Winbind (query_user_list) query_user_list ads_search: Time limit exceeded on RHEL7
Issue
I need help to get my servers that serves logon and group information from AD to start working with the new winbind samba fixes for BADLOCK . I can not look up users and groups in mircosoft AD. I do not use the smbd service.
The following is from the winbindd domain log:
[2016/04/26 13:34:33.640850, 5, pid=2840, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:672(gensec_start_mech)
Starting GENSEC mechanism spnego
[2016/04/26 13:34:33.640889, 5, pid=2840, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:672(gensec_start_mech)
Starting GENSEC submechanism gse_krb5
[2016/04/26 13:34:33.640984, 3, pid=2840, effective(0, 0), real(0, 0)] ../lib/krb5_wrap/krb5_samba.c:2502(kerberos_get_principal_from_service_hostname)
kerberos_get_principal_from_service_hostname: cannot get realm from, desthost host.example.com or default ccache. Using default smb.conf realm EXAMPLE.COM
[2016/04/26 13:34:33.778298, 3, pid=2840, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:904(ads_do_paged_search_args)
ads_do_paged_search_args: ldap_search_with_timeout((objectCategory=user)) -> Time limit exceeded
[2016/04/26 13:34:33.778397, 1, pid=2840, effective(0, 0), real(0, 0)] ../source3/libads/ldap_utils.c:135(ads_do_search_retry_internal)
ads reopen failed after error Time limit exceeded
[2016/04/26 13:34:33.778415, 1, pid=2840, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_ads.c:319(query_user_list)
query_user_list ads_search: Time limit exceeded
[2016/04/26 13:34:33.778431, 3, pid=2840, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:1519(query_user_list)
query_user_list: returned 0xc00000b5, retrying
[2016/04/26 13:34:33.778446, 10, pid=2840, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:397(set_domain_offline)
set_domain_offline: called for domain EXAMPLE
[2016/04/26 13:34:33.778488, 10, pid=2840, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:441(set_domain_offline)
Updated Packages
libldb.x86_64 1.1.25-1.el7_2 rhel-7-server-rpms
libtalloc.x86_64 2.1.5-1.el7_2 rhel-7-server-rpms
libtdb.x86_64 1.3.8-1.el7_2 rhel-7-server-rpms
libtevent.x86_64 0.9.26-1.el7_2 rhel-7-server-rpms
libwbclient.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
pytalloc.x86_64 2.1.5-1.el7_2 rhel-7-server-rpms
samba.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-client-libs.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-common.noarch 4.2.10-6.el7_2 rhel-7-server-rpms
samba-common-libs.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-common-tools.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-libs.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-winbind.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-winbind-clients.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
samba-winbind-modules.x86_64 4.2.10-6.el7_2 rhel-7-server-rpms
# wbinfo -u (returns no results)
# getent passwd AD-user (returns no results)
Environment
Red Hat Enterprise Linux 7.2
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.