thr3ads.net - samba - [Samba] winbind : suspend nightmare [Nov 2019]

If this information is useful, please help other people find it:
Share via:

Jon Gerdes

2019-Oct-24 23:33 UTC

[Samba] winbind : suspend nightmare

On Wed, 2019-10-23 at 22:21 -0700, Jeremy Allison wrote:> On Wed, Oct 23, 2019 at 11:58:33PM +0000, Jon Gerdes wrote:
> > winbind has a concept of offline and online but I don't know what
> > that
> > is, nor how nss works with it.  I've tried using smbcontrol to
tell
> > winbind it is offline or online but that does not seem to work.
> > Restarting winbind normally gets my account working again. If I had
> > to
> > guess, then offline and online mean "network available"
(layer 2/3)
> > and
> > not "AD available" (layer 3/4)
> 
> I implemented the 'winbind offline' code many years ago
> whilst working for SuSE to cover this exact use case.
> 
> It detects when it can't contact a DC and puts itself
> into the 'offline' mode, which means serve logins out
> of local cache. It should do this for whatever reason
> when it can't talk to a DC (network fail, DC not
> found etc. etc.).
> 
> On startup if winbind can't talk to a DC it sets
> a retry timer to go off every 10 seconds to try
> and re-connect to the DC. It keeps that timeout
> until it does contact a DC, when it resets the
> reconnect timer to be 30 seconds. If it loses
> connection to the DC after it has once made
> connection it puts itself in offline mode and
> then retries every 30 seconds.
> 
> The long (30) second timeout can be changed
> by setting the parameter:
> 
> winbind reconnect delay = X.
> 
> Hope this helps !
> 
> Jeremy.
Now I've had a chance to think about this and your notes, the way ahead
is looking clearer to me.  As you say, your code was written years ago
in the days when sysvinit was boss (I was using openrc back then as
well as sysvinit.)

My only modern use case is systemd and (probably) NetworkManager.  My
initial effort is going to be:

* System suspends to RAM or disc - shutdown the winbind service
* System wakes from RAM or disc - start winbind service

I initially thought to make winbind depend on network which will work
when net is available but delay or break an offline logon when net is
not available.

Windows seems to generally get the ogin experience right in most cases
but then MS gets to write all the code and declare all the APIs and
they get to break things at will for a laugh.  Given where Unixy stuff
came from and where X Windows and all the other gear in our preferred
OS started from, it is a bloody miracle that anything hangs together
(no it's not - we have some damn fine engineers working on our gear).

This all might all sound a bit naff to most people but the login
experience on a roaming device is really, really hard to get right.

wifi might need a login or a button click - Windows is a bit shit here.
You cannot accept a wifi arrangement on Win10 before login.  That means
your VPN has not started up (no trusted network) and that means you
have not authenticated yourself to your domain - you can only do cached
creds.

So, Mr A: Are you able to reliably login to a Linux powered laptop with
an AD mediated account?  I have to employ a few workarounds for several
scenarios.  wifi on/off, VPN on/off, wired vs wifi, IPv6 vs IPv4 are
some of the considerations.

Could I request you look at your winbind on/offline code with a modern
viewpoint.  I suspect you need to require the environment to tell
winbind what is happening to it rather than deploying a few randomly
chosen timers.

Cheers
Jon

Prunk Dump

2019-Oct-25 09:42 UTC

head link

[Samba] winbind : suspend nightmare

Hi all !

Jeremy, here my complete logs about my DHCPDISCOVER problem. It seems
there is a dhclient bug that close the connection during a small
amount of time during DHCPDISCOVER after suspend.

I understand now why samba react exactly when DHCPDISCOVER is
launched. This is because there is an NTP dhclient hook that query for
the "ntp" user id. So as winbind is used for nsswitch this make a
request to winbind exactly at the same time than DHCPDISCOVER. And so
exactly when there is a tittle lost of connectivity.

But I don't know why, sometimes winbind stay in this state. And don't
retry (or couldn't) reconnect to the server. Il need to reboot, or to
restart winbind, or sometimes "wbinfo -g" solve the problem. So it
seems there is also a problem in winbind.

So. Here my syslog. Note :
-> a cron job is launched at 11:45:01 as root
-> ntp is restarted at 11:46:15
-> DHCP discover start at 11:46:15 at end at 11:46:16

