[Pkg-samba-maint] Bug#821183: 821183: winbind: wbinfo -u issue & slow id mapping

[Christian Schöniger]

Hi,

i've got the same problems after updating an AD member server to 4.2.10. 
Adding "client ldap sasl wrapping = plain" solves the 'wbinfo -u' problem,
but even worse is the delay for commands like 'groups ...' , 'id ...'

So i wouldlike the share my observations:

each test after '/etc/init.d/winbind restart ; net cache flush'
4.1.17 - client ldap sasl wrapping = plain
   /# wbinfo -u
    ~1000 domain users printed
   /# time groups fes-aes+csc
     ~30 AD groups printed
   0.000u 0.000s 0:02.60 0.0%	0+0k 0+0io 0pf+0w
    see log.wb-FES-AES_4.1.17_plain_groups.log.tar.gz

4.1.17 - client ldap sasl wrapping = sign / seal
   /# wbinfo -u
     ~1000 domain users printed
   /# time groups fes-aes+csc
     ~30 AD groups printed
   0.000u 0.000s 0:28.48 0.0%	0+0k 0+0io 0pf+0w
     see log.wb-FES-AES_4.1.17_sign_groups.log.tar.gz

4.2.10 - client ldap sasl wrapping = plain

   /# wbinfo -u
     ~1000 domain users printed
   /# getent passwd fes-aes+csc
   csc:*:11220:10513:Schöniger, Christian:/home/csc:/bin/tcsh
   /# time groups fes-aes+csc
     ~30 AD groups printed
   0.010u 0.000s 0:38.80 0.0%	0+0k 0+0io 0pf+0w
     see log.wb-FES-AES_4.2.10_plain_groups.log.tar.gz

4.2.10 - client ldap sasl wrapping = sign / seal
* case 1:
   /# getent passwd fes-aes+csc
   csc:*:11220:10513:Schöniger, Christian:/home/csc:/bin/tcsh
   /# time groups fes-aes+csc > /dev/null
   groups: cannot find name for group ID 11454
   0.000u 0.000s 0:32.45 0.0%	0+0k 0+0io 0pf+0w
* case 2:
   /# wbinfo -u
     no output
   /# getent passwd fes-aes+csc
     no output
   /# time groups fes-aes+csc > /dev/null
   groups: fes-aes+csc: no such user
   0.000u 0.000s 0:00.00 0.0%	0+0k 0+0io 0pf+0w

I hope these information will help. Feel free to ask when you need more.

The group resolving delay makes winbind not usable for me. So I kindly ask 
to increase severity.


Mit freundlichen Grüßen - Best Regards

Christian Schöniger
Dipl.-Ing. (BA)
FES GmbH Fahrzeug-Entwicklung Sachsen / Auto-Entwicklungsring Sachsen GmbH
Crimmitschauer Straße 59, 08058 Zwickau

Tel.: +49 375 5660 254
Fax : +49 375 5660 92254
mailto:csc at fes-aes.de
http://www.fes-aes.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: log.wb-FES-AES_4.1.17_plain_groups.log.tar.gz
Type: application/x-gzip
Size: 2895 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20160421/6a98a4ce/attachment-0003.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: log.wb-FES-AES_4.1.17_sign_groups.log.tar.gz
Type: application/x-gzip
Size: 40417 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20160421/6a98a4ce/attachment-0004.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: log.wb-FES-AES_4.2.10_plain_groups.log.tar.gz
Type: application/x-gzip
Size: 40854 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20160421/6a98a4ce/attachment-0005.bin>