thr3ads.net - samba - [Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10 [Apr 2016]

If this information is useful, please help other people find it:
Share via:

Dimitar Hristov

2016-Apr-19 13:23 UTC

[Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10

Hi list,


    


    After the badlock patching of all samba machines in our organization
    (all of them are domain members), some functionalities have stopped
    working, more particularly:


    - wbinfo -g (no output at all)


    - wbinfo -u (no output at all)


    - getent passwd (displays only local users)


    - getent group


    


    working functionalities:


    - samba shares are still accessible, with appropriate users set as
    "valid", "write users" etc


    - getent passwd <domain user>


    - wbinfo --name-to-sid 


    


    


    Configuration files:


    - /etc/samba/smb.conf


    [global]


            workgroup = EXAMPLE


            realm = EXAMPLE.COM


            security = ADS


            dedicated keytab file = /etc/krb5.keytab


            kerberos method = secrets and keytab


            log file = /var/log/samba/%m.log


            load printers = No


            printcap name = /dev/null


            winbind separator = +


            winbind enum users = Yes


            winbind enum groups = Yes


            winbind use default domain = Yes


            winbind refresh tickets = Yes


            idmap config example : backend = ad


            idmap config * : backend = tdb


            printing = bsd


    


    - /etc/krb5.conf


    [logging]


     default = FILE:/var/log/krb5libs.log


     kdc = FILE:/var/log/krb5kdc.log


     admin_server = FILE:/var/log/kadmind.log


    


    [libdefaults]


     dns_lookup_kdc = false


     dns_lookup_realm = false


     ticket_lifetime = 24h


     renew_lifetime = 7d


     forwardable = true


     rdns = false


     default_realm = EXAMPLE.COM


     default_ccache_name = KEYRING:persistent:%{uid}


    


    [realms]

 
    EXAMPLE.COM = {


      kdc = example-adc01.example.com


      admin_server = example-adc01.example.com


     }


    


    [domain_realm]


     .example.com = EXAMPLE.COM

 
    example.com = EXAMPLE.COM


    


    - /etc/nsswitch.conf


    


    passwd:     files winbind


    shadow:     files winbind


    group:      files winbind


    initgroups: files


    


    hosts:      files dns myhostname


    


    bootparams: nisplus [NOTFOUND=return] files


    


    ethers:     files


    netmasks:   files


    networks:   files


    protocols:  files winbind


    rpc:        files winbind


    services:   files winbind


    


    netgroup:   nisplus sss


    


    publickey:  nisplus


    


    automount:  files nisplus


    aliases:    files nisplus


    


    Installed packages:


    - working environment


    samba-4.2.3-12.el7_2.x86_64


    samba-common-4.2.3-12.el7_2.noarch


    samba-winbind-modules-4.2.3-12.el7_2.x86_64


    samba-winbind-clients-4.2.3-12.el7_2.x86_64


    samba-common-tools-4.2.3-12.el7_2.x86_64


    samba-common-libs-4.2.3-12.el7_2.x86_64


    samba-winbind-4.2.3-12.el7_2.x86_64


    samba-libs-4.2.3-12.el7_2.x86_64


    samba-client-libs-4.2.3-12.el7_2.x86_64


    krb5-workstation-1.13.2-12.el7_2.x86_64


    krb5-libs-1.13.2-12.el7_2.x86_64


    


    - not working (after the update)


    samba-winbind-4.2.10-6.el7_2.x86_64


    samba-libs-4.2.10-6.el7_2.x86_64


    samba-common-4.2.10-6.el7_2.noarch


    samba-client-libs-4.2.10-6.el7_2.x86_64


    samba-winbind-modules-4.2.10-6.el7_2.x86_64


    samba-winbind-clients-4.2.10-6.el7_2.x86_64


    samba-common-tools-4.2.10-6.el7_2.x86_64


    samba-common-libs-4.2.10-6.el7_2.x86_64


    samba-4.2.10-6.el7_2.x86_64


    krb5-workstation-1.13.2-12.el7_2.x86_64


    krb5-libs-1.13.2-12.el7_2.x86_64


    


    ---------------------


    


    Partial log output after "wbinfo -g" -
      /var/log/samba/winbind.log:


    


    [2016/04/19 14:58:40.635486, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd.c:725(process_request)


      process_request: Handling async request 3640:LIST_GROUPS


    [2016/04/19 14:58:40.635501,  3, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd_list_groups.c:58(winbindd_list_groups_send)


      list_groups EXAMPLE


    [2016/04/19 14:58:40.635520,  1, pid=3634, effective(0, 0), real(0,
    0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)


           wbint_QueryGroupList: struct wbint_QueryGroupList


              in: struct wbint_QueryGroupList


    [2016/04/19 14:58:42.112485, 10, pid=3634, effective(0, 0), real(0,
    0)] ../source3/lib/messages.c:252(messaging_recv_cb)


      messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from
    3635


    [2016/04/19 14:58:42.112513, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)


      Domain EXAMPLE is marked as offline now.


    [2016/04/19 14:58:42.113574,  1, pid=3634, effective(0, 0), real(0,
    0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)


           wbint_QueryGroupList: struct wbint_QueryGroupList


              out: struct wbint_QueryGroupList


                  groups                   : *


                      groups: struct wbint_Principals


                          num_principals           : 0


                          principals: ARRAY(0)


                  result                   : NT_STATUS_IO_TIMEOUT


    [2016/04/19 14:58:42.113616, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
../source3/winbindd/winbindd_list_groups.c:128(winbindd_list_groups_done)


      Domain EXAMPLE returned 0 groups


    [2016/04/19 14:58:42.113623, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
../source3/winbindd/winbindd_list_groups.c:134(winbindd_list_groups_done)


      list_groups for domain EXAMPLE failed


    [2016/04/19 14:58:42.113630, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd.c:787(wb_request_done)


      wb_request_done[3640:LIST_GROUPS]: NT_STATUS_OK


    [2016/04/19 14:58:42.113649, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd.c:851(winbind_client_response_written)


      winbind_client_response_written[3640:LIST_GROUPS]: delivered
    response to client


    [2016/04/19 14:58:42.114552,  6, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd.c:957(winbind_client_request_read)


      closing socket 28, client exited


    [2016/04/19 14:59:13.272624, 10, pid=3634, effective(0, 0), real(0,
    0)] ../source3/lib/messages.c:252(messaging_recv_cb)


      messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from
    3635


    [2016/04/19 14:59:13.272656, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)


      Domain EXAMPLE is marked as online now.


    

      Partial log output after "wbinfo -u" -
      /var/log/samba/winbind.log:


    


    [2016/04/19 15:03:25.308776, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd.c:725(process_request)


      process_request: Handling async request 3666:LIST_USERS


    [2016/04/19 15:03:25.308788,  3, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd_list_users.c:58(winbindd_list_users_send)


      list_users EXAMPLE


    [2016/04/19 15:03:25.308808,  1, pid=3634, effective(0, 0), real(0,
    0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)


           wbint_QueryUserList: struct wbint_QueryUserList


              in: struct wbint_QueryUserList


    [2016/04/19 15:03:29.418016, 10, pid=3634, effective(0, 0), real(0,
    0)] ../source3/lib/messages.c:252(messaging_recv_cb)


      messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from
    3635


    [2016/04/19 15:03:29.418040, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)


      Domain EXAMPLE is marked as offline now.


