Bug 6536 - winbind cache time issue
Summary: winbind cache time issue
Status: RESOLVED WONTFIX
Alias: None
Product: Samba 3.2
Classification: Unclassified
Component: Winbind (show other bugs)
Version: 3.2.12
Hardware: Other Linux
: P3 major
Target Milestone: ---
Assignee: Michael Adam
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-07-07 02:54 UTC by Richard Lamboj
Modified: 2018-03-27 22:58 UTC (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Richard Lamboj 2009-07-07 02:54:03 UTC
Hello,

we are using three samba 3.2.12 PDC. Those three Domain Controller are in a trusted relationship. So we have runnning Winbind. I have set the "winbind cache time" to 3600(1 Hour). Sometimes the cache looses some entrys and after a long time it looses all entrys. A restart of winbind does not bring anything. If i change "winbind cache time" to 0 and send a SIGHUP signal to Winbind, Winbind will need 80 to 100% CPU Time. But after that it works. When i switch the "winbind cache time" to something higher than 0, windinbd will use 0% and everything works fine - for a time, after that winbind will loose again slowly the users.

When i run "wbinfo -u" i can see all users but when i run "getent passwd" i don't see all users from Winbind. Some users are Missing.

On the Windows side i see in the explorer 1-0-0 unknwon Users on File Permissions.
Comment 1 Richard Lamboj 2009-07-08 02:43:07 UTC
Here is the Error Log:

[2009/07/08 07:36:44,  1] winbindd/winbindd_user.c:winbindd_fill_pwent(84)
  error getting user id for sid S-1-5-21-1801630100-1912888146-724944298-3840
[2009/07/08 07:36:44,  1] winbindd/winbindd_user.c:winbindd_getpwent(766)
  could not lookup domain user c.akgay
[2009/07/08 07:36:44,  1] winbindd/winbindd_user.c:winbindd_fill_pwent(84)
  error getting user id for sid S-1-5-21-1801630100-1912888146-724944298-3842
[2009/07/08 07:36:44,  1] winbindd/winbindd_user.c:winbindd_getpwent(766)
  could not lookup domain user p.singh
[2009/07/08 07:36:44,  1] winbindd/winbindd_user.c:winbindd_fill_pwent(84)
  error getting user id for sid S-1-5-21-1801630100-1912888146-724944298-3844
[2009/07/08 07:36:44,  1] winbindd/winbindd_user.c:winbindd_getpwent(766)
  could not lookup domain user h.sahi
[2009/07/08 07:36:44,  1] winbindd/winbindd_user.c:winbindd_fill_pwent(84)
  error getting user id for sid S-1-5-21-1801630100-1912888146-724944298-3846
[2009/07/08 07:36:44,  1] winbindd/winbindd_user.c:winbindd_getpwent(766)
  could not lookup domain user a.nur
[2009/07/08 07:36:54,  0] libsmb/clientgen.c:cli_receive_smb(165)
  Receiving SMB: Server stopped responding
[2009/07/08 07:36:54,  1] winbindd/winbindd_cm.c:cm_prepare_connection(947)
  failed tcon_X with NT_STATUS_IO_TIMEOUT
[2009/07/08 07:36:57,  0] libsmb/namequery.c:saf_store(75)
  saf_store: refusing to store 0 length domain or servername!
[2009/07/08 07:37:07,  0] libsmb/clientgen.c:cli_receive_smb(165)
  Receiving SMB: Server stopped responding
[2009/07/08 07:37:07,  1] winbindd/winbindd_cm.c:cm_prepare_connection(947)
  failed tcon_X with NT_STATUS_IO_TIMEOUT
Comment 2 Michael Adam 2009-07-22 16:09:22 UTC
Hi,

can you paste your smb.conf, please?

Thanks - Michael
Comment 3 Guenther Deschner 2009-08-06 19:30:19 UTC
A log level 10 logfile of the failing winbind process would also be helpful, can you please provide one ?
Comment 4 Richard Lamboj 2009-08-07 18:11:40 UTC
Hello,

at the moment i don't have much time and its a productive system(so i can't change any thing at the moment). But i will post the config and search for the "old" log files.

I will install a new testing system to reconstruct the problem.

"winbind offline logon = false" seems to fix it.

good night
Comment 5 Björn Jacke 2018-03-27 22:58:54 UTC
closing due to lack of feedback. Winbind offline logons don't make much sense on a DC for me - not being able to enable that on a PDC sounds reasonable.