[Pkg-samba-maint] Bug#459972: winbind: want to limit libnss_wins checks to WINS (no broadcasting)

[Matt Swift]

>> On Wed Jan  9 17:44:00 2008 -0500, Steve Langasek <vorlon at debian.org> wrote:

    S> Just to confirm, are you saying that setting "name resolve order = wins" in
    S> /etc/samba/smb.conf does not fix this timeout problem for you?

    S> I don't think it makes sense to have nss_wins exposing different behavior to
    S> the system than is used by Samba itself; but if it's not respecting the
    S> smb.conf values, that's certainly a bug to be fixed IMHO.

Yes I confirm.  "name resolve order = wins", and "wins" is last entry
in /etc/nsswitch.conf (and "dns proxy=no" to avoid any kind of a
loop).  If I "ping nonexistent" from a Debian shell and monitor
packets with wireshark, then I see a netbios broadcast from the debian
host looking for "nonexistent".  I've verified this after
double-checking that the nmbd processes were actually restarted after
changing smb.conf, since once in while an nmbd process seems to
survive "/etc/init.d/samba restart" and/or the "restart nmbd" button
in the swat web interface.  So if the "wins" NSS method is supposed to
follow "name resolve order" it's not.  I've been using "ping" on
Debian because that seems to use the NSS layer, whereas some apps
(e.g., "host") seem to use just DNS directly.  If you can't verify
that the WINS is broadcasting even without "bcast" in "name resolve
order" , then I'll try to confirm it on my system even more carefully
because...

Related tests today have given maddeningly variable results.  So far
I've gotten inconsistent results trying to "nblookup nonexistent" from
a Windows host to query the WINS server on the Debian host without
going through the NSS layer (could I also do this with nmblookup on
the Debian host I wonder?) .  Sometimes the Debian host broadcasts,
sometimes not, and sometimes the Windows host broadcasts after getting
a negative from the WINS server.  I must be missing a cache somewhere
or something like that, though I'm trying to vary the name looked up
each time.