    [2016/04/19 15:03:29.418101,  1, pid=3634, effective(0, 0), real(0,
    0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)


           wbint_QueryUserList: struct wbint_QueryUserList


              out: struct wbint_QueryUserList


                  users                    : *


                      users: struct wbint_userinfos


                          num_userinfos            : 0x00000000 (0)


                          userinfos: ARRAY(0)


                  result                   : NT_STATUS_IO_TIMEOUT


    [2016/04/19 15:03:29.418172, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd_list_users.c:128(winbindd_list_users_done)


      Domain EXAMPLE returned 0 users


    [2016/04/19 15:03:29.418180, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd_list_users.c:134(winbindd_list_users_done)


      List_users for domain EXAMPLE failed


    [2016/04/19 15:03:29.418187, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd.c:787(wb_request_done)


      wb_request_done[3666:LIST_USERS]: NT_STATUS_OK


    [2016/04/19 15:03:29.418206, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd.c:851(winbind_client_response_written)


      winbind_client_response_written[3666:LIST_USERS]: delivered
    response to client


    [2016/04/19 15:03:29.420295,  6, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd.c:957(winbind_client_request_read)


      closing socket 28, client exited


    [2016/04/19 15:04:00.414647, 10, pid=3634, effective(0, 0), real(0,
    0)] ../source3/lib/messages.c:252(messaging_recv_cb)


      messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from
    3635


    [2016/04/19 15:04:00.414669, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)


      Domain EXAMPLE is marked as online now.


    

      Partial log output after "getent passwd" -
          /var/log/samba/winbind.log (the local users get displayed,
          domain users - do not):


    


    [2016/04/19 15:04:41.367195, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd.c:725(process_request)


      process_request: Handling async request 3673:GETPWENT


    [2016/04/19 15:04:41.367208,  3, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd_getpwent.c:50(winbindd_getpwent_send)


      [ 3673]: getpwent


    [2016/04/19 15:04:41.367307,  1, pid=3634, effective(0, 0), real(0,
    0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)


           wbint_QueryUserList: struct wbint_QueryUserList


              in: struct wbint_QueryUserList


    [2016/04/19 15:04:41.367621,  1, pid=3634, effective(0, 0), real(0,
    0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)


           wbint_QueryUserList: struct wbint_QueryUserList


              out: struct wbint_QueryUserList


                  users                    : *


                      users: struct wbint_userinfos


                          num_userinfos            : 0x00000000 (0)


                          userinfos: ARRAY(0)


                  result                   : NT_STATUS_OK


    [2016/04/19 15:04:41.367652, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/wb_query_user_list.c:69(wb_query_user_list_done)


      dcerpc_wbint_QueryUserList returned 0 users


    [2016/04/19 15:04:41.367661,  1, pid=3634, effective(0, 0), real(0,
    0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)


           wbint_QueryUserList: struct wbint_QueryUserList


              in: struct wbint_QueryUserList


    [2016/04/19 15:04:41.367680,  1, pid=3634, effective(0, 0), real(0,
    0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)


           wbint_QueryUserList: struct wbint_QueryUserList


              out: struct wbint_QueryUserList


                  users                    : *


                      users: struct wbint_userinfos


                          num_userinfos            : 0x00000000 (0)


                          userinfos: ARRAY(0)


                  result                   : NT_STATUS_IO_TIMEOUT


    [2016/04/19 15:04:41.367700, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/wb_next_pwent.c:109(wb_next_pwent_fetch_done)


      query_user_list for domain EXAMPLE returned NT_STATUS_IO_TIMEOUT


    [2016/04/19 15:04:41.367707, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd_getpwent.c:95(winbindd_getpwent_done)


      winbindd_getpwent_done: done with 0 users


    [2016/04/19 15:04:41.367712, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd.c:787(wb_request_done)


      wb_request_done[3673:GETPWENT]: NT_STATUS_NO_MORE_ENTRIES


    [2016/04/19 15:04:41.367726, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd.c:851(winbind_client_response_written)


      winbind_client_response_written[3673:GETPWENT]: delivered response
    to client


    [2016/04/19 15:04:41.367900, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd.c:725(process_request)


      process_request: Handling async request 3673:ENDPWENT


    [2016/04/19 15:04:41.367916, 10, pid=3634, effective(0, 0), real(0,
    0), class=winbind]
    ../source3/winbindd/winbindd.c:787(wb_request_done)


      wb_request_done[3673:ENDPWENT]: NT_STATUS_OK


    


    I think that the issue is similar to the issues described by L.P.H.
    van Belle and Luca Bertoncello.


    


    The Domain Controllers are MS Windows Server 2012 R2, AD Scheme is
    2012.


    


    Any ideas on how to solve this?


    


    Thanks,


    Dimitar

Andrew Martin

2016-Apr-19 13:40 UTC

head link

[Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10

I am also having this issue, however in my case it is worse - samba shares do
not work
and "getent passwd <domain user>" also does not work. I tried
adding the following to the
"[global]" section of my smb.conf as suggested elsewhere, but no
improvement:
client ldap sasl wrapping = plain

My smb.conf is very similar to yours, however I also have the following options
set:
encrypt passwords = true
winbind nss info = rfc2307

