[Bug 1764853] Re: winbind returns PAM_AUTHINFO_UNAVAIL on first login after reboot

[Andreas Hasenack]

Ok, what are the contents of the netplan file?

On Fri, Apr 20, 2018, 04:31 msaxl <1764853 at bugs.launchpad.net> wrote:

> /etc/netplan/ contains 01-network-manager-all.yaml, if I remove it I get
> no network connection.
> This systems seems to be already migrated to netplan.
>
> /etc/network/interfaces.d/ is empty, /etc/network/interfaces contains
> only the default lo interface.
>
> smb.conf:
> [global]
>         workgroup = JDW
>         realm = JDW.CONET
>         security = ads
>         idmap config * : backend = tdb
>         idmap config * : range = 1000000-1999999
>         idmap config JDW : backend = rid
>         idmap config JDW : range = 1266900000-2000000000
>         template homedir = /home/%D/%U
>         template shell = /bin/bash
>         winbind use default domain = Yes
>         winbind refresh tickets = Yes
>         winbind offline logon = Yes
>         winbind request timeout = 3
>         kerberos method = secrets and keytab
>
>
> #        winbind rpc only = yes
>
>
>         client signing = yes
>
>
>         client use spnego = yes
>
>
>         store dos attributes = yes
>
>
>         ea support = yes
>
> ** Attachment added: "logfiles"
>
> https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1764853/+attachment/5123369/+files/sambalog.tar.xz
>
> --
> You received this bug notification because you are subscribed to samba
> in Ubuntu.
> https://bugs.launchpad.net/bugs/1764853
>
> Title:
>   winbind returns PAM_AUTHINFO_UNAVAIL on first login after reboot
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1764853/+subscriptions
>

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1764853

Title:
  winbind returns PAM_AUTHINFO_UNAVAIL on first login after reboot

Status in samba package in Ubuntu:
  Incomplete

Bug description:
  The following issue exists only on Ubuntu 18.04

  I've upgraded ubuntu from 17.10 and noticed that winbind does not work well.
  90% of the time I reboot my system I'm getting PAM_AUTHINFO_UNAVAIL when trying to log in with a domain account.
  clicking login again on the login screen most of the time succeeds (so the password is correct)

  I've checked if it works if I wait 10 minutes before logging in, no success, so it is not a timing issue.
  Also I've checked if winbind is working (log in with ssh using a local account)
  getent passwd xy and wbinfo -K user%pwd both work always.

  Now my workaround is putting
  winbind request timeout = 3
  in smb.conf, since the PAM_AUTHINFO_UNAVAIL is returned about 60sec after trying to login. This workaround solves nothing, it only makes logging in faster. (But now it fails mostly two times, but waiting 6 seconds is better than 60)

  To me it seems like deadlock, but I was unable to track it since it
  happens only on the first login. Then I would have to reboot
  (restarting winbind does not trigger it twice, also removing all
  caches in /run/samba does not trigger it twice)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1764853/+subscriptions