System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

Passwd hangs when using Winbind

UxBoD
Frequent Advisor

Passwd hangs when using Winbind

Hi,

I have setup AD authentication which is working fine but have a odd problem. If I add winbind to /etc/nsswitch.conf for passwd and group when a *Unix* user issues the passwd command it just hangs. I have tried adding [NOTFOUND=continue] so when the Unix user matches /etc/passwd it should not then check winbind.

Any ideas on how to fix this please ?
10 REPLIES
UxBoD
Frequent Advisor

Re: Passwd hangs when using Winbind

Sorry should add this is on HP-UX 11.23.
UxBoD
Frequent Advisor

Re: Passwd hangs when using Winbind

After 10 minutes the password is verified. I have connected to the process using tusc and can see it enumerating through the whole of our Active Directory. Help !
Steven E. Protter
Exalted Contributor

Re: Passwd hangs when using Winbind

Shalom,

This processing delay is probably on the server side of the winbind. I'd check the domain controller for events, delays and error messages.

I'd like to see the relevant line in /etc/nsswitch.conf to provide further advice.

If winbind is first, it should not be. That would lend evidence to my processing delay theory.

Also, the 11.23 system should be patched with a recent bi-annual patch set.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
UxBoD
Frequent Advisor

Re: Passwd hangs when using Winbind

#
# /etc/nsswitch.files:
#
# @(#)B11.23_LR
#
# An example file that could be copied over to /etc/nsswitch.conf; it
# does not use any name services.
#
passwd: files winbind
group: files winbind
hosts: files [NOTFOUND=CONTINUE UNAVAIL=CONTINUE] dns
UxBoD
Frequent Advisor

Re: Passwd hangs when using Winbind

SEP,

I have tested this on a fully patched 11.23 system aswell and experience exactly the same symptoms :(
UxBoD
Frequent Advisor

Re: Passwd hangs when using Winbind

With respect to processing on the server side we have a very large AD installation with ~10k users so winbind is enumerating through all of them which gives the illusion passwd has hung. As soon as I remove winbind from nsswitch.conf everything returns back to normal, apart from Samba no longer working for AD authentication.
Dennis Handly
Acclaimed Contributor

Re: Passwd hangs when using Winbind

>so winbind is enumerating through all of them which gives the illusion passwd has hung.

Is this every time or just once?
If every time, haven't they heard of hashing or a binary search?
UxBoD
Frequent Advisor

Re: Passwd hangs when using Winbind

This is every time :( And our users have just hit the password expiry date :( :(
UxBoD
Frequent Advisor

Re: Passwd hangs when using Winbind

I have increased the winbind cache time to 43200 (12 hours), then run the passwd command and watched the cache file grow. Once it asked me to enter the password again, I [CTRL-C] and then ran it again. Still the same, 10 minutes before the prompt comes back to enter password again :(
UxBoD
Frequent Advisor

Re: Passwd hangs when using Winbind

Setting :-

winbind enum users = No
winbind enum groups = No

in /etc/opt/samba/smb.conf resolved the issue. Still no not know why winbind is checked if the entry is found in /etc/passwd according to how nsswitch.conf should work. Ho hum it works so I have happy users again.