Thanks,

Andrew

----- Original Message -----> From: "Dimitar Hristov" <dimitar.hristov at outlook.com>
> To: samba at lists.samba.org
> Sent: Tuesday, April 19, 2016 8:23:50 AM
> Subject: [Samba] wbinfo -u, wbinfo -g not working after samba update from
4.2.3 to 4.2.10
> 
> Hi list,
> 
> 
>     
> 
> 
>     After the badlock patching of all samba machines in our organization
>     (all of them are domain members), some functionalities have stopped
>     working, more particularly:
> 
> 
>     - wbinfo -g (no output at all)
> 
> 
>     - wbinfo -u (no output at all)
> 
> 
>     - getent passwd (displays only local users)
> 
> 
>     - getent group
> 
> 
>     
> 
> 
>     working functionalities:
> 
> 
>     - samba shares are still accessible, with appropriate users set as
>     "valid", "write users" etc
> 
> 
>     - getent passwd <domain user>
> 
> 
>     - wbinfo --name-to-sid
> 
> 
>     
> 
> 
>     
> 
> 
>     Configuration files:
> 
> 
>     - /etc/samba/smb.conf
> 
> 
>     [global]
> 
> 
>             workgroup = EXAMPLE
> 
> 
>             realm = EXAMPLE.COM
> 
> 
>             security = ADS
> 
> 
>             dedicated keytab file = /etc/krb5.keytab
> 
> 
>             kerberos method = secrets and keytab
> 
> 
>             log file = /var/log/samba/%m.log
> 
> 
>             load printers = No
> 
> 
>             printcap name = /dev/null
> 
> 
>             winbind separator = +
> 
> 
>             winbind enum users = Yes
> 
> 
>             winbind enum groups = Yes
> 
> 
>             winbind use default domain = Yes
> 
> 
>             winbind refresh tickets = Yes
> 
> 
>             idmap config example : backend = ad
> 
> 
>             idmap config * : backend = tdb
> 
> 
>             printing = bsd
> 
> 
>     
> 
> 
>     - /etc/krb5.conf
> 
> 
>     [logging]
> 
> 
>      default = FILE:/var/log/krb5libs.log
> 
> 
>      kdc = FILE:/var/log/krb5kdc.log
> 
> 
>      admin_server = FILE:/var/log/kadmind.log
> 
> 
>     
> 
> 
>     [libdefaults]
> 
> 
>      dns_lookup_kdc = false
> 
> 
>      dns_lookup_realm = false
> 
> 
>      ticket_lifetime = 24h
> 
> 
>      renew_lifetime = 7d
> 
> 
>      forwardable = true
> 
> 
>      rdns = false
> 
> 
>      default_realm = EXAMPLE.COM
> 
> 
>      default_ccache_name = KEYRING:persistent:%{uid}
> 
> 
>     
> 
> 
>     [realms]
> 
>  
>     EXAMPLE.COM = {
> 
> 
>       kdc = example-adc01.example.com
> 
> 
>       admin_server = example-adc01.example.com
> 
> 
>      }
> 
> 
>     
> 
> 
>     [domain_realm]
> 
> 
>      .example.com = EXAMPLE.COM
> 
>  
>     example.com = EXAMPLE.COM
> 
> 
>     
> 
> 
>     - /etc/nsswitch.conf
> 
> 
>     
> 
> 
>     passwd:     files winbind
> 
> 
>     shadow:     files winbind
> 
> 
>     group:      files winbind
> 
> 
>     initgroups: files
> 
> 
>     
> 
> 
>     hosts:      files dns myhostname
> 
> 
>     
> 
> 
>     bootparams: nisplus [NOTFOUND=return] files
> 
> 
>     
> 
> 
>     ethers:     files
> 
> 
>     netmasks:   files
> 
> 
>     networks:   files
> 
> 
>     protocols:  files winbind
> 
> 
>     rpc:        files winbind
> 
> 
>     services:   files winbind
> 
> 
>     
> 
> 
>     netgroup:   nisplus sss
> 
> 
>     
> 
> 
>     publickey:  nisplus
> 
> 
>     
> 
> 
>     automount:  files nisplus
> 
> 
>     aliases:    files nisplus
> 
> 
>     
> 
> 
>     Installed packages:
> 
> 
>     - working environment
> 
> 
>     samba-4.2.3-12.el7_2.x86_64
> 
> 
>     samba-common-4.2.3-12.el7_2.noarch
> 
> 
>     samba-winbind-modules-4.2.3-12.el7_2.x86_64
> 
> 
>     samba-winbind-clients-4.2.3-12.el7_2.x86_64
> 
> 
>     samba-common-tools-4.2.3-12.el7_2.x86_64
> 
> 
>     samba-common-libs-4.2.3-12.el7_2.x86_64
> 
> 
>     samba-winbind-4.2.3-12.el7_2.x86_64
> 
> 
>     samba-libs-4.2.3-12.el7_2.x86_64
> 
> 
>     samba-client-libs-4.2.3-12.el7_2.x86_64
> 
> 
>     krb5-workstation-1.13.2-12.el7_2.x86_64
> 
> 
>     krb5-libs-1.13.2-12.el7_2.x86_64
> 
> 
>     
> 
> 
>     - not working (after the update)
> 
> 
>     samba-winbind-4.2.10-6.el7_2.x86_64
> 
> 
>     samba-libs-4.2.10-6.el7_2.x86_64
> 
> 
>     samba-common-4.2.10-6.el7_2.noarch
> 
> 
>     samba-client-libs-4.2.10-6.el7_2.x86_64
> 
> 
>     samba-winbind-modules-4.2.10-6.el7_2.x86_64
> 
> 
>     samba-winbind-clients-4.2.10-6.el7_2.x86_64
> 
> 
>     samba-common-tools-4.2.10-6.el7_2.x86_64
> 
> 
>     samba-common-libs-4.2.10-6.el7_2.x86_64
> 
> 
>     samba-4.2.10-6.el7_2.x86_64
> 
> 
>     krb5-workstation-1.13.2-12.el7_2.x86_64
> 
> 
>     krb5-libs-1.13.2-12.el7_2.x86_64
> 
> 
>     
> 
> 
>     ---------------------
> 
> 
>     
> 
> 
>     Partial log output after "wbinfo -g" -
>       /var/log/samba/winbind.log:
> 
> 
>     
> 
> 
>     [2016/04/19 14:58:40.635486, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd.c:725(process_request)
> 
> 
>       process_request: Handling async request 3640:LIST_GROUPS
> 
> 
>     [2016/04/19 14:58:40.635501,  3, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>    
../source3/winbindd/winbindd_list_groups.c:58(winbindd_list_groups_send)
> 
> 
>       list_groups EXAMPLE
> 
> 
>     [2016/04/19 14:58:40.635520,  1, pid=3634, effective(0, 0), real(0,
>     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> 
> 
>            wbint_QueryGroupList: struct wbint_QueryGroupList
> 
> 
>               in: struct wbint_QueryGroupList
> 
> 
>     [2016/04/19 14:58:42.112485, 10, pid=3634, effective(0, 0), real(0,
>     0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> 
> 
>       messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from
>     3635
> 
> 
>     [2016/04/19 14:58:42.112513, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)
> 
> 
>       Domain EXAMPLE is marked as offline now.
> 
> 
>     [2016/04/19 14:58:42.113574,  1, pid=3634, effective(0, 0), real(0,
>     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> 
> 
>            wbint_QueryGroupList: struct wbint_QueryGroupList
> 
> 
>               out: struct wbint_QueryGroupList
> 
> 
>                   groups                   : *
> 
> 
>                       groups: struct wbint_Principals
> 
> 
>                           num_principals           : 0
> 
> 
>                           principals: ARRAY(0)
> 
> 
>                   result                   : NT_STATUS_IO_TIMEOUT
> 
> 
>     [2016/04/19 14:58:42.113616, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
> ../source3/winbindd/winbindd_list_groups.c:128(winbindd_list_groups_done)
> 
> 
>       Domain EXAMPLE returned 0 groups
> 
> 
>     [2016/04/19 14:58:42.113623, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
> ../source3/winbindd/winbindd_list_groups.c:134(winbindd_list_groups_done)
> 
> 
>       list_groups for domain EXAMPLE failed
> 
> 
>     [2016/04/19 14:58:42.113630, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd.c:787(wb_request_done)
> 
> 
>       wb_request_done[3640:LIST_GROUPS]: NT_STATUS_OK
> 
> 
>     [2016/04/19 14:58:42.113649, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> 
> 
>       winbind_client_response_written[3640:LIST_GROUPS]: delivered
>     response to client
> 
> 
>     [2016/04/19 14:58:42.114552,  6, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd.c:957(winbind_client_request_read)
> 
> 
>       closing socket 28, client exited
> 
> 