--------- syslog ---------
11:45:01 c501-02 CRON[2726]: (root) CMD (...)cation at wine/wine/  /wine)
11:46:15 c501-02 ntpd[670]: ntpd exiting on signal 15 (Terminated)
11:46:15 c501-02 systemd[1]: Stopping Network Time Service...
11:46:15 c501-02 systemd[1]: ntp.service: Succeeded.
11:46:15 c501-02 systemd[1]: Stopped Network Time Service.
11:46:15 c501-02 systemd[1]: Starting Network Time Service...
11:46:15 c501-02 ntpd[2774]: ntpd 4.2.8p12 at 1.3728-o (1): Starting
11:46:15 c501-02 ntpd[2774]: Command line: /usr/sbin/ntpd -p
/var/run/ntpd.pid -g -u 104:110
11:46:15 c501-02 systemd[1]: Started Network Time Service.
11:46:15 c501-02 ntpd[2780]: proto: precision = 0.045 usec (-24)
11:46:15 c501-02 ntpd[2780]: kernel reports TIME_ERROR: 0x2041: Clock
Unsynchronized
11:46:15 c501-02 ntpd[2780]: kernel reports TIME_ERROR: 0x2041: Clock
Unsynchronized
11:46:15 c501-02 dhclient[521]: DHCPDISCOVER on eno1 to
255.255.255.255 port 67 interval 6
11:46:16 c501-02 dhclient[521]: DHCPOFFER of 172.16.107.37 from 172.16.0.30
11:46:16 c501-02 dhclient[521]: DHCPREQUEST for 172.16.107.37 on eno1
to 255.255.255.255 port 67
11:46:16 c501-02 dhclient[521]: DHCPACK of 172.16.107.37 from 172.16.0.30
11:46:16 c501-02 systemd[1]: Reloading Samba SMB Daemon.
11:46:16 c501-02 systemd[1]: Reloaded Samba SMB Daemon.
11:46:16 c501-02 ntpd[2780]: ntpd exiting on signal 15 (Terminated)
11:46:16 c501-02 systemd[1]: Stopping Network Time Service...
11:46:16 c501-02 systemd[1]: ntp.service: Succeeded.
11:46:16 c501-02 systemd[1]: Stopped Network Time Service.
11:46:16 c501-02 systemd[1]: Starting Network Time Service...
11:46:16 c501-02 ntpd[2848]: ntpd 4.2.8p12 at 1.3728-o (1): Starting
11:46:16 c501-02 ntpd[2848]: Command line: /usr/sbin/ntpd -p
/var/run/ntpd.pid -g -c /run/ntp.conf.dhcp -u 104:110
11:46:16 c501-02 systemd[1]: Started Network Time Service.
11:46:16 c501-02 ntpd[2854]: kernel reports TIME_ERROR: 0x2041: Clock
Unsynchronized
11:46:16 c501-02 ntpd[2854]: kernel reports TIME_ERROR: 0x2041: Clock
Unsynchronized
11:46:16 c501-02 dhclient[521]: bound to 172.16.107.37 -- renewal in
12638 seconds.
-------------------------------


Now the winbind log. Note :
-> the resolution of "root" at start, caused by the cron job
-> the resolution of "ntp" caused by the ntp service restart. This
is
why samba start to establish the connection. I don't know why it don't
try for "root".
-> between 11:46:15 and 11:46:16 there is many NT_STATUS_CONNECTION_REFUSED
-> at 11:46:45 (30 seconds later) the connection seems to works

--------- log.wb-SAMDOM ---------
11:45:01 string_to_sid: SID  is not in a valid format
11:45:01 msrpc_name_to_sid: name=SAMDOM\ROOT
11:45:01 name_to_sid [rpc] SAMDOM\ROOT for domain SAMDOM
11:45:02 string_to_sid: SID  is not in a valid format
11:45:02 msrpc_name_to_sid: name=SAMDOM\ROOT
11:45:02 name_to_sid [rpc] SAMDOM\ROOT for domain SAMDOM
11:46:15 msrpc_name_to_sid: name=SAMDOM\NTP
11:46:15 name_to_sid [rpc] SAMDOM\NTP for domain SAMDOM
11:46:15 connection_ok: Connection to fichdc01.samdom.com for domain
SAMDOM is not connected
11:46:15 Connecting to 172.16.0.30 at port 445
11:46:15 get_dc_list: preferred server list: ", *"
11:46:15 dns_send_req: Failed to resolve
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samdom.com
(Connexion refus?e)
11:46:15 ads_dns_lookup_srv: Failed to send DNS query
(NT_STATUS_CONNECTION_REFUSED)
11:46:15 get_sorted_dc_list: no server for name samdom.com available
in site Default-First-Site-Name, fallback to all servers
11:46:15 get_dc_list: preferred server list: ", *"
11:46:15 ads_dns_lookup_srv: Failed to send DNS query
(NT_STATUS_CONNECTION_REFUSED)
11:46:15 ads_find_dc: failed to find a valid DC on our site
(Default-First-Site-Name), Trying to find another DC for realm
'samdom.com' (domain '')
11:46:15 get_dc_list: preferred server list: ", *"
11:46:15 ads_dns_lookup_srv: Failed to send DNS query
(NT_STATUS_CONNECTION_REFUSED)
11:46:15 ads_find_dc: name resolution for realm 'samdom.com' (domain
'') failed: NT_STATUS_NO_LOGON_SERVERS
11:46:15 get_dc_list: preferred server list: ", *"
11:46:15 resolve_lmhosts: Attempting lmhosts lookup for name SAMDOM<0x1c>
11:46:15 resolve_wins: WINS server resolution selected and no WINS
servers listed.
11:46:15 Could not look up dc's for domain SAMDOM
11:46:15 get_dc_list: preferred server list: ", *"
11:46:15 ads_dns_lookup_srv: Failed to send DNS query
(NT_STATUS_CONNECTION_REFUSED)
11:46:15 get_sorted_dc_list: no server for name samdom.com available
in site Default-First-Site-Name, fallback to all servers
11:46:15 get_dc_list: preferred server list: ", *"
11:46:15 ads_dns_lookup_srv: Failed to send DNS query
(NT_STATUS_CONNECTION_REFUSED)
11:46:15 get_dc_list: preferred server list: ", *"
11:46:15 ads_dns_lookup_srv: Failed to send DNS query
(NT_STATUS_CONNECTION_REFUSED)
11:46:15 get_dc_list: preferred server list: ", *"
11:46:15 resolve_lmhosts: Attempting lmhosts lookup for name SAMDOM<0x1c>
11:46:15 resolve_wins: WINS server resolution selected and no WINS
servers listed.
11:46:15 get_dc_list: preferred server list: ", *"
11:46:15 ads_dns_lookup_srv: Failed to send DNS query
(NT_STATUS_CONNECTION_REFUSED)
11:46:15 msrpc_name_to_sid: name=SAMDOM\NTP
11:46:15 name_to_sid [rpc] SAMDOM\NTP for domain SAMDOM
11:46:16 msrpc_name_to_sid: name=SAMDOM\NTP
11:46:16 name_to_sid [rpc] SAMDOM\NTP for domain SAMDOM
11:46:16 msrpc_name_to_sid: name=SAMDOM\NTP
11:46:16 name_to_sid [rpc] SAMDOM\NTP for domain SAMDOM
11:46:45 connection_ok: Connection to fichdc01.samdom.com for domain
SAMDOM is not connected
11:46:45 Connecting to 172.16.0.30 at port 445
11:46:45 ldb_wrap open of secrets.ldb
11:46:45 got OID=1.2.840.48018.1.2.2
-------------------------------


