[Samba] winbindd and pam error

[Pásztor János]

Dear Members,

Sorry for the previous noise, my google-fu was a little bit weak. I went
through the following threads:

https://lists.samba.org/archive/samba/2014-April/180881.html
https://lists.samba.org/archive/samba/2015-February/189032.html
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784656

I fixed my problem with domain join and leave, now i have a correct
keytab file. I also set "machine password timeout = 0" on my member servers.

Regards,
János

On 08/18/2015 03:01 PM, Pásztor János wrote:
> Dear Members,
>
> Today i upgraded my small domain which ran on debian 7 to debian 8. The
> samba version does not change, it stays at 4.1.17
>
> After the upgrade i noticed, that the ssh password auth does not work on
> the member servers. Excerpt from the log:
>
> Aug 18 14:46:31 medea winbindd[707]: STATUS=daemon 'winbindd' finished
> starting up and ready to serve
> connections===============================================================
> Aug 18 14:46:31 medea winbindd[707]: [2015/08/18 14:46:31.112809,  0]
> ../lib/util/fault.c:73(fault_report)
> Aug 18 14:46:31 medea winbindd[707]: INTERNAL ERROR: Signal 11 in pid
> 707 (4.1.17-Debian)
> Aug 18 14:46:31 medea winbindd[707]: Please read the Trouble-Shooting
> section of the Samba HOWTO
> Aug 18 14:46:31 medea winbindd[707]: [2015/08/18 14:46:31.113108,  0]
> ../lib/util/fault.c:75(fault_report)
> Aug 18 14:46:31 medea winbindd[707]:
> ===============================================================
> Aug 18 14:46:31 medea winbindd[707]: [2015/08/18 14:46:31.113203,  0]
> ../source3/lib/util.c:785(smb_panic_s3)
> Aug 18 14:46:31 medea winbindd[707]: PANIC (pid 707): internal error
> Aug 18 14:46:31 medea winbindd[707]: [2015/08/18 14:46:31.114392,  0]
> ../source3/lib/util.c:896(log_stack_trace)
> Aug 18 14:46:31 medea winbindd[707]: BACKTRACE: 27 stack frames:
> Aug 18 14:46:31 medea winbindd[707]: #0
> /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(log_stack_trace+0x1a)
> [0x7fcc554d62ca]
> Aug 18 14:46:31 medea winbindd[707]: #1
> /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(smb_panic_s3+0x20)
> [0x7fcc554d63b0]
> Aug 18 14:46:31 medea winbindd[707]: #2
> /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(smb_panic+0x2f)
> [0x7fcc59800caf]
> Aug 18 14:46:31 medea winbindd[707]: #3
> /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(+0x1cecf) [0x7fcc59800ecf]
> Aug 18 14:46:31 medea winbindd[707]: #4
> /lib/x86_64-linux-gnu/libpthread.so.0(+0xf8d0) [0x7fcc59c308d0]
> Aug 18 14:46:31 medea winbindd[707]: #5
> /usr/lib/x86_64-linux-gnu/libkrb5.so.26(krb5_storage_free+0x1)
> [0x7fcc540102a1]
> Aug 18 14:46:31 medea winbindd[707]: #6
> /usr/lib/x86_64-linux-gnu/libkrb5.so.26(+0x47665) [0x7fcc53ff5665]
> Aug 18 14:46:31 medea winbindd[707]: #7
> /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(+0x8e06) [0x7fcc5606ce06]
> Aug 18 14:46:31 medea winbindd[707]: #8
> /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(gse_krb5_get_server_keytab+0xeb)
> [0x7fcc5606d32b]
> Aug 18 14:46:31 medea winbindd[707]: #9
> /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(+0xb03a) [0x7fcc5606f03a]
> Aug 18 14:46:31 medea winbindd[707]: #10
> /usr/lib/x86_64-linux-gnu/libgensec.so.0(gensec_start_mech+0x72)
> [0x7fcc564feab2]
> Aug 18 14:46:31 medea winbindd[707]: #11
> /usr/lib/x86_64-linux-gnu/libgensec.so.0(gensec_start_mech_by_oid+0x26)
> [0x7fcc564fed96]
> Aug 18 14:46:31 medea winbindd[707]: #12
> /usr/sbin/winbindd(kerberos_return_pac+0x42c) [0x7fcc5a288cac]
> Aug 18 14:46:31 medea winbindd[707]: #13
> /usr/sbin/winbindd(winbindd_dual_pam_auth+0x1150) [0x7fcc5a2ae5a0]
> Aug 18 14:46:31 medea winbindd[707]: #14 /usr/sbin/winbindd(+0x5fd5c)
> [0x7fcc5a2c2d5c]
> Aug 18 14:46:31 medea winbindd[707]: #15
> /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x92cb) [0x7fcc535312cb]
> Aug 18 14:46:31 medea winbindd[707]: #16
> /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x7797) [0x7fcc5352f797]
> Aug 18 14:46:31 medea winbindd[707]: #17
> /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d)
> [0x7fcc5352bf9d]
> Aug 18 14:46:31 medea winbindd[707]: #18 /usr/sbin/winbindd(+0x620d8)
> [0x7fcc5a2c50d8]
> Aug 18 14:46:31 medea winbindd[707]: #19 /usr/sbin/winbindd(+0x627d5)
> [0x7fcc5a2c57d5]
> Aug 18 14:46:31 medea winbindd[707]: #20
> /usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_immediate+0xd4)
> [0x7fcc5352c7c4]
> Aug 18 14:46:31 medea winbindd[707]: #21
> /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x908e) [0x7fcc5353108e]
> Aug 18 14:46:31 medea winbindd[707]: #22
> /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x7797) [0x7fcc5352f797]
> Aug 18 14:46:31 medea winbindd[707]: #23
> /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d)
> [0x7fcc5352bf9d]
> Aug 18 14:46:31 medea winbindd[707]: #24 /usr/sbin/winbindd(main+0xad4)
> [0x7fcc5a288024]
> Aug 18 14:46:31 medea winbindd[707]: #25
> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7fcc531a0b45]
> Aug 18 14:46:31 medea winbindd[707]: #26 /usr/sbin/winbindd(+0x25699)
> [0x7fcc5a288699]
> Aug 18 14:46:31 medea winbindd[707]: [2015/08/18 14:46:31.131231,  0]
> ../source3/lib/dumpcore.c:312(dump_core)
> Aug 18 14:46:31 medea winbindd[707]: unable to change to
> /var/log/samba/cores/winbindd
> Aug 18 14:46:31 medea winbindd[707]: refusing to dump core
> Aug 18 14:46:31 medea sshd[978]: pam_winbind(sshd:auth): request
> wbcLogonUser failed: WBC_ERR_AUTH_ERROR, PAM error: PAM_SYSTEM_ERR (4),
> NTSTATUS: NT_STATUS_CONNECTION_DISCONNECTED, Error message was:
> NT_STATUS_CONNECTION_DISCONNECTED
> Aug 18 14:46:31 medea sshd[978]: pam_winbind(sshd:auth): internal module
> error (retval = PAM_SYSTEM_ERR(4), user = 'pasja')
>
> Otherwise winbindd working properly, the 'wbinfo -u' and 'wbinfo -g'
> returns my users and groups, 'id pasja' returns my uid and gid, so
> nsswitch is also working.
>
> I went through the 'restart everything' fix, it didn't help. Also tried
> the disable/enable the pam config with 'pam-auth update' without success.
>
> Could you give me some advice, where shall i start the fixing?
>
> Regards,
> János
>
>