>     [2016/04/19 14:59:13.272624, 10, pid=3634, effective(0, 0), real(0,
>     0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> 
> 
>       messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from
>     3635
> 
> 
>     [2016/04/19 14:59:13.272656, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)
> 
> 
>       Domain EXAMPLE is marked as online now.
> 
> 
>     
> 
>       Partial log output after "wbinfo -u" -
>       /var/log/samba/winbind.log:
> 
> 
>     
> 
> 
>     [2016/04/19 15:03:25.308776, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd.c:725(process_request)
> 
> 
>       process_request: Handling async request 3666:LIST_USERS
> 
> 
>     [2016/04/19 15:03:25.308788,  3, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd_list_users.c:58(winbindd_list_users_send)
> 
> 
>       list_users EXAMPLE
> 
> 
>     [2016/04/19 15:03:25.308808,  1, pid=3634, effective(0, 0), real(0,
>     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> 
> 
>            wbint_QueryUserList: struct wbint_QueryUserList
> 
> 
>               in: struct wbint_QueryUserList
> 
> 
>     [2016/04/19 15:03:29.418016, 10, pid=3634, effective(0, 0), real(0,
>     0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> 
> 
>       messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from
>     3635
> 
> 
>     [2016/04/19 15:03:29.418040, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)
> 
> 
>       Domain EXAMPLE is marked as offline now.
> 
> 
>     [2016/04/19 15:03:29.418101,  1, pid=3634, effective(0, 0), real(0,
>     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> 
> 
>            wbint_QueryUserList: struct wbint_QueryUserList
> 
> 
>               out: struct wbint_QueryUserList
> 
> 
>                   users                    : *
> 
> 
>                       users: struct wbint_userinfos
> 
> 
>                           num_userinfos            : 0x00000000 (0)
> 
> 
>                           userinfos: ARRAY(0)
> 
> 
>                   result                   : NT_STATUS_IO_TIMEOUT
> 
> 
>     [2016/04/19 15:03:29.418172, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd_list_users.c:128(winbindd_list_users_done)
> 
> 
>       Domain EXAMPLE returned 0 users
> 
> 
>     [2016/04/19 15:03:29.418180, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd_list_users.c:134(winbindd_list_users_done)
> 
> 
>       List_users for domain EXAMPLE failed
> 
> 
>     [2016/04/19 15:03:29.418187, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd.c:787(wb_request_done)
> 
> 
>       wb_request_done[3666:LIST_USERS]: NT_STATUS_OK
> 
> 
>     [2016/04/19 15:03:29.418206, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> 
> 
>       winbind_client_response_written[3666:LIST_USERS]: delivered
>     response to client
> 
> 
>     [2016/04/19 15:03:29.420295,  6, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd.c:957(winbind_client_request_read)
> 
> 
>       closing socket 28, client exited
> 
> 
>     [2016/04/19 15:04:00.414647, 10, pid=3634, effective(0, 0), real(0,
>     0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> 
> 
>       messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from
>     3635
> 
> 
>     [2016/04/19 15:04:00.414669, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)
> 
> 
>       Domain EXAMPLE is marked as online now.
> 
> 
>     
> 
>       Partial log output after "getent passwd" -
>           /var/log/samba/winbind.log (the local users get displayed,
>           domain users - do not):
> 
> 
>     
> 
> 
>     [2016/04/19 15:04:41.367195, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd.c:725(process_request)
> 
> 
>       process_request: Handling async request 3673:GETPWENT
> 
> 
>     [2016/04/19 15:04:41.367208,  3, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd_getpwent.c:50(winbindd_getpwent_send)
> 
> 
>       [ 3673]: getpwent
> 
> 
>     [2016/04/19 15:04:41.367307,  1, pid=3634, effective(0, 0), real(0,
>     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> 
> 
>            wbint_QueryUserList: struct wbint_QueryUserList
> 
> 
>               in: struct wbint_QueryUserList
> 
> 
>     [2016/04/19 15:04:41.367621,  1, pid=3634, effective(0, 0), real(0,
>     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> 
> 
>            wbint_QueryUserList: struct wbint_QueryUserList
> 
> 
>               out: struct wbint_QueryUserList
> 
> 
>                   users                    : *
> 
> 
>                       users: struct wbint_userinfos
> 
> 
>                           num_userinfos            : 0x00000000 (0)
> 
> 
>                           userinfos: ARRAY(0)
> 
> 
>                   result                   : NT_STATUS_OK
> 
> 
>     [2016/04/19 15:04:41.367652, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/wb_query_user_list.c:69(wb_query_user_list_done)
> 
> 
>       dcerpc_wbint_QueryUserList returned 0 users
> 
> 
>     [2016/04/19 15:04:41.367661,  1, pid=3634, effective(0, 0), real(0,
>     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> 
> 
>            wbint_QueryUserList: struct wbint_QueryUserList
> 
> 
>               in: struct wbint_QueryUserList
> 
> 
>     [2016/04/19 15:04:41.367680,  1, pid=3634, effective(0, 0), real(0,
>     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> 
> 
>            wbint_QueryUserList: struct wbint_QueryUserList
> 
> 
>               out: struct wbint_QueryUserList
> 
> 
>                   users                    : *
> 
> 
>                       users: struct wbint_userinfos
> 
> 
>                           num_userinfos            : 0x00000000 (0)
> 
> 
>                           userinfos: ARRAY(0)
> 
> 
>                   result                   : NT_STATUS_IO_TIMEOUT
> 
> 
>     [2016/04/19 15:04:41.367700, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/wb_next_pwent.c:109(wb_next_pwent_fetch_done)
> 
> 
>       query_user_list for domain EXAMPLE returned NT_STATUS_IO_TIMEOUT
> 
> 
>     [2016/04/19 15:04:41.367707, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd_getpwent.c:95(winbindd_getpwent_done)
> 
> 
>       winbindd_getpwent_done: done with 0 users
> 
> 
>     [2016/04/19 15:04:41.367712, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd.c:787(wb_request_done)
> 
> 
>       wb_request_done[3673:GETPWENT]: NT_STATUS_NO_MORE_ENTRIES
> 
> 
>     [2016/04/19 15:04:41.367726, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> 
> 
>       winbind_client_response_written[3673:GETPWENT]: delivered response
>     to client
> 
> 
>     [2016/04/19 15:04:41.367900, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd.c:725(process_request)
> 
> 
>       process_request: Handling async request 3673:ENDPWENT
> 
> 
>     [2016/04/19 15:04:41.367916, 10, pid=3634, effective(0, 0), real(0,
>     0), class=winbind]
>     ../source3/winbindd/winbindd.c:787(wb_request_done)
> 
> 
>       wb_request_done[3673:ENDPWENT]: NT_STATUS_OK
> 
> 
>     
> 
> 
>     I think that the issue is similar to the issues described by L.P.H.
>     van Belle and Luca Bertoncello.
> 
> 
>     
> 
> 
>     The Domain Controllers are MS Windows Server 2012 R2, AD Scheme is
>     2012.
> 
> 
>     
> 
> 
>     Any ideas on how to solve this?
> 
> 
>     
> 
> 
>     Thanks,
> 
> 
>     Dimitar
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

