1.arri.de from SUPERMDC with kerberos principal
[SUPERMDC$@ARRI.DE] and realm [arri.de]
Doing spnego session setup (blob length=108)
got OID=1.2.840.48018.1.2.2
got OID=1.2.840.113554.1.2.2
got OID=1.2.840.113554.1.2.2.3
got OID=1.3.6.1.4.1.311.2.2.10
got principal=not_defined_in_RFC4178 at please_ignore
cli_session_setup_spnego: using target hostname not SPNEGO principal
cli_session_setup_spnego: guessed server
principal=cifs/ADMUC1.arri.de at ARRI.DE
Doing kerberos session setup
ads_cleanup_expired_creds: Ticket in ccache[MEMORY:cliconnect]
expiration Fri, 26 Feb 2016 01:43:53 CET
signed SMB2 message
signed SMB2 message
rpccli_setup_netlogon_creds: using cached netlogon_creds
cli[SUPERMDC$/SUPERMDC] to ADMUC1.arri.de
signed SMB2 message
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
Starting GENSEC mechanism schannel
Bind RPC Pipe: host ADMUC1.arri.de auth_type 68, auth_level 6
create_generic_auth_rpc_bind_req: generate first token
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 72
check_bind_response: accepted!
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
seed a452389d:b1f1e19b
seed+time fb214c0f:b1f1e19b
CLIENT d6a10643:4fb31cbc
seed+time+1 fb214c10:b1f1e19b
SERVER 1ec383a9:6165504f
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 80
../librpc/rpc/dcerpc_util.c:141: auth_pad_length 8
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 320
../librpc/rpc/dcerpc_util.c:141: auth_pad_length 0
sitename_fetch: Returning sitename for ARRI.DE:
"MuenchenTuerkenstrasse"
name hv3KArch.Berlin.als2#20 found.
check_negative_conn_cache returning result -1073741823 for domain ALS2
server hv3KArch.Berlin.als2
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
ads_dc_name: domain=ALS2
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
ads_find_dc: (cldap) looking for realm 'Berlin.als2'
get_sorted_dc_list: attempting lookup for name Berlin.als2 (sitename
DOM)
saf_fetch: failed to find server for "Berlin.als2" domain
get_dc_list: preferred server list: ", *"
name Berlin.als2#1C found.
Adding 3 DC's from auto lookup
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.114.254
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.9
get_dc_list: returning 3 ip addresses in an ordered list
get_dc_list: 192.168.200.1:389 192.168.114.254:389 192.168.200.9:389
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
ads_try_connect: sending CLDAP request to 192.168.200.1 (realm:
Berlin.als2)
Successfully contacted LDAP server 192.168.200.1
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
ads_dc_name: using server='H1X97VMM.BERLIN.ALS2' IP=192.168.200.1
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
get_sorted_dc_list: attempting lookup for name Berlin.als2 (sitename
DOM)
saf_fetch: failed to find server for "Berlin.als2" domain
get_dc_list: preferred server list: ", *"
name Berlin.als2#1C found.
Adding 3 DC's from auto lookup
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.114.254
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.9
get_dc_list: returning 3 ip addresses in an ordered list
get_dc_list: 192.168.200.1:389 192.168.114.254:389 192.168.200.9:389
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.1
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.114.254
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.9
get_sorted_dc_list: attempting lookup for name Berlin.als2 (sitename
NULL)
saf_fetch: failed to find server for "Berlin.als2" domain
get_dc_list: preferred server list: ", *"
name Berlin.als2#1C found.
Adding 3 DC's from auto lookup
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.114.254
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.9
get_dc_list: returning 3 ip addresses in an ordered list
get_dc_list: 192.168.200.1:389 192.168.114.254:389 192.168.200.9:389
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.1
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.114.254
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.9
msg_try_to_go_online: received for domain ALS2.
connection_ok: Connection to (null) for domain ALS2 is not connected
saf_fetch: failed to find server for "ALS2" domain
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 320
../librpc/rpc/dcerpc_util.c:141: auth_pad_length 0
sitename_fetch: Returning sitename for ARRI.DE:
"MuenchenTuerkenstrasse"
name hv3KArch.Berlin.als2#20 found.
check_negative_conn_cache returning result -1073741823 for domain ALS2
server hv3KArch.Berlin.als2
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
ads_dc_name: domain=ALS2
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
ads_find_dc: (cldap) looking for realm 'Berlin.als2'
get_sorted_dc_list: attempting lookup for name Berlin.als2 (sitename
DOM)
saf_fetch: failed to find server for "Berlin.als2" domain
get_dc_list: preferred server list: ", *"
name Berlin.als2#1C found.
