samba - Sep 2018 - winbindd crashing -- how to auto-heal?

On Mon, 3 Sep 2018 15:37:03 +0200
Luca Olivetti via samba <samba at lists.samba.org> wrote:
> El 3/9/18 a les 15:23, Robert Marcano via samba ha escrit:
> 
> >>
> >> I run this cron job every minute. Winbind usually crashes once or 
> >> twice a day
> >>
> >> #!/bin/bash
> >> getent group | grep -q 513 && exit 0
> >> echo "restarting winbind"
> >> systemctl restart winbind
> > 
> > If the failure is a full daemon crash and not some kind of internal 
> > failure, you can edit the service unit file (systemd) and add a
> > restart mode
> > 
> > # systemctl edit winbind
> > 
> >    [Service]
> >    Restart=on-failure
> > 
> 
> In my case the daemon doesn't crash, it just stops resolving (some)
> groups. In any case the above check covers both cases.
> 
The OP's winbind isn't crashing either, he is running it as a single
instance. 

Why does your winbind stop resolving groups ?
Is it always the same groups ?
How are you running Samba ?

Rowland

El 3/9/18 a les 15:53, Rowland Penny via samba ha escrit:
> 
> Why does your winbind stop resolving groups ?
If only I knew....
> Is it always the same groups ?
at least "domain users" always fails, at the same I cannot sudo with
my
password (stored in AD). At that point I have to login using local root. 
But that was before I put a plaster on it ;-)

> How are you running Samba ?
I just run winbind, with this distro provided service unit (which, BTW, 
references a $WINBINDOPTIONS that isn't defined anywhere, but since I 
don't need any special option that's fine)

[Unit]
Description=Samba Winbind Daemon
After=syslog.target network.target nmb.service

[Service]
Environment=KRB5CCNAME=FILE:/run/samba/krb5cc_samba
Type=notify
NotifyAccess=all
PIDFile=/run/winbindd.pid
EnvironmentFile=-/etc/sysconfig/samba
ExecStart=/usr/sbin/winbindd "$WINBINDOPTIONS"
ExecReload=/usr/bin/kill -HUP $MAINPID
LimitCORE=infinity

[Install]
WantedBy=multi-user.target


$ systemctl status winbind
● winbind.service - Samba Winbind Daemon
    Loaded: loaded (/usr/lib/systemd/system/winbind.service; enabled; 
vendor preset: enabled)
    Active: active (running) since dg 2018-09-02 01:01:04 CEST; 1 day 
15h ago
  Main PID: 19901 (winbindd)
    Status: "winbindd: ready to serve connections..."
    CGroup: /system.slice/winbind.service
            ├─19901 /usr/sbin/winbindd
            ├─19902 /usr/sbin/winbindd
            ├─19909 /usr/sbin/winbindd
            ├─19911 /usr/sbin/winbindd
            └─19912 /usr/sbin/winbindd


Bye
-- 
Luca Olivetti
Wetron Automation Technology http://www.wetron.es/
Tel. +34 93 5883004 (Ext.3010)  Fax +34 93 5883007

El 3/9/18 a les 16:34, Luca Olivetti via samba ha escrit:
> 
> I just run winbind, with this distro provided service unit (which, BTW, 
> references a $WINBINDOPTIONS that isn't defined anywhere, but since I 
> don't need any special option that's fine)
Silly me, I dind't notice the

   EnvironmentFile=-/etc/sysconfig/samba

line.

There WINBINDOPTIONS is defined as an empty string.

Bye

-- 
Luca Olivetti
Wetron Automation Technology http://www.wetron.es/
Tel. +34 93 5883004 (Ext.3010)  Fax +34 93 5883007