Dimitar Hristov

2016-Apr-20 11:23 UTC

head link

[Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10

Hi list,

I'd like to update you on the issue, as I did some more tests. First,
I've added some directives to smb.conf (in italic):

[global]
        netbios name = testserver
        security = ADS
        workgroup = EXAMPLE
        realm = EXAMPLE.COM
        log file = /var/log/samba/%m.log
        log level = 10
        dedicated keytab file = /etc/krb5.keytab
        kerberos method = secrets and keytab
        winbind refresh tickets = yes
        winbind trusted domains only = no
        winbind use default domain = yes
        winbind enum users  = yes
        winbind enum groups = yes
        winbind separator = +
        client ldap sasl wrapping = plain
        idmap config EXAMPLE : backend  = ad
        idmap config EXAMPLE:schema_mode = rfc2307
        idmap config EXAMPLE:range = 10000-99999
        winbind nss info = rfc2307
        load printers = no
        printing = bsd
        printcap name = /dev/null


With "client ldap sasl wrapping = plain" set, the domain doesn't
go "offline". This can be seen by comparing the partial log output
after "wbinfo -g", with the one in my first email.

Also, I have tested joining a newly provisioned machine to the domain with 4.2.3
and 4.2.10 - it works without any issues when using 4.2.3, and it doesn't
work with 4.2.10. I used "net ads join" with debuglevel=1, please see
the output (working one - with 4.2.3, and not working - with 4.2.10):

### Join with samba 4.2.10###

net ads join -U Administrator --debuglevel=1
Enter Administrator's password:
libnet_Join:
    libnet_JoinCtx: struct libnet_JoinCtx
        in: struct libnet_JoinCtx
            dc_name                  : NULL
            machine_name             : 'TESTSERVER'
            domain_name              : *
                domain_name              : 'EXAMPLE.COM'
            account_ou               : NULL
            admin_account            : 'Administrator'
            admin_domain             : NULL
            machine_password         : NULL
            join_flags               : 0x00000023 (35)
                   0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS
                   0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
                   0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
                   0: WKSSVC_JOIN_FLAGS_DEFER_SPN
                   0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
                   0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
                   1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
                   0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
                   0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
                   1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
                   1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
            os_version               : NULL
            os_name                  : NULL
            create_upn               : 0x00 (0)
            upn                      : NULL
            modify_config            : 0x00 (0)
            ads                      : NULL
            debug                    : 0x01 (1)
            use_kerberos             : 0x00 (0)
            secure_channel_type      : SEC_CHAN_WKSTA (2)
Failed to setup SPNEGO negTokenInit request: NT_STATUS_INTERNAL_ERROR
libnet_Join:
    libnet_JoinCtx: struct libnet_JoinCtx
        out: struct libnet_JoinCtx
            account_name             : NULL
            netbios_domain_name      : 'EXAMPLE'
            dns_domain_name          : 'example.com'
            forest_name              : 'example.com'
            dn                       : NULL
            domain_sid               : *
                domain_sid               :
S-1-5-21-1214440339-1979792683-1801674531
            modified_config          : 0x00 (0)
            error_string             : 'Failed to set machine spn: Time
limit exceeded
Do you have sufficient permissions to create machine accounts?'
            domain_is_ad             : 0x01 (1)
            result                   : WERR_GENERAL_FAILURE
Failed to join domain: Failed to set machine spn: Time limit exceeded
Do you have sufficient permissions to create machine accounts?

### End join with samba 4.2.10 ### 

### Join with samba 4.2.3 ###

net ads join -U Administrator --debuglevel=1
Enter Administrator's password:
libnet_Join:
    libnet_JoinCtx: struct libnet_JoinCtx
        in: struct libnet_JoinCtx
            dc_name                  : NULL
            machine_name             : 'TESTSERVER'
            domain_name              : *
                domain_name              : 'EXAMPLE.COM'
            account_ou               : NULL
            admin_account            : 'Administrator'
            admin_domain             : NULL
            machine_password         : NULL
            join_flags               : 0x00000023 (35)
                   0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS
                   0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
                   0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
                   0: WKSSVC_JOIN_FLAGS_DEFER_SPN
                   0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
                   0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
                   1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
                   0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
                   0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
                   1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
                   1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
            os_version               : NULL
            os_name                  : NULL
            create_upn               : 0x00 (0)
            upn                      : NULL
            modify_config            : 0x00 (0)
            ads                      : NULL
            debug                    : 0x01 (1)
            use_kerberos             : 0x00 (0)
            secure_channel_type      : SEC_CHAN_WKSTA (2)
libnet_Join:
    libnet_JoinCtx: struct libnet_JoinCtx
        out: struct libnet_JoinCtx
            account_name             : NULL
            netbios_domain_name      : 'EXAMPLE'
            dns_domain_name          : 'example.com'
            forest_name              : 'example.com'
            dn                       :
'CN=testserver,OU=DefaultBin,DC=example,DC=com'
            domain_sid               : *
                domain_sid               :
S-1-5-21-1214440339-1979792683-1801674531
            modified_config          : 0x00 (0)
            error_string             : NULL
            domain_is_ad             : 0x01 (1)
            result                   : WERR_OK
Using short domain name -- EXAMPLE
Joined 'TESTSERVER' to dns domain 'example.com'