Adding 3 DC's from auto lookup
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.114.254
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.9
get_dc_list: returning 3 ip addresses in an ordered list
get_dc_list: 192.168.200.1:389 192.168.114.254:389 192.168.200.9:389
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
ads_try_connect: sending CLDAP request to 192.168.200.1 (realm:
Berlin.als2)
Successfully contacted LDAP server 192.168.200.1
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
ads_dc_name: using server='H1X97VMM.BERLIN.ALS2' IP=192.168.200.1
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
get_sorted_dc_list: attempting lookup for name Berlin.als2 (sitename
DOM)
saf_fetch: failed to find server for "Berlin.als2" domain
get_dc_list: preferred server list: ", *"
name Berlin.als2#1C found.
Adding 3 DC's from auto lookup
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.114.254
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.9
get_dc_list: returning 3 ip addresses in an ordered list
get_dc_list: 192.168.200.1:389 192.168.114.254:389 192.168.200.9:389
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.1
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.114.254
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.9
get_sorted_dc_list: attempting lookup for name Berlin.als2 (sitename
NULL)
saf_fetch: failed to find server for "Berlin.als2" domain
get_dc_list: preferred server list: ", *"
name Berlin.als2#1C found.
Adding 3 DC's from auto lookup
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.114.254
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.9
get_dc_list: returning 3 ip addresses in an ordered list
get_dc_list: 192.168.200.1:389 192.168.114.254:389 192.168.200.9:389
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.1
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.114.254
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.9
Connecting to 192.168.200.1 at port 445
Connecting to 192.168.200.1 at port 139
Connecting to 192.168.114.254 at port 445
Connecting to 192.168.200.9 at port 445
add_failed_connection_entry: added domain ALS2 (192.168.200.1) to failed
conn cache
add_failed_connection_entry: added domain Berlin.als2 (192.168.200.1) to
failed conn cache
add_failed_connection_entry: added domain ALS2 (192.168.114.254) to
failed conn cache
add_failed_connection_entry: added domain Berlin.als2 (192.168.114.254)
to failed conn cache
add_failed_connection_entry: added domain ALS2 (192.168.200.9) to failed
conn cache
add_failed_connection_entry: added domain Berlin.als2 (192.168.200.9) to
failed conn cache
Registering messaging pointer for type 1030 - private_data=(nil)
Overriding messaging pointer for type 1030 - private_data=(nil)
Registering messaging pointer for type 1031 - private_data=(nil)
Overriding messaging pointer for type 1031 - private_data=(nil)
Deregistering messaging pointer for type 1028 - private_data=(nil)
Deregistering messaging pointer for type 1027 - private_data=(nil)
Deregistering messaging pointer for type 1280 - private_data=(nil)
Deregistering messaging pointer for type 1 - private_data=(nil)
connection_ok: Connection to ADMUC1.arri.de for domain ARRI is not
connected
saf_fetch: Returning "ADMUC1.arri.de" for "ARRI" domain
check_negative_conn_cache returning result 0 for domain ARRI server
ADMUC1.arri.de
check_negative_conn_cache returning result 0 for domain ARRI server
ADMUC1.arri.de
sitename_fetch: Returning sitename for ARRI.DE:
"MuenchenTuerkenstrasse"
name ADMUC1.arri.de#20 found.
Connecting to 192.168.100.100 at port 445
connecting to ADMUC1.arri.de from SUPERMDC with kerberos principal
[SUPERMDC$@ARRI.DE] and realm [arri.de]
Doing spnego session setup (blob length=108)
got OID=1.2.840.48018.1.2.2
got OID=1.2.840.113554.1.2.2
got OID=1.2.840.113554.1.2.2.3
got OID=1.3.6.1.4.1.311.2.2.10
got principal=not_defined_in_RFC4178 at please_ignore
cli_session_setup_spnego: using target hostname not SPNEGO principal
cli_session_setup_spnego: guessed server
principal=cifs/ADMUC1.arri.de at ARRI.DE
Doing kerberos session setup
ads_cleanup_expired_creds: Ticket in ccache[MEMORY:cliconnect]
expiration Fri, 26 Feb 2016 01:43:53 CET
signed SMB2 message
signed SMB2 message
Deregistering messaging pointer for type 1030 - private_data=(nil)
Deregistering messaging pointer for type 1031 - private_data=(nil)
rpccli_setup_netlogon_creds: using cached netlogon_creds
cli[SUPERMDC$/SUPERMDC] to ADMUC1.arri.de
signed SMB2 message
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
Starting GENSEC mechanism schannel
Bind RPC Pipe: host ADMUC1.arri.de auth_type 68, auth_level 6
create_generic_auth_rpc_bind_req: generate first token
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 72
check_bind_response: accepted!
