TNG 0.11 - samrd panic

[Michael Breuer]

This is reproducible --- scenario:

Run user manager for domains (from NT5).  Attempt to view properties of a user on the samba domain.

I have a level 100 log... but it's huge and there is nothing obvious.  If anyone wants specifics or the whole file, just ask.
-------------- next part --------------
_kill(<stripped>) ["kill.s":15]
_raise(<stripped>) ["raise.c":27]
abort(<stripped>) ["abort.c":52]
smb_panic(why = 0x5feba610 = "internal error") ["util.c":2384]
fault_report(sig = 11) ["fault.c":46]
sig_fault(sig = 11) ["fault.c":70]
_sigtramp(<stripped>) ["sigtramp.s":71]
strlen(<stripped>) ["strlen.s":58]
_doprnt(<stripped>) ["doprnt.c":1337]
_vsnprintf(<stripped>) ["vsnprintf.c":35]
vslprintf(str = 0x7fff1c88 = "lookupsmbpwnam: unix user name p oracle\n", n = 1023, format = 0x5fdda6a8 = "lookupsmbpwnam: unix user name %s\n", ap = 0x7fff20a8 = "") ["slprintf.c":32]
dbgtext(format_str = 0x5fdda6a8 = "lookupsmbpwnam: unix user name %s\n", ... = <void>) ["debug.c":571]
lookupsmbpwnam(unix_usr_name = 0x3a726f6f, grp = 0x7fff2128) ["domain_namemap.c":700]
get_unixgroup_members(grp = 0x7fff21e8, num_mem = 0x7fff26e8, members = 0x7fff26e4) ["groupunix.c":117]
getgrpunixpwent(vp = 0x100544d8, mem = 0x7fff26e4, num_mem = 0x7fff26e8) ["groupunix.c":245]
getgroupent(vp = 0x100544d8, mem = 0x7fff26e4, num_mem = 0x7fff26e8) ["groupdb.c":343]
iterate_getusergroupsnam(user_name = 0x5fdddb30 = "MichaelBR", grps = 0x7fff2790, num_grps = 0x7fff2848) ["groupdb.c":239]
getusergroupsntnam(user_name = 0x5fdddb30 = "MichaelBR", grp = 0x7fff2790, num_grps = 0x7fff2848) ["groupdb.c":436]
_samr_query_usergroups(pol = 0x7fff2850, num_groups = 0x7fff2848, gids = 0x7fff2844) ["srv_samr_passdb.c":2174]
api_samr_query_usergroups(p = 0x1005a640, data = 0x1005a640, rdata = 0x1005a670) ["srv_samr.c":882]
api_rpc_command(l = 0x1005a640, rpc_name = 0x10029018 = "api_samr_rpc", api_rpc_cmds = 0x1002a208) ["srv_pipe_srv.c":689]
api_rpcTNP(l = 0x1005a640, rpc_name = 0x10029018 = "api_samr_rpc", api_rpc_cmds = 0x1002a208) ["srv_pipe_srv.c":723]
api_samr_rpc(p = 0x1005a640) ["srv_samr.c":1160]
api_pipe_request(l = 0x1005a640, name = 0x7fff2d70 = "samr", resp = 0x1005a6d4) ["srv_pipe_srv.c":473]
rpc_redir_local(l = 0x1005a640, req = 0x1005a6a4, resp = 0x1005a6d4, name = 0x7fff2d70 = "samr") ["srv_pipe_srv.c":603]
rpc_local(l = 0x1005a640, data = 0x1005adb0 = "\005", len = 44, name = 0x7fff2d70 = "samr") ["srv_pipe_srv.c":750]
process_msrpc(l = 0x1005a640, name = 0x7fff2d70 = "samr", pdu = 0x7fff2c20) ["msrpcd_process.c":167]
msrpcd_process(fn = 0x1002a1d8, l = 0x1005a640, name = 0x7fff2d70 = "samr") ["msrpcd_process.c":515]
main(argc = 2, argv = 0x7fff2f24) ["msrpcd.c":568]
__start(<stripped>) ["crt1text.s":177]