Now the strace of windbind. Note :
-> resolution of "root" don't use any connection
-> when resolving "ntp" the "connect" syscall give
ENETUNREACH, so
there is really no internet connectivity
-> winbind try two more times and get ENETUNREACH
-> strangely after winbind write error messages without trying to reconnect
-> at 11:46:45 the connect success with EINPROGRESS

--------- strace winbind ---------
11:45:01 read(26,
"0\10\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"...,
2096) = 2096
11:45:01 read(26,
"\10\0\0\0\0\0\0\0\10\0\0\0SAMDOM\0\5\0\0\0\0\0\0\0\5\0\0\0"..., 44)
44
11:45:01 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:45:01 geteuid()                      = 0
11:45:01 write(14, "[2019/10/24 11:45:01.727727,  3]"..., 86) = 86
11:45:01 geteuid()                      = 0
11:45:01 write(14, "  string_to_sid: SID  is not in "..., 47) = 47
11:45:01 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:45:01 geteuid()                      = 0
11:45:01 write(14, "[2019/10/24 11:45:01.728111,  3]"..., 93) = 93
11:45:01 geteuid()                      = 0
11:45:01 write(14, "  msrpc_name_to_sid: name=FICHLA"..., 39) = 39
11:45:01 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:45:01 geteuid()                      = 0
11:45:01 write(14, "[2019/10/24 11:45:01.728371,  3]"..., 93) = 93
11:45:01 geteuid()                      = 0
11:45:01 write(14, "  name_to_sid [rpc] SAMDOM\\ROOT"..., 52) = 52
11:45:01 epoll_create(64)               = 15
11:45:01 fcntl(15, F_GETFD)             = 0
11:45:01 fcntl(15, F_SETFD, FD_CLOEXEC) = 0
11:45:01 getpid()                       = 2566
11:45:01 read(6, "\310\374a\257\325'\367P", 8) = 8
11:45:01 writev(29,
[{iov_base="\5\0\0\3\20\0\0\0\250\08\0'\0\0\0L\0\0\0\0\0M\0\357\366=j\356UO\373"...,
iov_len=168}], 1) = 168
11:45:01 ioctl(29, FIONREAD, [0])       = 0
11:45:01 getsockopt(29, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
11:45:01 getpid()                       = 2566
11:45:01 epoll_ctl(15, EPOLL_CTL_ADD, 29, {EPOLLIN|EPOLLERR|EPOLLHUP,
{u32=3646347376, u64=94376962742384}}) = 0
11:45:01 getpid()                       = 2566
11:45:01 epoll_wait(15, [{EPOLLIN, {u32=3646347376,
u64=94376962742384}}], 1, 35000) = 1
11:45:01 readv(29, [{iov_base="\5", iov_len=1}], 1) = 1
11:45:01 ioctl(29, FIONREAD, [215])     = 0
11:45:01 readv(29, [{iov_base="\0\2\3\20\0\0\0\330\08\0'\0\0\0",
iov_len=15}], 1) = 15
11:45:01 ioctl(29, FIONREAD, [200])     = 0
11:45:01 getpid()                       = 2566
11:45:01 epoll_wait(15, [{EPOLLIN, {u32=3646347376,
u64=94376962742384}}], 1, 35000) = 1
11:45:01 readv(29,
[{iov_base="|\0\0\0\0\0\0\0xS2\356\274\10\225\6jr\22>\347\0\272\352\205\370\365~\226\213,{"...,
iov_len=200}], 1) = 200
11:45:01 close(15)                      = 0
11:45:01 fcntl(22, F_SETLK, {l_type=F_WRLCK, l_whence=SEEK_SET,
l_start=8, l_len=1}) = 0
11:45:01 fcntl(22, F_SETLK, {l_type=F_RDLCK, l_whence=SEEK_SET,
l_start=168, l_len=40000}) = 0
11:45:01 fcntl(22, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
l_start=40168, l_len=0}) = 0
11:45:01 fstat(22, {st_mode=S_IFREG|0644, st_size=1118208, ...}) = 0
11:45:01 munmap(0x7fee78e15000, 1118208) = 0
11:45:01 mmap(NULL, 1118208, PROT_READ|PROT_WRITE, MAP_SHARED, 22, 0)
= 0x7fee78e15000
11:45:01 fcntl(23, F_SETLK, {l_type=F_WRLCK, l_whence=SEEK_SET,
l_start=40168, l_len=0}) = 0
11:45:01 fcntl(23, F_SETLK, {l_type=F_WRLCK, l_whence=SEEK_SET,
l_start=8, l_len=1}) = 0
11:45:01 fcntl(23, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=8, l_len=1}) = 0
11:45:01 fcntl(22, F_SETLKW, {l_type=F_WRLCK, l_whence=SEEK_SET,
l_start=168, l_len=0}) = 0
11:45:01 fcntl(22, F_SETLKW, {l_type=F_WRLCK, l_whence=SEEK_SET,
l_start=0, l_len=1}) = 0
11:45:01 fdatasync(22)                  = 0
11:45:01 msync(0x7fee78e26000, 4132, MS_SYNC) = 0
11:45:01 fdatasync(22)                  = 0
11:45:01 msync(0x7fee78e26000, 24, MS_SYNC) = 0
11:45:01 fdatasync(22)                  = 0
11:45:01 msync(0x7fee78e15000, 1118208, MS_SYNC) = 0
11:45:01 utime("/var/cache/samba/gencache.tdb", NULL) = 0
11:45:01 fdatasync(22)                  = 0
11:45:01 msync(0x7fee78e26000, 24, MS_SYNC) = 0
11:45:01 fcntl(22, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=168, l_len=0}) = 0
11:45:01 fcntl(22, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=8, l_len=1}) = 0
11:45:01 fcntl(22, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=0, l_len=1}) = 0
11:45:01 fcntl(23, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=40168, l_len=0}) = 0
11:45:01 writev(26,
[{iov_base="\270\17\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"...,
iov_len=4008}, {iov_base="\0\0\0\0\0\0\0\0\0\0\0\0s\0\0\300",
iov_len=16}], 2) = 4024
11:45:01 getpid()                       = 2566
11:45:01 epoll_wait(3, [{EPOLLIN, {u32=3645998768,
u64=94376962393776}}], 1, 30000) = 1
11:45:02 read(26,
"0\10\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"...,
2096) = 2096
11:45:02 read(26,
"\10\0\0\0\0\0\0\0\10\0\0\0SAMDOM\0\5\0\0\0\0\0\0\0\5\0\0\0"..., 44)
44
11:45:02 fcntl(22, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
l_start=17756, l_len=1}) = 0
11:45:02 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:45:02 geteuid()                      = 0
11:45:02 write(14, "[2019/10/24 11:45:02.319391,  3]"..., 86) = 86
11:45:02 geteuid()                      = 0
11:45:02 write(14, "  string_to_sid: SID  is not in "..., 47) = 47
