winbindd failure: "key length too large"

This document (7016777) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 11 Service Pack 3 (SLES 11 SP3)
SUSE Linux Enterprise Server 11 Service Pack 4 (SLES 11 SP4)

Situation

Authentication won't complete and the Samba logs show the following error:


winbindd[3081]: [2015/06/02 22:43:04.855101,  0] winbindd/winbindd_cache.c:4082(cache_traverse_validate_fn)
winbindd[3081]:    cache_traverse_validate_fn: key length too large: (1644) > (1024)

Resolution

The samba maintenance update, samba-3.6.3-64.1 released January 2016 includes the patch to resolve the problem. Please install the recommended update.

Cause

A NDR key exceeds the hard coded limit set in "cache_traverse_validate_fn(). The keysize limit for NDR queries needs to be increased.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.