Winbind (query_user_list) query_user_list ads_search: Time limit exceeded on RHEL7
Issue
I need help to get my servers that serves logon and group information from AD to start working with the new winbind samba fixes for BADLOCK . I can not look up users and groups in mircosoft AD. I do not use the smbd service.
The following is from the winbindd domain log:
[2016/04/26 13:34:33.640850, 5, pid=2840, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:672(gensec_start_mech)
Starting GENSEC mechanism spnego
[2016/04/26 13:34:33.640889, 5, pid=2840, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:672(gensec_start_mech)
Starting GENSEC submechanism gse_krb5
[2016/04/26 13:34:33.640984, 3, pid=2840, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:2502(kerberos_get_principal_from_service_hostname)
kerberos_get_principal_from_service_hostname: cannot get realm from, desthost host.example.com or default ccache. Using default smb.conf realm EXAMPLE.COM
[2016/04/26 13:34:33.778298, 3, pid=2840, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:904(ads_do_paged_search_args)
ads_do_paged_search_args: ldap_search_with_timeout((objectCategory=user)) -> Time limit exceeded
[2016/04/26 13:34:33.778397, 1, pid=2840, effective(0, 0), real(0, 0)] ../source3/libads/ldap_utils.c:135(ads_do_search_retry_internal)
ads reopen failed after error Time limit exceeded
[2016/04/26 13:34:33.778415, 1, pid=2840, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_ads.c:319(query_user_list)
query_user_list ads_search: Time limit exceeded
[2016/04/26 13:34:33.778431, 3, pid=2840, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:1519(query_user_list)
query_user_list: returned 0xc00000b5, retrying
[2016/04/26 13:34:33.778446, 10, pid=2840, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:397(set_domain_offline)
set_domain_offline: called for domain EXAMPLE
[2016/04/26 13:34:33.778488, 10, pid=2840, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:441(set_domain_offline)
Updated Packages
libldb.x86_64 1.1.25-1.el7_2 rhel-7-server-rpms
libtalloc.x86_64 2.1.5-1.el7_2 rhel-7-server-rpms
libtdb.x86_64 1.3.8-1.el7_2 rhel-7-server-rpms
libtevent.x86_64 0.9.26-1.el7_2 rhel-7-server-rpms
libwbclient.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
pytalloc.x86_64 2.1.5-1.el7_2 rhel-7-server-rpms
samba.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-client-libs.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-common.noarch 4.2.10-6.el7_2 rhel-7-server-rpms
samba-common-libs.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-common-tools.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-libs.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-winbind.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-winbind-clients.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-winbind-modules.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
# wbinfo -u (returns no results)
# getent passwd AD-user (returns no results)
Environment
Red Hat Enterprise Linux 7.2
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