11:45:02 fcntl(22, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=17756, l_len=1}) = 0
11:45:02 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:45:02 geteuid()                      = 0
11:45:02 write(14, "[2019/10/24 11:45:02.319722,  3]"..., 93) = 93
11:45:02 geteuid()                      = 0
11:45:02 write(14, "  msrpc_name_to_sid: name=FICHLA"..., 39) = 39
11:45:02 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:45:02 geteuid()                      = 0
11:45:02 write(14, "[2019/10/24 11:45:02.319935,  3]"..., 93) = 93
11:45:02 geteuid()                      = 0
11:45:02 write(14, "  name_to_sid [rpc] SAMDOM\\ROOT"..., 52) = 52
11:45:02 epoll_create(64)               = 15
11:45:02 fcntl(15, F_GETFD)             = 0
11:45:02 fcntl(15, F_SETFD, FD_CLOEXEC) = 0
11:45:02 getpid()                       = 2566
11:45:02 read(6, "rP\226\330\21N\340@", 8) = 8
11:45:02 writev(29,
[{iov_base="\5\0\0\3\20\0\0\0\250\08\0(\0\0\0L\0\0\0\0\0M\0\376t\375p50I\367"...,
iov_len=168}], 1) = 168
11:45:02 ioctl(29, FIONREAD, [0])       = 0
11:45:02 getsockopt(29, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
11:45:02 getpid()                       = 2566
11:45:02 epoll_ctl(15, EPOLL_CTL_ADD, 29, {EPOLLIN|EPOLLERR|EPOLLHUP,
{u32=3646341840, u64=94376962736848}}) = 0
11:45:02 getpid()                       = 2566
11:45:02 epoll_wait(15, [{EPOLLIN, {u32=3646341840,
u64=94376962736848}}], 1, 35000) = 1
11:45:02 readv(29, [{iov_base="\5", iov_len=1}], 1) = 1
11:45:02 ioctl(29, FIONREAD, [215])     = 0
11:45:02 readv(29, [{iov_base="\0\2\3\20\0\0\0\330\08\0(\0\0\0",
iov_len=15}], 1) = 15
11:45:02 ioctl(29, FIONREAD, [200])     = 0
11:45:02 getpid()                       = 2566
11:45:02 epoll_wait(15, [{EPOLLIN, {u32=3646341840,
u64=94376962736848}}], 1, 35000) = 1
11:45:02 readv(29,
[{iov_base="|\0\0\0\0\0\0\0\3611f\1\213\237\211\320\2\311\337\"\16\360\2066o\24\311\210+\271!\374"...,
iov_len=200}], 1) = 200
11:45:02 close(15)                      = 0
11:45:02 writev(26,
[{iov_base="\270\17\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"...,
iov_len=4008}, {iov_base="\0\0\0\0\0\0\0\0\0\0\0\0s\0\0\300",
iov_len=16}], 2) = 4024
11:45:02 getpid()                       = 2566
11:45:02 epoll_wait(3, [], 1, 30000)    = 0
11:45:32 getpid()                       = 2566
11:45:32 epoll_wait(3, [], 1, 30000)    = 0
11:46:02 getpid()                       = 2566
11:46:02 epoll_wait(3, [{EPOLLIN, {u32=3645912512,
u64=94376962307520}}], 1, 30000) = 1
11:46:15 recvmsg(7, {msg_name=NULL, msg_namelen=0,
msg_iov=[{iov_base="\0\0\0\0\0\0\0\0\6\n\0\0\0\0\0\0\0\0\0\0\377\377\377\377\331\350\253sS\32n\276"...,
iov_len=1024}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 74
11:46:15 close(24)                      = 0
11:46:15 getpid()                       = 2566
11:46:15 epoll_wait(3, [{EPOLLIN, {u32=3645998768,
u64=94376962393776}}], 1, 30000) = 1
11:46:15 read(26,
"0\10\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"...,
2096) = 2096
11:46:15 read(26,
"\10\0\0\0\0\0\0\0\10\0\0\0SAMDOM\0\4\0\0\0\0\0\0\0\4\0\0\0"..., 40)
40
11:46:15 fcntl(22, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
l_start=16156, l_len=1}) = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=16156, l_len=1}) = 0
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.179786,  3]"..., 93) = 93
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  msrpc_name_to_sid: name=FICHLA"..., 38) = 38
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.179938,  3]"..., 93) = 93
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  name_to_sid [rpc] SAMDOM\\NTP "..., 51) = 51
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.180117,  3]"..., 87) = 87
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  connection_ok: Connection to f"..., 116) = 116
11:46:15 close(29)                      = 0
11:46:15 close(28)                      = 0
11:46:15 munmap(0x7fee789e0000, 16384)  = 0
11:46:15 munmap(0x7fee78b1f000, 8192)   = 0
11:46:15 close(25)                      = 0
11:46:15 epoll_create(64)               = 15
11:46:15 fcntl(15, F_GETFD)             = 0
11:46:15 fcntl(15, F_SETFD, FD_CLOEXEC) = 0
11:46:15 getpid()                       = 2566
11:46:15 close(15)                      = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
l_start=15792, l_len=1}) = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=15792, l_len=1}) = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
l_start=6036, l_len=1}) = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=6036, l_len=1}) = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
l_start=21856, l_len=1}) = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=21856, l_len=1}) = 0
11:46:15 epoll_create(64)               = 15
11:46:15 fcntl(15, F_GETFD)             = 0
11:46:15 fcntl(15, F_SETFD, FD_CLOEXEC) = 0
11:46:15 getpid()                       = 2566
11:46:15 socket(AF_INET, SOCK_STREAM, IPPROTO_IP) = 24
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.181102,  3]"..., 86) = 86
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  Connecting to 172.16.0.30 at p"..., 40) = 40
11:46:15 fcntl(24, F_GETFL)             = 0x2 (flags O_RDWR)
11:46:15 fcntl(24, F_GETFL)             = 0x2 (flags O_RDWR)
11:46:15 fcntl(24, F_SETFL, O_RDWR|O_NONBLOCK) = 0
11:46:15 connect(24, {sa_family=AF_INET, sin_port=htons(445),
sin_addr=inet_addr("172.16.0.30")}, 16) = -1 ENETUNREACH (Le r?seau
n'est pas accessible)
11:46:15 fcntl(24, F_SETFL, O_RDWR)     = 0