### End join with samba 4.2.3 ###

###/var/log/samba/winbind.log - after "wbinfo -g"###

[2016/04/20 14:01:44.879293, 10, pid=2301, effective(0, 0), real(0, 0),
class=winbind] ../source3/winbindd/winbindd.c:725(process_request)
  process_request: Handling async request 2429:LIST_GROUPS
[2016/04/20 14:01:44.879299,  3, pid=2301, effective(0, 0), real(0, 0),
class=winbind]
../source3/winbindd/winbindd_list_groups.c:58(winbindd_list_groups_send)
  list_groups EXAMPLE
[2016/04/20 14:01:44.879313,  1, pid=2301, effective(0, 0), real(0, 0)]
../librpc/ndr/ndr.c:439(ndr_print_function_debug)
       wbint_QueryGroupList: struct wbint_QueryGroupList
          in: struct wbint_QueryGroupList
[2016/04/20 14:01:44.879345,  1, pid=2301, effective(0, 0), real(0, 0)]
../librpc/ndr/ndr.c:439(ndr_print_function_debug)
       wbint_QueryGroupList: struct wbint_QueryGroupList
          out: struct wbint_QueryGroupList
              groups                   : *
                  groups: struct wbint_Principals
                      num_principals           : 0
                      principals: ARRAY(0)
              result                   : NT_STATUS_IO_TIMEOUT
[2016/04/20 14:01:44.879368, 10, pid=2301, effective(0, 0), real(0, 0),
class=winbind]
../source3/winbindd/winbindd_list_groups.c:128(winbindd_list_groups_done)
  Domain EXAMPLE returned 0 groups
[2016/04/20 14:01:44.879373, 10, pid=2301, effective(0, 0), real(0, 0),
class=winbind]
../source3/winbindd/winbindd_list_groups.c:134(winbindd_list_groups_done)
  list_groups for domain EXAMPLE failed
[2016/04/20 14:01:44.879378, 10, pid=2301, effective(0, 0), real(0, 0),
class=winbind] ../source3/winbindd/winbindd.c:787(wb_request_done)
  wb_request_done[2429:LIST_GROUPS]: NT_STATUS_OK

###End /var/log/samba/winbind.log - after "wbinfo -g" ###

Hope that helps, as quite a lot of people are expiriencing the same issue. I
missed to provide information about the distributions used for testing - CentOS
7.2, Debian Jessie 8.4

