Hi Jay,
thanks for your comments on your workaround. I too come from an
environment where there are 1000s of users to pick from who're unlikely
to login. I found that using the command "getent passwd username" just
came back empty when the aforementioned error shows in the log. I don't
suppose you've noticed a point in time when the pipe "breaks"? I would
be interested to find what causes the break, a change in AD or the
server running winbind? If we could detect the break then we might be
closer to the root cause.
Many thanks,
Matt
On 26/01/2012 17:17, Jay Sullivan wrote:
I'm not going to show you my code because everyone will make fun of
me. But here is the 10 second version:
I'm checking on the results of the `id` command from an array of
usernames that don't frequently connect to my samba box. Most users
in our AD are members of dozens or hundreds of groups, so I simply
check on the length of the output from `id` and decide on whether or
not to restart winbind. The output will typically be empty when
winbind is down, but it'll occasionally report just a few groups
instead of the usual hundreds. Why an array of infrequent users?
I've found that once I do `id username1`, that user will be stuck in
the winbind cache for a while and won't help me figure out if winbind
is broken. Since I have the luxury(?) of thousands of users in our
AD that will (probably) never connect to my samba box, I picked a
sample and ran with it. It works _most_ of the time, but it's not a
solution. I'm good at band aids, but suck at surgery. =(
Please forward this to the samba mailing list for me. I just got a
bounce from my mail server and it'll take some time to sort out:
"Your e-mail service was detected by mx.selfip.biz (NiX Spam) as
spamming". Blacklisting is a necessary evil, I suppose...
~Jay
-----Original Message----- From: Matthew Baker
[mailto:matt.ba...@bristol.ac.uk] Sent: Thursday, January 26, 2012
11:41 AM To: Jay Sullivan Cc: samba@lists.samba.org Subject: Re:
winbind craps out, NT_STATUS_PIPE_BROKEN
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi Jay,
many thanks for your response.
I have a similar set of scripts currently they only run wbinfo -t and
a script to check net ads testjoin is sane. They don't catch this. I
was thinking about processing the log with something like swatch but
it's a kludge. I would be interested in seeing your sanity checks if
you don't mind?
Cheers,
Matt
On 26/01/12 16:32, Jay Sullivan wrote:
I am still experiencing this problem. I've scripted out some
winbind sanity checks that catch when it poops out and restart
winbind automagically.
I recently migrated our biggest samba host from Debian 5 to RHEL
6. The problem persists, albeit slightly less frequently (not very
scientific, I know...).
I typically only have problems with winbind when there are> 200
users connected _or_> 500 open files as reported by smbstatus.
Unfortunately for me, these conditions describe a typical samba
load during off-peak hours. =(
~Jay
-- Jay Sullivan Rochester Institute of Technology College of
Imaging Arts and Sciences jay.sulli...@rit.edu
-----Original Message----- From: Matthew Baker
[mailto:matt.ba...@bristol.ac.uk] Sent: Tuesday, January 24, 2012
3:34 AM To: Jay Sullivan; samba@lists.samba.org Subject: Re:
winbind craps out, NT_STATUS_PIPE_BROKEN
Hi Jay/Samba peeps,
Emailing in reference to
http://lists.samba.org/archive/samba/2011-April/162277.html
I have seen a very similar issue with a similar setup.
Users fail to be verified with:
getent passwd username
Entry in the log at same time is:
[2012/01/23 16:58:53.159761, 3]
winbindd/winbindd_misc.c:352(winbindd_interface_version) [18510]:
request interface version [2012/01/23 16:58:53.159966, 3]
winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir) [18510]:
request location of privileged pipe [2012/01/23 16:58:53.160214,
3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
getpwnam username [2012/01/23 16:58:53.162493, 5]
winbindd/winbindd_getpwnam.c:138(winbindd_getpwnam_recv) Could not
convert sid S-1-5-21-1117850145-1682116191-196506527-126617:
NT_STATUS_PIPE_BROKEN
Restarting winbindd solves the problem temporarily.
I've attached a copy of the smb.conf.
OS: Debian Squeeze 6.0.3 Kernel: 2.6.32-5-686-bigmem samba
2:3.5.6~dfsg-3squeeze5 winbind 2:3.5.6~dfsg-3squeeze5
Jay did you find a solution to your problem? Has anyone else on
the list seen similar issues or have any ideas of what might be
happening?
Any advice or pointers would be very much appreciated.
Thanks,
Matt
- --
Matthew Baker :: Senior Systems Administrator :: University of
Bristol
+----------------------------------------------------------------------+
| Infrastructure, Systems and Operations it-sys...@bristol.ac.uk |
| T: Berkeley Square: +44(0)117 3314325 (Mon, Thur& Fri)
| | T: Computer Centre: +44(0)117 3317467 (Tue, Wed)
| | A: Uni of Bristol, Computer Centre, Tyndall Ave, Bristol. BS81UD
|
+----------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora -
http://enigmail.mozdev.org/
iEYEARECAAYFAk8hggMACgkQLvm7pB/aicMZyACfYGhlYW/Xd2ULgMPdp4K5oL7b
8noAnAz4VjjvHEb/cuhbOj+97Rxc9bJ2 =uAtp -----END PGP SIGNATURE-----
--
Matthew Baker :: Senior Systems Administrator :: University of Bristol
+----------------------------------------------------------------------+
| Infrastructure, Systems and Operations it-sys...@bristol.ac.uk |
| T: Berkeley Square: +44(0)117 3314325 (Mon, Thur & Fri) |
| T: Computer Centre: +44(0)117 3317467 (Tue, Wed) |
| A: Uni of Bristol, Computer Centre, Tyndal Ave, Bristol. BS81UD |
+----------------------------------------------------------------------+
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