11:46:15 close(24)                      = 0
11:46:15 close(15)                      = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
l_start=17580, l_len=1}) = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=17580, l_len=1}) = 0
11:46:15 clock_gettime(CLOCK_BOOTTIME, {tv_sec=89423, tv_nsec=665141400}) = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
l_start=21788, l_len=1}) = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=21788, l_len=1}) = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
l_start=244, l_len=1}) = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=244, l_len=1}) = 0
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.181965,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  get_dc_list: preferred server "..., 44) = 44
11:46:15 fcntl(22, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
l_start=27976, l_len=1}) = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=27976, l_len=1}) = 0
11:46:15 clock_gettime(CLOCK_BOOTTIME, {tv_sec=89423, tv_nsec=665572372}) = 0
11:46:15 stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=118,
...}) = 0
11:46:15 socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 15
11:46:15 connect(15, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("172.16.0.30")}, 16) = -1 ENETUNREACH (Le r?seau
n'est pas accessible)
11:46:15 close(15)                      = 0
11:46:15 socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 15
11:46:15 connect(15, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("172.16.0.30")}, 16) = -1 ENETUNREACH (Le r?seau
n'est pas accessible)
11:46:15 close(15)                      = 0
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.182488,  3]"..., 75) = 75
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  dns_send_req: Failed to resolv"..., 147) = 147
11:46:15 clock_gettime(CLOCK_BOOTTIME, {tv_sec=89423, tv_nsec=666039014}) = 0
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.182712,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  ads_dns_lookup_srv: Failed to "..., 78) = 78
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.210652,  3]"..., 88) = 88
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  get_sorted_dc_list: no server "..., 148) = 148
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.211083,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  get_dc_list: preferred server "..., 44) = 44
11:46:15 clock_gettime(CLOCK_BOOTTIME, {tv_sec=89423, tv_nsec=694728143}) = 0
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.211397,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  ads_dns_lookup_srv: Failed to "..., 78) = 78
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.211625,  3]"..., 75) = 75
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  ads_find_dc: failed to find a "..., 170) = 170
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.211870,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  get_dc_list: preferred server "..., 44) = 44
11:46:15 clock_gettime(CLOCK_BOOTTIME, {tv_sec=89423, tv_nsec=695486886}) = 0
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.212155,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  ads_dns_lookup_srv: Failed to "..., 78) = 78
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.212380,  1]"..., 75) = 75
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  ads_find_dc: name resolution f"..., 130) = 130
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.212612,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  get_dc_list: preferred server "..., 44) = 44
11:46:15 fcntl(22, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
l_start=12696, l_len=1}) = 0
11:46:15 fcntl(22, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=12696, l_len=1}) = 0
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.212978,  3]"..., 95) = 95
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  resolve_lmhosts: Attempting lm"..., 68) = 68
11:46:15 openat(AT_FDCWD, "/etc/samba/lmhosts", O_RDONLY) = -1 ENOENT
(Aucun fichier ou dossier de ce type)
11:46:15 epoll_create(64)               = 15
11:46:15 fcntl(15, F_GETFD)             = 0
11:46:15 fcntl(15, F_SETFD, FD_CLOEXEC) = 0
11:46:15 getpid()                       = 2566
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.213467,  3]"..., 87) = 87
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  resolve_wins: WINS server reso"..., 76) = 76
11:46:15 close(15)                      = 0
11:46:15 epoll_create(64)               = 15
11:46:15 fcntl(15, F_GETFD)             = 0
11:46:15 fcntl(15, F_SETFD, FD_CLOEXEC) = 0
11:46:15 getpid()                       = 2566
11:46:15 close(15)                      = 0
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.213953,  3]"..., 83) = 83
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  Could not look up dc's for dom"..., 44) = 44
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 fstat(14, {st_mode=S_IFREG|0644, st_size=60896, ...}) = 0
11:46:15 write(14, "[2019/10/24 11:46:15.214204,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  get_dc_list: preferred server "..., 44) = 44
11:46:15 clock_gettime(CLOCK_BOOTTIME, {tv_sec=89423, tv_nsec=697873817}) = 0
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.214552,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  ads_dns_lookup_srv: Failed to "..., 78) = 78
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.215089,  3]"..., 88) = 88
