AD users and groups unable to be looked up via winbind

This document (7013409) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 11 Service Pack 2
Samba 3.6.3-0.30.1 and associated packages

Situation

wbinfo -u fails
wbinfo -g fails
AD users and groups are not resolved via winbind even after the server is successfully joined to the domain

Verified that the server properly joined the domain. net ads testjoin came back ok. kinit commands worked fine, kerberos tickets were properly issued to the server. Just any winbind operations failed with a generic 'unable to look up users' error.

Resolution

Updated to Samba 3.6-0.33.35.1 or later. After updating the appropriate packages and rebooting everything worked as expected.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.