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
seed a452389d:b1f1e19b
seed+time fb214c6c:b1f1e19b
CLIENT d9363a4c:0ed628fe
seed+time+1 fb214c6d:b1f1e19b
SERVER 69da144a:9b247126
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 80
../librpc/rpc/dcerpc_util.c:141: auth_pad_length 8
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 320
../librpc/rpc/dcerpc_util.c:141: auth_pad_length 0
sitename_fetch: Returning sitename for ARRI.DE:
"MuenchenTuerkenstrasse"
name hv3KArch.Berlin.als2#20 found.
check_negative_conn_cache returning result 0 for domain ALS2 server
hv3KArch.Berlin.als2
msg_try_to_go_online: received for domain ALS2.
connection_ok: Connection to (null) for domain ALS2 is not connected
saf_fetch: failed to find server for "ALS2" domain
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 320
../librpc/rpc/dcerpc_util.c:141: auth_pad_length 0
sitename_fetch: Returning sitename for ARRI.DE:
"MuenchenTuerkenstrasse"
name hv3KArch.Berlin.als2#20 found.
check_negative_conn_cache returning result 0 for domain ALS2 server
hv3KArch.Berlin.als2
Connecting to 192.168.200.9 at port 445
E2BIG: convert_string(UTF-8,CP850): srclen=21 destlen=16 -
'HV3KARCH.BERLIN.ALS2'
Connecting to 192.168.200.9 at port 139
add_failed_connection_entry: added domain ALS2 (hv3KArch.Berlin.als2) to
failed conn cache
add_failed_connection_entry: added domain Berlin.als2
(hv3KArch.Berlin.als2) to failed conn cache
Registering messaging pointer for type 1030 - private_data=(nil)
Overriding messaging pointer for type 1030 - private_data=(nil)
Registering messaging pointer for type 1031 - private_data=(nil)
Overriding messaging pointer for type 1031 - private_data=(nil)
Deregistering messaging pointer for type 1028 - private_data=(nil)
Deregistering messaging pointer for type 1027 - private_data=(nil)
Deregistering messaging pointer for type 1280 - private_data=(nil)
Deregistering messaging pointer for type 1 - private_data=(nil)
connection_ok: Connection to ADMUC1.arri.de for domain ARRI is not
connected
saf_fetch: Returning "ADMUC1.arri.de" for "ARRI" domain
check_negative_conn_cache returning result 0 for domain ARRI server
ADMUC1.arri.de
check_negative_conn_cache returning result 0 for domain ARRI server
ADMUC1.arri.de
sitename_fetch: Returning sitename for ARRI.DE:
"MuenchenTuerkenstrasse"
name ADMUC1.arri.de#20 found.
Connecting to 192.168.100.100 at port 445
connecting to ADMUC1.arri.de from SUPERMDC with kerberos principal
[SUPERMDC$@ARRI.DE] and realm [arri.de]
Doing spnego session setup (blob length=108)
got OID=1.2.840.48018.1.2.2
got OID=1.2.840.113554.1.2.2
got OID=1.2.840.113554.1.2.2.3
got OID=1.3.6.1.4.1.311.2.2.10
got principal=not_defined_in_RFC4178 at please_ignore
cli_session_setup_spnego: using target hostname not SPNEGO principal
cli_session_setup_spnego: guessed server
principal=cifs/ADMUC1.arri.de at ARRI.DE
Doing kerberos session setup
ads_cleanup_expired_creds: Ticket in ccache[MEMORY:cliconnect]
expiration Fri, 26 Feb 2016 01:43:53 CET
signed SMB2 message
signed SMB2 message
Deregistering messaging pointer for type 1030 - private_data=(nil)
Deregistering messaging pointer for type 1031 - private_data=(nil)
rpccli_setup_netlogon_creds: using cached netlogon_creds
cli[SUPERMDC$/SUPERMDC] to ADMUC1.arri.de
signed SMB2 message
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
Starting GENSEC mechanism schannel
Bind RPC Pipe: host ADMUC1.arri.de auth_type 68, auth_level 6
create_generic_auth_rpc_bind_req: generate first token
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 72
check_bind_response: accepted!
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
seed a452389d:b1f1e19b
seed+time fb214cc9:b1f1e19b
CLIENT 9922c64b:7f03788c
seed+time+1 fb214cca:b1f1e19b
SERVER 5650b987:d0fe912a
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 80
../librpc/rpc/dcerpc_util.c:141: auth_pad_length 8
check lock order 2 for /var/cache/samba/g_lock.tdb
release lock order 2 for /var/cache/samba/g_lock.tdb
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 320
../librpc/rpc/dcerpc_util.c:141: auth_pad_length 0
sitename_fetch: Returning sitename for ARRI.DE:
"MuenchenTuerkenstrasse"
name hv3KArch.Berlin.als2#20 found.
check_negative_conn_cache returning result -1073741823 for domain ALS2
server hv3KArch.Berlin.als2
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
ads_dc_name: domain=ALS2
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
ads_find_dc: (cldap) looking for realm 'Berlin.als2'
get_sorted_dc_list: attempting lookup for name Berlin.als2 (sitename
DOM)
saf_fetch: failed to find server for "Berlin.als2" domain
get_dc_list: preferred server list: ", *"
name Berlin.als2#1C found.