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  get_sorted_dc_list: no server "..., 148) = 148
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.215324,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  get_dc_list: preferred server "..., 44) = 44
11:46:15 clock_gettime(CLOCK_BOOTTIME, {tv_sec=89423, tv_nsec=699003103}) = 0
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.215672,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  ads_dns_lookup_srv: Failed to "..., 78) = 78
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.215907,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  get_dc_list: preferred server "..., 44) = 44
11:46:15 clock_gettime(CLOCK_BOOTTIME, {tv_sec=89423, tv_nsec=699529097}) = 0
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.216197,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  ads_dns_lookup_srv: Failed to "..., 78) = 78
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.216427,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  get_dc_list: preferred server "..., 44) = 44
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.216674,  3]"..., 95) = 95
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  resolve_lmhosts: Attempting lm"..., 68) = 68
11:46:15 openat(AT_FDCWD, "/etc/samba/lmhosts", O_RDONLY) = -1 ENOENT
(Aucun fichier ou dossier de ce type)
11:46:15 epoll_create(64)               = 15
11:46:15 fcntl(15, F_GETFD)             = 0
11:46:15 fcntl(15, F_SETFD, FD_CLOEXEC) = 0
11:46:15 getpid()                       = 2566
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.217019,  3]"..., 87) = 87
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  resolve_wins: WINS server reso"..., 76) = 76
11:46:15 close(15)                      = 0
11:46:15 epoll_create(64)               = 15
11:46:15 fcntl(15, F_GETFD)             = 0
11:46:15 fcntl(15, F_SETFD, FD_CLOEXEC) = 0
11:46:15 getpid()                       = 2566
11:46:15 close(15)                      = 0
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.217376,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  get_dc_list: preferred server "..., 44) = 44
11:46:15 clock_gettime(CLOCK_BOOTTIME, {tv_sec=89423, tv_nsec=700915101}) = 0
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.217578,  3]"..., 81) = 81
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  ads_dns_lookup_srv: Failed to "..., 78) = 78
11:46:15 getppid()                      = 2553
11:46:15 getpid()                       = 2566
11:46:15 openat(AT_FDCWD, "/var/run/samba/msg.lock/2553",
O_RDONLY|O_NONBLOCK) = 15
11:46:15 pread64(15, "11361121723422961839\n", 24, 0) = 21
11:46:15 close(15)                      = 0
11:46:15 socket(AF_UNIX, SOCK_DGRAM, 0) = 15
11:46:15 connect(15, {sa_family=AF_UNIX,
sun_path="/var/lib/samba/private/msg.sock/2553"}, 110) = 0
11:46:15 fcntl(15, F_GETFL)             = 0x2 (flags O_RDWR)
11:46:15 fcntl(15, F_SETFL, O_RDWR|O_NONBLOCK) = 0
11:46:15 sendmsg(15, {msg_name=NULL, msg_namelen=0,
msg_iov=[{iov_base="\0\0\0\0\0\0\0\0", iov_len=8},
{iov_base="\371\t\0\0\0\0\0\0\0\0\0\0\377\377\377\377\257p\231~\3\320\252\235\6\n\0\0\0\0\0\0"...,
iov_len=52}, {iov_base="SAMDOM\0", iov_len=8}], msg_iovlen=3,
msg_controllen=0, msg_flags=0}, 0) = 68
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.218101,  3]"..., 93) = 93
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  msrpc_name_to_sid: name=FICHLA"..., 38) = 38
11:46:15 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:15 geteuid()                      = 0
11:46:15 write(14, "[2019/10/24 11:46:15.218376,  3]"..., 93) = 93
11:46:15 geteuid()                      = 0
11:46:15 write(14, "  name_to_sid [rpc] SAMDOM\\NTP "..., 51) = 51
11:46:15 getppid()                      = 2553
11:46:15 getpid()                       = 2566
11:46:15 openat(AT_FDCWD, "/var/run/samba/msg.lock/2553",
O_RDONLY|O_NONBLOCK) = 24
11:46:15 pread64(24, "11361121723422961839\n", 24, 0) = 21
11:46:15 close(24)                      = 0
11:46:15 sendmsg(15, {msg_name=NULL, msg_namelen=0,
msg_iov=[{iov_base="\0\0\0\0\0\0\0\0", iov_len=8},
{iov_base="\371\t\0\0\0\0\0\0\0\0\0\0\377\377\377\377\257p\231~\3\320\252\235\6\n\0\0\0\0\0\0"...,
iov_len=52}, {iov_base="SAMDOM\0", iov_len=8}], msg_iovlen=3,
msg_controllen=0, msg_flags=0}, 0) = 68
11:46:15 writev(26,
[{iov_base="\270\17\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"...,
iov_len=4008}, {iov_base="\0\0\0\0\0\0\0\0\0\0\0\0%\2\0\300",
iov_len=16}], 2) = 4024
11:46:15 getpid()                       = 2566
11:46:15 epoll_wait(3, [], 1, 1000)     = 0
11:46:16 close(15)                      = 0
11:46:16 getpid()                       = 2566
11:46:16 epoll_wait(3, [{EPOLLIN, {u32=3645912512,
u64=94376962307520}}], 1, 28999) = 1
11:46:16 recvmsg(7, {msg_name=NULL, msg_namelen=0,
msg_iov=[{iov_base="\0\0\0\0\0\0\0\0\6\n\0\0\0\0\0\0\0\0\0\0\377\377\377\377\331\350\253sS\32n\276"...,
iov_len=1024}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 60
11:46:16 getpid()                       = 2566
11:46:16 epoll_wait(3, [{EPOLLIN, {u32=3645998768,
u64=94376962393776}}], 1, 28989) = 1
11:46:16 read(26,
"0\10\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"...,
2096) = 2096
11:46:16 read(26,
"\10\0\0\0\0\0\0\0\10\0\0\0SAMDOM\0\4\0\0\0\0\0\0\0\4\0\0\0"..., 40)
40
11:46:16 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:16 geteuid()                      = 0
