winbindd panic daemon dies

Andrew Smith-MAGAZINES andrew.smith.06 at bbc.co.uk
Fri Feb 13 11:22:04 GMT 2004


Hi Andrew,

	sorry if the last log was a bit funny, I generated it with "script" and had noticed it looked bad when viewed from windows notepad but it did look fine from a linux "cat". Hopefully sorted this one by "cat script.out > newfile.txt" don't realy know why it makes any difference!?!?

Anyway still getting a panic, not entirely sure what you were expecting anyway but please take a look.

One thing I noticed when running "winbindd -d=3" is the following just prior to the panic,


resolve_ads: Found [bbcdc1031.national.core.bbc.co.uk:389 bbcdc1011.national.core.bbc.co.uk:389 bbcdc1041.national.core.bbc.co.uk:389 bbcdc1074.national.core.bbc.co.uk:389 bbcdc1035.national.core.bbc.co.uk:389 bbcdc1053.national.core.bbc.co.uk:389 bbcdc1013.national.core.bbc.co.uk:389 bbcdc1077.national.core.bbc.co.uk:389 bbcdc1061.national.core.bbc.co.uk:389 bbcdc1141.national.core.bbc.co.uk:389 bbcdc1093.national.core.bbc.co.uk:389 bbcdc1097.national.core.bbc.co.uk:389 bbcdc1100.national.core.bbc.co.uk:389 bbcdc1050.national.core.bbc.co.uk:389 bbcdc1039.national.core.bbc.co.uk:389 bbcdc1098.national.core.bbc.co.uk:389 bbcdc1045.national.core.bbc.co.uk:389 bbcdc1066.national.core.bbc.co.uk:389 bbcdc1057.national.core.bbc.co.uk:389 bbcdc1063.national.core.bbc.co.uk:389 bbcdc1096.national.core.bbc.co.uk:389 bbcdc1072.national.core.bbc.co.uk:389 bbcdc1033.national.core.bbc.co.uk:389 bbcdc1017.national.core.bbc.co.uk:389 bbcdc1060.national.core.bbc.co.uk:389 bbcdc1143.national.core.bbc.co.uk:389 bbcdc1064.nati= +>
==============================================================
INTERNAL ERROR: Signal 11 in pid 21069 (3.0.2)
Please read the appendix Bugs of the Samba HOWTO collection
===============================================================
smb_panic: clobber_region() last called from [strupper_static(327)]
smb_panic(): calling panic action [/bin/sleep 90000]


Could the problem relate to the large number of DC's in the national domain? I doubt there are many sites with so many which might be why I seem to be the only one with this problem,

	thanks Andy.


-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org]
Sent: 13 February 2004 10:18
To: Andrew Smith-MAGAZINES
Cc: Jeremy Allison; Andrew Bartlett; samba-technical at lists.samba.org
Subject: RE: RE: winbindd panic daemon dies


On Thu, 2004-02-12 at 21:18, Andrew Smith-MAGAZINES wrote:
> Oh yeh, hadn't seen an announcement on the samba list. Unfortunately I've still got a problem, please see the attached file for more valgrind debug info (password still winbind),

After I cleaned up the text file (what the heck did you manage to do to
kill all the newlines...) I got:

 Conditional jump or move depends on uninitialised value(s)
    at 0x80CD02E: count_chars (lib/util_str.c:561)
    by 0x8126395: resolve_ads (libsmb/namequery.c:938)
    by 0x812695E: internal_resolve_name (libsmb/namequery.c:1067)
    by 0x8127952: get_dc_list (libsmb/namequery.c:1404)
    by 0x812713B: get_sorted_dc_list (libsmb/namequery.c:1242)
    by 0x8182714: ads_find_dc (libads/ldap.c:149)
    by 0x8182933: ads_connect (libads/ldap.c:211)
    by 0x818F9B0: ads_dc_name (libsmb/namequery_dc.c:49)
    by 0x818FDF0: get_dc_name (libsmb/namequery_dc.c:173)
    by 0x808980F: cm_open_connection (nsswitch/winbindd_cm.c:133)
    by 0x808A67A: set_dc_type_and_flags (nsswitch/winbindd_cm.c:430)
    by 0x8080242: add_trusted_domain (nsswitch/winbindd_util.c:154)
    by 0x808066D: add_trusted_domains (nsswitch/winbindd_util.c:240)
    by 0x80808E9: init_domain_list (nsswitch/winbindd_util.c:305)
    by 0x807AC4F: main (nsswitch/winbindd.c:938)

If jeremy's fix is right, the only way we get that is if:

if (ldap_domain2hostlist(name, &list) != LDAP_SUCCESS)
	return False;
				
Allocates an uninitialised buffer.

Can you try the attached patch (of which a mangled version is included
in-line), to prove it is uninitialised *before* the string conversion?

Index: libsmb/namequery.c
===================================================================
RCS file: /home/cvs/samba/source/libsmb/namequery.c,v
retrieving revision 1.93.2.23
diff -u -r1.93.2.23 namequery.c
--- libsmb/namequery.c	8 Feb 2004 00:54:32 -0000	1.93.2.23
+++ libsmb/namequery.c	13 Feb 2004 10:16:14 -0000
@@ -929,12 +929,15 @@
 		if ( lp_security() != SEC_ADS )
 			return False;
 			
-		DEBUG(5,("resolve_hosts: Attempting to resolve DC's for %s using
DNS\n",
+		DEBUG(5,("resolve_ads: Attempting to resolve DC's for %s using
DNS\n",
 			name));
 			
 		if (ldap_domain2hostlist(name, &list) != LDAP_SUCCESS)
 			return False;
 				
+		DEBUG(0,("resolve_ads: Found [%s] as the list of DCs for domain %s in
DNS\n",
+			list, name));
+			
 		count = count_chars(list, ' ') + 1;
 		if ( (*return_iplist = malloc(count * sizeof(struct ip_service))) ==
NULL ) {
 			DEBUG(0,("resolve_hosts: malloc failed for %d entries\n", count ));

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net

BBCi at http://www.bbc.co.uk/

This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically
stated.
If you have received it in error, please delete it from your system. Do not use, copy or disclose the information in any way nor act in
reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received.
Further communication will signify your consent to this.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: winbind.zip
Type: application/x-zip-compressed
Size: 2289 bytes
Desc: winbind.zip
Url : http://lists.samba.org/archive/samba-technical/attachments/20040213/2b1b09f2/winbind.bin


More information about the samba-technical mailing list