winbind doesn't authenticate without a restart

[piviul]

ubuntu 12.04
winbind 3.6.3

I'm trying to use winbind as authenticator in a samba (v 3.5.10) domain. At logon winbind doesn't authenticate if I don't restart the daemon.

To workaroubd the bug I've insert in /etc/network/if-up.d the following file:

$ cat /etc/network/if-up.d/winbind
#!/bin/sh
# Patch CSA: Authentication doesn't work if winbind is not restarted

# Don't bother to do anything for lo.
if [ "$IFACE" = lo ]; then
 exit 0
fi

# Only run from ifup.
if [ "$MODE" != start ]; then
 exit 0
fi

# Samba only cares about inet and inet6. Get thee gone, strange people
# still using ipx.
case $ADDRFAM in
 inet|inet6|NetworkManager)
  ;;
 *)
  exit 0
  ;;
esac

# modified by me
invoke-rc.d winbind restart >/dev/null

exit 0

But I've found that sometimes this workaround is not enought, so I have add to /etc/rc.local the command
service winbind restart

Using both the patches above I've found no more problems using pam_winbind.

Have a great day

Piviul

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: winbind 2:3.6.3-2ubuntu2.1
ProcVersionSignature: Ubuntu 3.2.0-24.39-generic-pae 3.2.16
Uname: Linux 3.2.0-24-generic-pae i686
NonfreeKernelModules: wl
ApportVersion: 2.0.1-0ubuntu7
Architecture: i386
Date: Thu May 31 14:10:51 2012
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release i386 (20120423)
ProcEnviron:
 TERM=xterm
 PATH=(custom, no user)
 LANG=it_IT.UTF-8
 SHELL=/bin/bash
SourcePackage: samba
UpgradeStatus: No upgrade log present (probably fresh install)

[Scott Moser (smoser)]

Hi,
  Thanks for reporting this bug, and the useful work around information.
  It looks like either winbindd is starting to early, or actually needs to be restarted to be told about on network changes (which would seem like an upstream issue).

  The fact that rc.local and network ifup were needed is strange though.

[Scott Moser (smoser)]

The best action forward I think is to raise this on an upstream mailing list, or as an upstream bug.

[Scott Moser (smoser)]

It seems this is likely a duplicate of bug 821183.
I'm going to mark as such. If you disagree, please un-dup it.