Adding 3 DC's from auto lookup
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.114.254
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.9
get_dc_list: returning 3 ip addresses in an ordered list
get_dc_list: 192.168.200.1:389 192.168.114.254:389 192.168.200.9:389
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
ads_try_connect: sending CLDAP request to 192.168.200.1 (realm:
Berlin.als2)
Successfully contacted LDAP server 192.168.200.1
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
ads_dc_name: using server='H1X97VMM.BERLIN.ALS2' IP=192.168.200.1
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
get_sorted_dc_list: attempting lookup for name Berlin.als2 (sitename
DOM)
saf_fetch: failed to find server for "Berlin.als2" domain
get_dc_list: preferred server list: ", *"
name Berlin.als2#1C found.
Adding 3 DC's from auto lookup
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.114.254
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.9
get_dc_list: returning 3 ip addresses in an ordered list
get_dc_list: 192.168.200.1:389 192.168.114.254:389 192.168.200.9:389
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.1
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.114.254
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.9
get_sorted_dc_list: attempting lookup for name Berlin.als2 (sitename
NULL)
saf_fetch: failed to find server for "Berlin.als2" domain
get_dc_list: preferred server list: ", *"
name Berlin.als2#1C found.
Adding 3 DC's from auto lookup
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.114.254
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.9
get_dc_list: returning 3 ip addresses in an ordered list
get_dc_list: 192.168.200.1:389 192.168.114.254:389 192.168.200.9:389
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.1
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.114.254
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.9
msg_try_to_go_online: received for domain ALS2.
connection_ok: Connection to (null) for domain ALS2 is not connected
saf_fetch: failed to find server for "ALS2" domain
rpc_api_pipe: host ADMUC1.arri.de
signed SMB2 message
rpc_read_send: data_to_read: 320
../librpc/rpc/dcerpc_util.c:141: auth_pad_length 0
sitename_fetch: Returning sitename for ARRI.DE:
"MuenchenTuerkenstrasse"
name hv3KArch.Berlin.als2#20 found.
check_negative_conn_cache returning result -1073741823 for domain ALS2
server hv3KArch.Berlin.als2
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
ads_dc_name: domain=ALS2
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
ads_find_dc: (cldap) looking for realm 'Berlin.als2'
get_sorted_dc_list: attempting lookup for name Berlin.als2 (sitename
DOM)
saf_fetch: failed to find server for "Berlin.als2" domain
get_dc_list: preferred server list: ", *"
name Berlin.als2#1C found.
Adding 3 DC's from auto lookup
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.114.254
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.9
get_dc_list: returning 3 ip addresses in an ordered list
get_dc_list: 192.168.200.1:389 192.168.114.254:389 192.168.200.9:389
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
ads_try_connect: sending CLDAP request to 192.168.200.1 (realm:
Berlin.als2)
Successfully contacted LDAP server 192.168.200.1
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
ads_dc_name: using server='H1X97VMM.BERLIN.ALS2' IP=192.168.200.1
sitename_fetch: Returning sitename for Berlin.als2: "DOM"
get_sorted_dc_list: attempting lookup for name Berlin.als2 (sitename
DOM)
saf_fetch: failed to find server for "Berlin.als2" domain
get_dc_list: preferred server list: ", *"
name Berlin.als2#1C found.
Adding 3 DC's from auto lookup
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.114.254
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.9
get_dc_list: returning 3 ip addresses in an ordered list
get_dc_list: 192.168.200.1:389 192.168.114.254:389 192.168.200.9:389
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.1
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.114.254
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.9
get_sorted_dc_list: attempting lookup for name Berlin.als2 (sitename
NULL)
saf_fetch: failed to find server for "Berlin.als2" domain
get_dc_list: preferred server list: ", *"
name Berlin.als2#1C found.
Adding 3 DC's from auto lookup
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.1
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.114.254
check_negative_conn_cache returning result 0 for domain Berlin.als2
server 192.168.200.9
get_dc_list: returning 3 ip addresses in an ordered list
get_dc_list: 192.168.200.1:389 192.168.114.254:389 192.168.200.9:389
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.1
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.114.254
check_negative_conn_cache returning result 0 for domain ALS2 server
192.168.200.9
Connecting to 192.168.200.1 at port 445
Connecting to 192.168.200.1 at port 139