Regards,
Dimitar

> Date: Tue, 19 Apr 2016 08:40:45 -0500
> From: amartin at xes-inc.com
> To: dimitar.hristov at outlook.com
> CC: samba at lists.samba.org
> Subject: Re: [Samba] wbinfo -u, wbinfo -g not working after samba update
from 4.2.3 to 4.2.10
> 
> I am also having this issue, however in my case it is worse - samba shares
do not work
> and "getent passwd <domain user>" also does not work. I
tried adding the following to the
> "[global]" section of my smb.conf as suggested elsewhere, but no
improvement:
> client ldap sasl wrapping = plain
> 
> My smb.conf is very similar to yours, however I also have the following
options set:
> encrypt passwords = true
> winbind nss info = rfc2307
> 
> Thanks,
> 
> Andrew
> 
> ----- Original Message -----
> > From: "Dimitar Hristov" <dimitar.hristov at
outlook.com>
> > To: samba at lists.samba.org
> > Sent: Tuesday, April 19, 2016 8:23:50 AM
> > Subject: [Samba] wbinfo -u, wbinfo -g not working after samba update
from 4.2.3 to 4.2.10
> > 
> > Hi list,
> > 
> > 
> >     
> > 
> > 
> >     After the badlock patching of all samba machines in our
organization
> >     (all of them are domain members), some functionalities have
stopped
> >     working, more particularly:
> > 
> > 
> >     - wbinfo -g (no output at all)
> > 
> > 
> >     - wbinfo -u (no output at all)
> > 
> > 
> >     - getent passwd (displays only local users)
> > 
> > 
> >     - getent group
> > 
> > 
> >     
> > 
> > 
> >     working functionalities:
> > 
> > 
> >     - samba shares are still accessible, with appropriate users set as
> >     "valid", "write users" etc
> > 
> > 
> >     - getent passwd <domain user>
> > 
> > 
> >     - wbinfo --name-to-sid
> > 
> > 
> >     
> > 
> > 
> >     
> > 
> > 
> >     Configuration files:
> > 
> > 
> >     - /etc/samba/smb.conf
> > 
> > 
> >     [global]
> > 
> > 
> >             workgroup = EXAMPLE
> > 
> > 
> >             realm = EXAMPLE.COM
> > 
> > 
> >             security = ADS
> > 
> > 
> >             dedicated keytab file = /etc/krb5.keytab
> > 
> > 
> >             kerberos method = secrets and keytab
> > 
> > 
> >             log file = /var/log/samba/%m.log
> > 
> > 
> >             load printers = No
> > 
> > 
> >             printcap name = /dev/null
> > 
> > 
> >             winbind separator = +
> > 
> > 
> >             winbind enum users = Yes
> > 
> > 
> >             winbind enum groups = Yes
> > 
> > 
> >             winbind use default domain = Yes
> > 
> > 
> >             winbind refresh tickets = Yes
> > 
> > 
> >             idmap config example : backend = ad
> > 
> > 
> >             idmap config * : backend = tdb
> > 
> > 
> >             printing = bsd
> > 
> > 
> >     
> > 
> > 
> >     - /etc/krb5.conf
> > 
> > 
> >     [logging]
> > 
> > 
> >      default = FILE:/var/log/krb5libs.log
> > 
> > 
> >      kdc = FILE:/var/log/krb5kdc.log
> > 
> > 
> >      admin_server = FILE:/var/log/kadmind.log
> > 
> > 
> >     
> > 
> > 
> >     [libdefaults]
> > 
> > 
> >      dns_lookup_kdc = false
> > 
> > 
> >      dns_lookup_realm = false
> > 
> > 
> >      ticket_lifetime = 24h
> > 
> > 
> >      renew_lifetime = 7d
> > 
> > 
> >      forwardable = true
> > 
> > 
> >      rdns = false
> > 
> > 
> >      default_realm = EXAMPLE.COM
> > 
> > 
> >      default_ccache_name = KEYRING:persistent:%{uid}
> > 
> > 
> >     
> > 
> > 
> >     [realms]
> > 
> >  
> >     EXAMPLE.COM = {
> > 
> > 
> >       kdc = example-adc01.example.com
> > 
> > 
> >       admin_server = example-adc01.example.com
> > 
> > 
> >      }
> > 
> > 
> >     
> > 
> > 
> >     [domain_realm]
> > 
> > 
> >      .example.com = EXAMPLE.COM
> > 
> >  
> >     example.com = EXAMPLE.COM
> > 
> > 
> >     
> > 
> > 
> >     - /etc/nsswitch.conf
> > 
> > 
> >     
> > 
> > 
> >     passwd:     files winbind
> > 
> > 
> >     shadow:     files winbind
> > 
> > 
> >     group:      files winbind
> > 
> > 
> >     initgroups: files
> > 
> > 
> >     
> > 
> > 
> >     hosts:      files dns myhostname
> > 
> > 
> >     
> > 
> > 
> >     bootparams: nisplus [NOTFOUND=return] files
> > 
> > 
> >     
> > 
> > 
> >     ethers:     files
> > 
> > 
> >     netmasks:   files
> > 
> > 
> >     networks:   files
> > 
> > 
> >     protocols:  files winbind
> > 
> > 
> >     rpc:        files winbind
> > 
> > 
> >     services:   files winbind
> > 
> > 
> >     
> > 
> > 
> >     netgroup:   nisplus sss
> > 
> > 
> >     
> > 
> > 
> >     publickey:  nisplus
> > 
> > 
> >     
> > 
> > 
> >     automount:  files nisplus
> > 
> > 
> >     aliases:    files nisplus
> > 
> > 
> >     
> > 
> > 
> >     Installed packages:
> > 
> > 
> >     - working environment
> > 
> > 
> >     samba-4.2.3-12.el7_2.x86_64
> > 
> > 
> >     samba-common-4.2.3-12.el7_2.noarch
> > 
> > 
> >     samba-winbind-modules-4.2.3-12.el7_2.x86_64
> > 
> > 
> >     samba-winbind-clients-4.2.3-12.el7_2.x86_64
> > 
> > 
> >     samba-common-tools-4.2.3-12.el7_2.x86_64
> > 
> > 
> >     samba-common-libs-4.2.3-12.el7_2.x86_64
> > 
> > 
> >     samba-winbind-4.2.3-12.el7_2.x86_64
> > 
> > 
> >     samba-libs-4.2.3-12.el7_2.x86_64
> > 
> > 
> >     samba-client-libs-4.2.3-12.el7_2.x86_64
> > 
> > 
> >     krb5-workstation-1.13.2-12.el7_2.x86_64
> > 
> > 
> >     krb5-libs-1.13.2-12.el7_2.x86_64
> > 
> > 
> >     
> > 
> > 
> >     - not working (after the update)
> > 
> > 
> >     samba-winbind-4.2.10-6.el7_2.x86_64
> > 
> > 
> >     samba-libs-4.2.10-6.el7_2.x86_64
> > 
> > 
> >     samba-common-4.2.10-6.el7_2.noarch
> > 
> > 
> >     samba-client-libs-4.2.10-6.el7_2.x86_64
> > 
> > 
> >     samba-winbind-modules-4.2.10-6.el7_2.x86_64
> > 
> > 
> >     samba-winbind-clients-4.2.10-6.el7_2.x86_64
> > 
> > 
> >     samba-common-tools-4.2.10-6.el7_2.x86_64
> > 
> > 
> >     samba-common-libs-4.2.10-6.el7_2.x86_64
> > 
> > 
> >     samba-4.2.10-6.el7_2.x86_64
> > 
> > 
> >     krb5-workstation-1.13.2-12.el7_2.x86_64
> > 
> > 
> >     krb5-libs-1.13.2-12.el7_2.x86_64
> > 
> > 
> >     
> > 
> > 
> >     ---------------------
> > 
> > 
> >     
> > 
> > 
> >     Partial log output after "wbinfo -g" -
> >       /var/log/samba/winbind.log:
> > 
> > 
> >     
> > 
> > 
> >     [2016/04/19 14:58:40.635486, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd.c:725(process_request)
> > 
> > 
> >       process_request: Handling async request 3640:LIST_GROUPS
> > 
> > 
> >     [2016/04/19 14:58:40.635501,  3, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >    
../source3/winbindd/winbindd_list_groups.c:58(winbindd_list_groups_send)
> > 
> > 
> >       list_groups EXAMPLE
> > 
> > 
> >     [2016/04/19 14:58:40.635520,  1, pid=3634, effective(0, 0),
real(0,
> >     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > 
> > 
> >            wbint_QueryGroupList: struct wbint_QueryGroupList
> > 
> > 
> >               in: struct wbint_QueryGroupList
> > 
> > 
> >     [2016/04/19 14:58:42.112485, 10, pid=3634, effective(0, 0),
real(0,
> >     0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> > 
> > 
> >       messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from
> >     3635
> > 
> > 
> >     [2016/04/19 14:58:42.112513, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)
> > 
> > 
> >       Domain EXAMPLE is marked as offline now.
> > 
> > 
> >     [2016/04/19 14:58:42.113574,  1, pid=3634, effective(0, 0),
real(0,
> >     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > 
> > 
> >            wbint_QueryGroupList: struct wbint_QueryGroupList
> > 
> > 
> >               out: struct wbint_QueryGroupList
> > 
> > 
> >                   groups                   : *
> > 
> > 
> >                       groups: struct wbint_Principals
> > 
> > 
> >                           num_principals           : 0
> > 
> > 
> >                           principals: ARRAY(0)
> > 
> > 
> >                   result                   : NT_STATUS_IO_TIMEOUT
> > 
> > 
> >     [2016/04/19 14:58:42.113616, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >
../source3/winbindd/winbindd_list_groups.c:128(winbindd_list_groups_done)
> > 
> > 
> >       Domain EXAMPLE returned 0 groups
> > 
> > 
> >     [2016/04/19 14:58:42.113623, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >
../source3/winbindd/winbindd_list_groups.c:134(winbindd_list_groups_done)
> > 
> > 
> >       list_groups for domain EXAMPLE failed
> > 
> > 
> >     [2016/04/19 14:58:42.113630, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd.c:787(wb_request_done)
> > 
> > 
> >       wb_request_done[3640:LIST_GROUPS]: NT_STATUS_OK
> > 
> > 
> >     [2016/04/19 14:58:42.113649, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >    
../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> > 
> > 
> >       winbind_client_response_written[3640:LIST_GROUPS]: delivered
> >     response to client
> > 
> > 
