Bug 5754 - getting "out of memory" errors in winbindd log
Summary: getting "out of memory" errors in winbindd log
Status: NEW
Alias: None
Product: Samba 3.2
Classification: Unclassified
Component: Winbind (show other bugs)
Version: unspecified
Hardware: x64 Linux
: P3 major
Target Milestone: ---
Assignee: Michael Adam
QA Contact: Samba QA Contact
Depends on:
Reported: 2008-09-11 15:40 UTC by Marc Heckmann
Modified: 2009-08-06 09:05 UTC (History)
1 user (show)

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Marc Heckmann 2008-09-11 15:40:19 UTC
[NOTE: organization specific names such as DOMAIN & users replaced with dummy placeholder]

Using Samba 3.2.3 when doing something like "id -G DOMAIN+username" on a typical RID idmap winbind setup, where 'username' is a member of groups that are nested within other groups, I get the following error in my log.wb-DOMAIN file:

[2008/09/11 16:26:19,  1] libads/ldap_utils.c:ads_ranged_search_internal(323)
  could not pull first usnChanged!
[2008/09/11 16:26:19,  1] winbindd/winbindd_ads.c:lookup_usergroups_memberof(680)
  lookup_usergroups_memberof ads_search member=CN=Some User,OU=Users,OU=OU,OU=REGION,OU=Org,DC=foo,DC=org: Out of memory

The command only lists a minority of groups that he is a member of before the error message in the log file is printed.

Our smb.conf contains :

   winbind nested groups = yes
   winbind expand groups = 10
This setup works more or less reliably on 3.0.27a (I can see all or most of his groups including those that are nested).

Comment 1 Karolin Seeger 2009-06-15 02:10:02 UTC
Michael, is that related to bug #5945?
Comment 2 Marc Heckmann 2009-06-20 19:13:30 UTC
(In reply to comment #1)
> Michael, is that related to bug #5945?

Unfortunatly, I posted this bug almost 9 months ago and the test setup no longer exists and I am no longer responsible for maintaining Samba installations at my workplace.That being said, I'll check to see if I have the old configs in SVN and I'll try to reproduce on our network with the most recent Samba version.