View Issue Details

IDProjectCategoryView StatusLast Update
0015795CentOS-7sambapublic2019-02-07 12:47
Reporteraspannag 
PriorityhighSeverityblockReproducibilityalways
Status newResolutionopen 
Product Version7.6.1810 
Target VersionFixed in Version 
Summary0015795: winbind hangs when asked for use with empty domain
DescriptionSince update to CentOS7.6 and so update of samba from 4.7 to 4.8 we see a 100% reproducable hang of winbind causing a looong response times (>60secs) of ssh/id and any uid/gid resolving call.

When ask for details about an unkonw local account (e.g. not in passwd or ldap via sssd) it will take 60+ seconds before the call returns with an error. An immediatly return would have been expacted like with former samba versions (< 4.8 til CentOS7.5).

A workaround to make normal ssh/id work without hang is to increase "winbind max domain connections " from its default (1) or set "winbind use default domain" to Yes on systems where possible.
Steps To ReproduceEnsure "winbind use default domain" is set to it's default "No"

Run a wbinfo/id asking for an unknown account not adding a domain and it will take 60+seconds until it returns with an error.

Unknown user: (60+secs, windbind call with empty domain)
=============

# time wbinfo -i TrySomethingNotLocalOrInAD
failed to call wbcGetpwnam: WBC_ERR_WINBIND_NOT_AVAILABLE
Could not get info for user TrySomethingNotLocalOrInAD

real 1m0.786s
user 0m0.009s
sys 0m0.010s
# time id TrySomethingNotLocalOrInAD
id: TrySomethingNotLocalOrInAD: Einen solchen Benutzer gibt es nicht

real 1m0.445s
user 0m0.004s
sys 0m0.009s

Known local user (e.g. root): (~0.03s)
=======================

# time id root
uid=0(root) gid=0(root) Gruppen=0(root)

real 0m0.032s
user 0m0.000s
sys 0m0.018s
# time wbinfo -i root
failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for user root

real 0m0.029s
user 0m0.010s
sys 0m0.011s

Additional Information# rpm -qa|grep samba-4
samba-4.8.3-4.el7.x86_64
# testparm -v 2>/dev/null|egrep "(max domain connections|default domain)"

        winbind max domain connections = 1
        winbind use default domain = No
TagsNo tags attached.
abrt_hash
URL

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2019-02-07 12:47 aspannag New Issue