11:46:16 write(14, "[2019/10/24 11:46:16.529027,  3]"..., 93) = 93
11:46:16 geteuid()                      = 0
11:46:16 write(14, "  msrpc_name_to_sid: name=FICHLA"..., 38) = 38
11:46:16 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:16 geteuid()                      = 0
11:46:16 write(14, "[2019/10/24 11:46:16.529305,  3]"..., 93) = 93
11:46:16 geteuid()                      = 0
11:46:16 write(14, "  name_to_sid [rpc] SAMDOM\\NTP "..., 51) = 51
11:46:16 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:16 geteuid()                      = 0
11:46:16 write(14, "[2019/10/24 11:46:16.529509,  3]"..., 93) = 93
11:46:16 geteuid()                      = 0
11:46:16 write(14, "  msrpc_name_to_sid: name=FICHLA"..., 38) = 38
11:46:16 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:16 geteuid()                      = 0
11:46:16 write(14, "[2019/10/24 11:46:16.529713,  3]"..., 93) = 93
11:46:16 geteuid()                      = 0
11:46:16 write(14, "  name_to_sid [rpc] SAMDOM\\NTP "..., 51) = 51
11:46:16 writev(26,
[{iov_base="\270\17\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"...,
iov_len=4008}, {iov_base="\0\0\0\0\0\0\0\0\0\0\0\0003\2\0\300",
iov_len=16}], 2) = 4024
11:46:16 getpid()                       = 2566
11:46:16 epoll_wait(3, [], 1, 28689)    = 0
11:46:45 getpid()                       = 2566
11:46:45 kill(2555, 0)                  = -1 ESRCH (Aucun processus de ce type)
11:46:45 clone(strace: Process 2862 attached
11:46:45 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED,
si_pid=2862, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
11:46:45 wait4(-1, NULL, WNOHANG, NULL) = 2862
11:46:45 wait4(-1, NULL, WNOHANG, NULL) = -1 ECHILD (Aucun processus enfant)
11:46:45 rt_sigreturn({mask=[]})        = 3
11:46:45 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335,
...}) = 0
11:46:45 geteuid()                      = 0
11:46:45 write(14, "[2019/10/24 11:46:45.285970,  3]"..., 86) = 86
11:46:45 geteuid()                      = 0
11:46:45 write(14, "  Connecting to 172.16.0.30 at p"..., 40) = 40
11:46:45 fcntl(24, F_GETFL)             = 0x2 (flags O_RDWR)
11:46:45 fcntl(24, F_GETFL)             = 0x2 (flags O_RDWR)
11:46:45 fcntl(24, F_SETFL, O_RDWR|O_NONBLOCK) = 0
11:46:45 connect(24, {sa_family=AF_INET, sin_port=htons(445),
sin_addr=inet_addr("172.16.0.30")}, 16) = -1 EINPROGRESS (Op?ration
maintenant en cours)
11:46:45 getpid()                       = 2566
11:46:45 epoll_ctl(15, EPOLL_CTL_ADD, 24, {EPOLLOUT|EPOLLERR|EPOLLHUP,
{u32=3645969264, u64=94376962364272}}) = 0
11:46:45 getpid()                       = 2566
11:46:45 epoll_wait(15, [{EPOLLOUT, {u32=3645969264,
u64=94376962364272}}], 1, 10) = 1
11:46:45 getsockopt(24, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
11:46:45 getpid()                       = 2566
11:46:45 epoll_ctl(15, EPOLL_CTL_DEL, 24, 0x7fffa317bbc4) = 0
11:46:45 fcntl(24, F_SETFL, O_RDWR)     = 0
11:46:45 close(15)                      = 0
11:46:45 lstat("/var/run/samba", {st_mode=S_IFDIR|0755, st_size=420,
...}) = 0
11:46:45 openat(AT_FDCWD, "/var/run/samba/mutex.tdb", O_RDWR|O_CREAT,
0600) = 15
11:46:45 fcntl(15, F_GETFD)             = 0
11:46:45 fcntl(15, F_SETFD, FD_CLOEXEC) = 0
11:46:45 fcntl(15, F_SETLKW, {l_type=F_WRLCK, l_whence=SEEK_SET,
l_start=0, l_len=1}) = 0
11:46:45 fcntl(15, F_SETLK, {l_type=F_WRLCK, l_whence=SEEK_SET,
l_start=4, l_len=1}) = 0
11:46:45 fcntl(15, F_SETLKW, {l_type=F_WRLCK, l_whence=SEEK_SET,
l_start=168, l_len=0}) = 0
11:46:45 lseek(15, 0, SEEK_SET)         = 0
11:46:45 ftruncate(15, 0)               = 0
11:46:45 write(15, "TDB
file\n\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 696) = 696
11:46:45 fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=168, l_len=0}) = 0
11:46:45 lseek(15, 0, SEEK_SET)         = 0
11:46:45 read(15, "TDB
file\n\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 168) = 168
11:46:45 fstat(15, {st_mode=S_IFREG|0600, st_size=696, ...}) = 0
11:46:45 fstat(15, {st_mode=S_IFREG|0600, st_size=696, ...}) = 0
11:46:45 mmap(NULL, 696, PROT_READ|PROT_WRITE, MAP_SHARED, 15, 0) 0x7fee7b38c000
11:46:45 fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=4, l_len=1}) = 0
11:46:45 fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
l_start=4, l_len=1}) = 0
11:46:45 fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
l_start=0, l_len=1}) = 0
11:46:45 rt_sigaction(SIGALRM, {sa_handler=0x7fee7a66d070,
sa_mask=[ALRM], sa_flags=SA_RESTORER, sa_restorer=0x7fee7b35e730},
{sa_handler=SIG_IGN, sa_mask=[ALRM], sa_flags=SA_RESTORER,
sa_restorer=0x7fee7b35e730}, 8) = 0
11:46:45 alarm(40)                      = 0
11:46:45 fcntl(15, F_SETLKW, {l_type=F_WRLCK, l_whence=SEEK_SET,
l_start=200, l_len=1}) = 0
11:46:45 alarm(0)                       = 40
11:46:45 rt_sigaction(SIGALRM, {sa_handler=SIG_IGN, sa_mask=[ALRM],
sa_flags=SA_RESTORER, sa_restorer=0x7fee7b35e730},
{sa_handler=0x7fee7a66d070, sa_mask=[ALRM], sa_flags=SA_RESTORER,
sa_restorer=0x7fee7b35e730}, 8) = 0
11:46:45 read(6, "h\272/\26\276\364\2700\340\\]\372V\34j,", 16) = 16
11:46:45 geteuid()                      = 0
11:46:45 getuid()                       = 0
11:46:45 getsockname(24, {sa_family=AF_INET, sin_port=htons(53966),
sin_addr=inet_addr("172.16.107.37")}, [128->16]) = 0
11:46:45 getpeername(24, {sa_family=AF_INET, sin_port=htons(445),
sin_addr=inet_addr("172.16.0.30")}, [128->16]) = 0
11:46:45 getpid()                       = 2566
-------------------------------