> >     [2016/04/19 14:58:42.114552,  6, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd.c:957(winbind_client_request_read)
> > 
> > 
> >       closing socket 28, client exited
> > 
> > 
> >     [2016/04/19 14:59:13.272624, 10, pid=3634, effective(0, 0),
real(0,
> >     0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> > 
> > 
> >       messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from
> >     3635
> > 
> > 
> >     [2016/04/19 14:59:13.272656, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)
> > 
> > 
> >       Domain EXAMPLE is marked as online now.
> > 
> > 
> >     
> > 
> >       Partial log output after "wbinfo -u" -
> >       /var/log/samba/winbind.log:
> > 
> > 
> >     
> > 
> > 
> >     [2016/04/19 15:03:25.308776, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd.c:725(process_request)
> > 
> > 
> >       process_request: Handling async request 3666:LIST_USERS
> > 
> > 
> >     [2016/04/19 15:03:25.308788,  3, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >    
../source3/winbindd/winbindd_list_users.c:58(winbindd_list_users_send)
> > 
> > 
> >       list_users EXAMPLE
> > 
> > 
> >     [2016/04/19 15:03:25.308808,  1, pid=3634, effective(0, 0),
real(0,
> >     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > 
> > 
> >            wbint_QueryUserList: struct wbint_QueryUserList
> > 
> > 
> >               in: struct wbint_QueryUserList
> > 
> > 
> >     [2016/04/19 15:03:29.418016, 10, pid=3634, effective(0, 0),
real(0,
> >     0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> > 
> > 
> >       messaging_recv_cb: Received message 0x40c len 8 (num_fds:0) from
> >     3635
> > 
> > 
> >     [2016/04/19 15:03:29.418040, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd_cm.c:364(winbind_msg_domain_offline)
> > 
> > 
> >       Domain EXAMPLE is marked as offline now.
> > 
> > 
> >     [2016/04/19 15:03:29.418101,  1, pid=3634, effective(0, 0),
real(0,
> >     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > 
> > 
> >            wbint_QueryUserList: struct wbint_QueryUserList
> > 
> > 
> >               out: struct wbint_QueryUserList
> > 
> > 
> >                   users                    : *
> > 
> > 
> >                       users: struct wbint_userinfos
> > 
> > 
> >                           num_userinfos            : 0x00000000 (0)
> > 
> > 
> >                           userinfos: ARRAY(0)
> > 
> > 
> >                   result                   : NT_STATUS_IO_TIMEOUT
> > 
> > 
> >     [2016/04/19 15:03:29.418172, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >    
../source3/winbindd/winbindd_list_users.c:128(winbindd_list_users_done)
> > 
> > 
> >       Domain EXAMPLE returned 0 users
> > 
> > 
> >     [2016/04/19 15:03:29.418180, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >    
../source3/winbindd/winbindd_list_users.c:134(winbindd_list_users_done)
> > 
> > 
> >       List_users for domain EXAMPLE failed
> > 
> > 
> >     [2016/04/19 15:03:29.418187, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd.c:787(wb_request_done)
> > 
> > 
> >       wb_request_done[3666:LIST_USERS]: NT_STATUS_OK
> > 
> > 
> >     [2016/04/19 15:03:29.418206, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >    
../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> > 
> > 
> >       winbind_client_response_written[3666:LIST_USERS]: delivered
> >     response to client
> > 
> > 
> >     [2016/04/19 15:03:29.420295,  6, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd.c:957(winbind_client_request_read)
> > 
> > 
> >       closing socket 28, client exited
> > 
> > 
> >     [2016/04/19 15:04:00.414647, 10, pid=3634, effective(0, 0),
real(0,
> >     0)] ../source3/lib/messages.c:252(messaging_recv_cb)
> > 
> > 
> >       messaging_recv_cb: Received message 0x40b len 8 (num_fds:0) from
> >     3635
> > 
> > 
> >     [2016/04/19 15:04:00.414669, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd_cm.c:384(winbind_msg_domain_online)
> > 
> > 
> >       Domain EXAMPLE is marked as online now.
> > 
> > 
> >     
> > 
> >       Partial log output after "getent passwd" -
> >           /var/log/samba/winbind.log (the local users get displayed,
> >           domain users - do not):
> > 
> > 
> >     
> > 
> > 
> >     [2016/04/19 15:04:41.367195, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd.c:725(process_request)
> > 
> > 
> >       process_request: Handling async request 3673:GETPWENT
> > 
> > 
> >     [2016/04/19 15:04:41.367208,  3, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd_getpwent.c:50(winbindd_getpwent_send)
> > 
> > 
> >       [ 3673]: getpwent
> > 
> > 
> >     [2016/04/19 15:04:41.367307,  1, pid=3634, effective(0, 0),
real(0,
> >     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > 
> > 
> >            wbint_QueryUserList: struct wbint_QueryUserList
> > 
> > 
> >               in: struct wbint_QueryUserList
> > 
> > 
> >     [2016/04/19 15:04:41.367621,  1, pid=3634, effective(0, 0),
real(0,
> >     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > 
> > 
> >            wbint_QueryUserList: struct wbint_QueryUserList
> > 
> > 
> >               out: struct wbint_QueryUserList
> > 
> > 
> >                   users                    : *
> > 
> > 
> >                       users: struct wbint_userinfos
> > 
> > 
> >                           num_userinfos            : 0x00000000 (0)
> > 
> > 
> >                           userinfos: ARRAY(0)
> > 
> > 
> >                   result                   : NT_STATUS_OK
> > 
> > 
> >     [2016/04/19 15:04:41.367652, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >    
../source3/winbindd/wb_query_user_list.c:69(wb_query_user_list_done)
> > 
> > 
> >       dcerpc_wbint_QueryUserList returned 0 users
> > 
> > 
> >     [2016/04/19 15:04:41.367661,  1, pid=3634, effective(0, 0),
real(0,
> >     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > 
> > 
> >            wbint_QueryUserList: struct wbint_QueryUserList
> > 
> > 
> >               in: struct wbint_QueryUserList
> > 
> > 
> >     [2016/04/19 15:04:41.367680,  1, pid=3634, effective(0, 0),
real(0,
> >     0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
> > 
> > 
> >            wbint_QueryUserList: struct wbint_QueryUserList
> > 
> > 
> >               out: struct wbint_QueryUserList
> > 
> > 
> >                   users                    : *
> > 
> > 
> >                       users: struct wbint_userinfos
> > 
> > 
> >                           num_userinfos            : 0x00000000 (0)
> > 
> > 
> >                           userinfos: ARRAY(0)
> > 
> > 
> >                   result                   : NT_STATUS_IO_TIMEOUT
> > 
> > 
> >     [2016/04/19 15:04:41.367700, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/wb_next_pwent.c:109(wb_next_pwent_fetch_done)
> > 
> > 
> >       query_user_list for domain EXAMPLE returned NT_STATUS_IO_TIMEOUT
> > 
> > 
> >     [2016/04/19 15:04:41.367707, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd_getpwent.c:95(winbindd_getpwent_done)
> > 
> > 
> >       winbindd_getpwent_done: done with 0 users
> > 
> > 
> >     [2016/04/19 15:04:41.367712, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd.c:787(wb_request_done)
> > 
> > 
> >       wb_request_done[3673:GETPWENT]: NT_STATUS_NO_MORE_ENTRIES
> > 
> > 
> >     [2016/04/19 15:04:41.367726, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >    
../source3/winbindd/winbindd.c:851(winbind_client_response_written)
> > 
> > 
> >       winbind_client_response_written[3673:GETPWENT]: delivered
response
> >     to client
> > 
> > 
> >     [2016/04/19 15:04:41.367900, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd.c:725(process_request)
> > 
> > 
> >       process_request: Handling async request 3673:ENDPWENT
> > 
> > 
> >     [2016/04/19 15:04:41.367916, 10, pid=3634, effective(0, 0),
real(0,
> >     0), class=winbind]
> >     ../source3/winbindd/winbindd.c:787(wb_request_done)
> > 
> > 
> >       wb_request_done[3673:ENDPWENT]: NT_STATUS_OK
> > 
> > 
> >     
> > 
> > 
> >     I think that the issue is similar to the issues described by
L.P.H.
> >     van Belle and Luca Bertoncello.
> > 
> > 
> >     
> > 
> > 
> >     The Domain Controllers are MS Windows Server 2012 R2, AD Scheme is
> >     2012.
> > 
> > 
> >     
> > 
> > 
> >     Any ideas on how to solve this?
> > 
> > 
> >     
> > 
> > 
> >     Thanks,
> > 
> > 
> >     Dimitar
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> > 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

Reasonably Related Threads

Search for more seemingly similar threads

samba - Apr 2016 - wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10

[Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10

[Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10

[Samba] wbinfo -u, wbinfo -g not working after samba update from 4.2.3 to 4.2.10

Reasonably Related Threads