[Pkg-samba-maint] Bug#821183: winbind: wbinfo -u is empty, wbinfo -g returns groups with samba as DC, ldap_search_with_timeout timeout

[John Wyzer]

Package: winbind
Version: 2:4.2.10+dfsg-0+deb8u2
Severity: normal

I have samba installed as a domain controller.
On one of the clients I can no longer get the user information. 
wbinfo -u does not return any users while wbinfo -g works fine.

With increased log levels, I get 

ldap_search_with_timeout((objectCategory=user)) -> Time limit exceeded 

when retrieving the users with "wbinfo -u" while  "wbinfo -g" works fine.

This does not occur in 2:4.1.17+dfsg-2+deb8u2 but things break both in 
jessie and sid.


The relevant smb.conf on the client is

[global]
  workgroup = DOMAIN
  server string = %h
  realm = DOMAIN.SOMETHING.COM
  security = ADS
  map to guest = Bad User
  load printers = no
  passdb backend = tdbsam
  dns proxy = no
  bind interfaces only = no

  printcap name = /dev/null
  printing = bsd
  host msdfs = true
  unix extensions = yes
  map archive = no
  map hidden = no
  map system = no
  map readonly = no
  unix password sync = yes
  passwd program = /usr/bin/passwd %u
  template shell = /bin/bash
  kerberos method = system keytab

  idmap config * : default = yes
  idmap config * : range = 1000000-9999999
  idmap config * : backend = rid
  
  winbind enum groups = yes  
  winbind enum users = yes
  winbind use default domain = Yes
  winbind nested groups = Yes
  winbind nss info = rfc2307
  winbind refresh tickets = true



-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.4.5+ (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)