Thanks jeremy if you have an idea !

Regards,

Baptiste.

Jeremy Allison

2019-Oct-25 16:24 UTC

head link

[Samba] winbind : suspend nightmare

On Thu, Oct 24, 2019 at 11:33:40PM +0000, Jon Gerdes via samba
wrote:> You cannot accept a wifi arrangement on Win10 before login.  That means
> your VPN has not started up (no trusted network) and that means you
> have not authenticated yourself to your domain - you can only do cached
> creds.
> 
> So, Mr A: Are you able to reliably login to a Linux powered laptop with
> an AD mediated account?  I have to employ a few workarounds for several
> scenarios.  wifi on/off, VPN on/off, wired vs wifi, IPv6 vs IPv4 are
> some of the considerations.
I haven't depended on a AD-DC for my network logons for
many years I'm afraid, so I've not had to depend on this :-).
> Could I request you look at your winbind on/offline code with a modern
> viewpoint.  I suspect you need to require the environment to tell
> winbind what is happening to it rather than deploying a few randomly
> chosen timers.
I still don't understand why having winbind probe for
network connectivity (DNS lookup) every 30 seconds once
it loses connectivity to the DC is the wrong thing to
do ?

What if there's a transient network outage ? We don't want
to have only external triggers to tell winbind to go on/offline,
why is the auto-detection not working ?

The "online" message can be sent also via smbcontrol as
a message directly to winbind, so I think we already
have the external tooling we need for this. I just don't
get why the internal probing isn't working for you.

Jon Gerdes

2019-Nov-09 23:40 UTC

head link

[Samba] winbind : suspend nightmare

(Sorry for delay - hols)

On Fri, 2019-10-25 at 09:24 -0700, Jeremy Allison wrote:> On Thu, Oct 24, 2019 at 11:33:40PM +0000, Jon Gerdes via samba wrote:
> I haven't depended on a AD-DC for my network logons for
> many years I'm afraid, so I've not had to depend on this :-).
Fair enough and I'd rather not either but this is my last outstanding
issue before Linux on the desktop takes over the world *cough*. 
Actually desktop is fine, it's laptops that give me gyp!
> I still don't understand why having winbind probe for
> network connectivity (DNS lookup) every 30 seconds once
> it loses connectivity to the DC is the wrong thing to
> do ?
I found the winbind reconnect delay = n parameter a while back and have
it set to 5.  I also have offline logins enabled and I don't think that
is working as I think it should

* Lift lid on laptop - it wakes up or whatever
* Can't unlock screen at ssdm prompt
* Switch to a console with a root prompt running already
* "id gerdesj" outputs user unknown (also wbinfo -u doesn't know
me)
* smbcontrol winbind offline and then online - no change
* systemctl restart winbind - id gerdesj works and off we trot

If I leave the box for ages (not precisely defined but more than a
minute) then everything will start working again. My home wifi
reconnects in a second or so.

I would expect that if AD was unavailable then the offline login stuff
would kick in instead as per a Windows box.  If I force winbind to
offline via smbcontrol, should I be able to login if offline logins are
enabled in smb.conf (winbind offline logon = yes)?

I am probably missing something fundamental here, somewhere.

Cheers
Jon

Maybe Matching Threads

Search for more apparently analagous threads

samba - Nov 2019 - winbind : suspend nightmare

[Samba] winbind : suspend nightmare

[Samba] winbind : suspend nightmare

[Samba] winbind : suspend nightmare

[Samba] winbind : suspend nightmare

Maybe Matching Threads