[Samba] winbindd and pam error

[Pásztor János]

Dear Members,

Today i upgraded my small domain which ran on debian 7 to debian 8. The
samba version does not change, it stays at 4.1.17

After the upgrade i noticed, that the ssh password auth does not work on
the member servers. Excerpt from the log:

Aug 18 14:46:31 medea winbindd[707]: STATUS=daemon 'winbindd' finished
starting up and ready to serve
connections===============================================================
Aug 18 14:46:31 medea winbindd[707]: [2015/08/18 14:46:31.112809,  0]
../lib/util/fault.c:73(fault_report)
Aug 18 14:46:31 medea winbindd[707]: INTERNAL ERROR: Signal 11 in pid
707 (4.1.17-Debian)
Aug 18 14:46:31 medea winbindd[707]: Please read the Trouble-Shooting
section of the Samba HOWTO
Aug 18 14:46:31 medea winbindd[707]: [2015/08/18 14:46:31.113108,  0]
../lib/util/fault.c:75(fault_report)
Aug 18 14:46:31 medea winbindd[707]:
===============================================================
Aug 18 14:46:31 medea winbindd[707]: [2015/08/18 14:46:31.113203,  0]
../source3/lib/util.c:785(smb_panic_s3)
Aug 18 14:46:31 medea winbindd[707]: PANIC (pid 707): internal error
Aug 18 14:46:31 medea winbindd[707]: [2015/08/18 14:46:31.114392,  0]
../source3/lib/util.c:896(log_stack_trace)
Aug 18 14:46:31 medea winbindd[707]: BACKTRACE: 27 stack frames:
Aug 18 14:46:31 medea winbindd[707]: #0
/usr/lib/x86_64-linux-gnu/libsmbconf.so.0(log_stack_trace+0x1a)
[0x7fcc554d62ca]
Aug 18 14:46:31 medea winbindd[707]: #1
/usr/lib/x86_64-linux-gnu/libsmbconf.so.0(smb_panic_s3+0x20)
[0x7fcc554d63b0]
Aug 18 14:46:31 medea winbindd[707]: #2
/usr/lib/x86_64-linux-gnu/libsamba-util.so.0(smb_panic+0x2f)
[0x7fcc59800caf]
Aug 18 14:46:31 medea winbindd[707]: #3
/usr/lib/x86_64-linux-gnu/libsamba-util.so.0(+0x1cecf) [0x7fcc59800ecf]
Aug 18 14:46:31 medea winbindd[707]: #4
/lib/x86_64-linux-gnu/libpthread.so.0(+0xf8d0) [0x7fcc59c308d0]
Aug 18 14:46:31 medea winbindd[707]: #5
/usr/lib/x86_64-linux-gnu/libkrb5.so.26(krb5_storage_free+0x1)
[0x7fcc540102a1]
Aug 18 14:46:31 medea winbindd[707]: #6
/usr/lib/x86_64-linux-gnu/libkrb5.so.26(+0x47665) [0x7fcc53ff5665]
Aug 18 14:46:31 medea winbindd[707]: #7
/usr/lib/x86_64-linux-gnu/samba/libgse.so.0(+0x8e06) [0x7fcc5606ce06]
Aug 18 14:46:31 medea winbindd[707]: #8
/usr/lib/x86_64-linux-gnu/samba/libgse.so.0(gse_krb5_get_server_keytab+0xeb)
[0x7fcc5606d32b]
Aug 18 14:46:31 medea winbindd[707]: #9
/usr/lib/x86_64-linux-gnu/samba/libgse.so.0(+0xb03a) [0x7fcc5606f03a]
Aug 18 14:46:31 medea winbindd[707]: #10
/usr/lib/x86_64-linux-gnu/libgensec.so.0(gensec_start_mech+0x72)
[0x7fcc564feab2]
Aug 18 14:46:31 medea winbindd[707]: #11
/usr/lib/x86_64-linux-gnu/libgensec.so.0(gensec_start_mech_by_oid+0x26)
[0x7fcc564fed96]
Aug 18 14:46:31 medea winbindd[707]: #12
/usr/sbin/winbindd(kerberos_return_pac+0x42c) [0x7fcc5a288cac]
Aug 18 14:46:31 medea winbindd[707]: #13
/usr/sbin/winbindd(winbindd_dual_pam_auth+0x1150) [0x7fcc5a2ae5a0]
Aug 18 14:46:31 medea winbindd[707]: #14 /usr/sbin/winbindd(+0x5fd5c)
[0x7fcc5a2c2d5c]
Aug 18 14:46:31 medea winbindd[707]: #15
/usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x92cb) [0x7fcc535312cb]
Aug 18 14:46:31 medea winbindd[707]: #16
/usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x7797) [0x7fcc5352f797]
Aug 18 14:46:31 medea winbindd[707]: #17
/usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d)
[0x7fcc5352bf9d]
Aug 18 14:46:31 medea winbindd[707]: #18 /usr/sbin/winbindd(+0x620d8)
[0x7fcc5a2c50d8]
Aug 18 14:46:31 medea winbindd[707]: #19 /usr/sbin/winbindd(+0x627d5)
[0x7fcc5a2c57d5]
Aug 18 14:46:31 medea winbindd[707]: #20
/usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_immediate+0xd4)
[0x7fcc5352c7c4]
Aug 18 14:46:31 medea winbindd[707]: #21
/usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x908e) [0x7fcc5353108e]
Aug 18 14:46:31 medea winbindd[707]: #22
/usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x7797) [0x7fcc5352f797]
Aug 18 14:46:31 medea winbindd[707]: #23
/usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d)
[0x7fcc5352bf9d]
Aug 18 14:46:31 medea winbindd[707]: #24 /usr/sbin/winbindd(main+0xad4)
[0x7fcc5a288024]
Aug 18 14:46:31 medea winbindd[707]: #25
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7fcc531a0b45]
Aug 18 14:46:31 medea winbindd[707]: #26 /usr/sbin/winbindd(+0x25699)
[0x7fcc5a288699]
Aug 18 14:46:31 medea winbindd[707]: [2015/08/18 14:46:31.131231,  0]
../source3/lib/dumpcore.c:312(dump_core)
Aug 18 14:46:31 medea winbindd[707]: unable to change to
/var/log/samba/cores/winbindd
Aug 18 14:46:31 medea winbindd[707]: refusing to dump core
Aug 18 14:46:31 medea sshd[978]: pam_winbind(sshd:auth): request
wbcLogonUser failed: WBC_ERR_AUTH_ERROR, PAM error: PAM_SYSTEM_ERR (4),
NTSTATUS: NT_STATUS_CONNECTION_DISCONNECTED, Error message was:
NT_STATUS_CONNECTION_DISCONNECTED
Aug 18 14:46:31 medea sshd[978]: pam_winbind(sshd:auth): internal module
error (retval = PAM_SYSTEM_ERR(4), user = 'pasja')

Otherwise winbindd working properly, the 'wbinfo -u' and 'wbinfo -g'
returns my users and groups, 'id pasja' returns my uid and gid, so
nsswitch is also working.

I went through the 'restart everything' fix, it didn't help. Also tried
the disable/enable the pam config with 'pam-auth update' without success.

Could you give me some advice, where shall i start the fixing?

Regards,
János