winbindd panic daemon dies

Andrew Smith-MAGAZINES andrew.smith.06 at
Fri Feb 13 11:22:04 GMT 2004

Hi Andrew,

	sorry if the last log was a bit funny, I generated it with "script" and had noticed it looked bad when viewed from windows notepad but it did look fine from a linux "cat". Hopefully sorted this one by "cat script.out > newfile.txt" don't realy know why it makes any difference!?!?

Anyway still getting a panic, not entirely sure what you were expecting anyway but please take a look.

One thing I noticed when running "winbindd -d=3" is the following just prior to the panic,

resolve_ads: Found [ bbcdc1064.nati= +>
INTERNAL ERROR: Signal 11 in pid 21069 (3.0.2)
Please read the appendix Bugs of the Samba HOWTO collection
smb_panic: clobber_region() last called from [strupper_static(327)]
smb_panic(): calling panic action [/bin/sleep 90000]

Could the problem relate to the large number of DC's in the national domain? I doubt there are many sites with so many which might be why I seem to be the only one with this problem,

	thanks Andy.

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at]
Sent: 13 February 2004 10:18
To: Andrew Smith-MAGAZINES
Cc: Jeremy Allison; Andrew Bartlett; samba-technical at
Subject: RE: RE: winbindd panic daemon dies

On Thu, 2004-02-12 at 21:18, Andrew Smith-MAGAZINES wrote:
> Oh yeh, hadn't seen an announcement on the samba list. Unfortunately I've still got a problem, please see the attached file for more valgrind debug info (password still winbind),

After I cleaned up the text file (what the heck did you manage to do to
kill all the newlines...) I got:

 Conditional jump or move depends on uninitialised value(s)
    at 0x80CD02E: count_chars (lib/util_str.c:561)
    by 0x8126395: resolve_ads (libsmb/namequery.c:938)
    by 0x812695E: internal_resolve_name (libsmb/namequery.c:1067)
    by 0x8127952: get_dc_list (libsmb/namequery.c:1404)
    by 0x812713B: get_sorted_dc_list (libsmb/namequery.c:1242)
    by 0x8182714: ads_find_dc (libads/ldap.c:149)
    by 0x8182933: ads_connect (libads/ldap.c:211)
    by 0x818F9B0: ads_dc_name (libsmb/namequery_dc.c:49)
    by 0x818FDF0: get_dc_name (libsmb/namequery_dc.c:173)
    by 0x808980F: cm_open_connection (nsswitch/winbindd_cm.c:133)
    by 0x808A67A: set_dc_type_and_flags (nsswitch/winbindd_cm.c:430)
    by 0x8080242: add_trusted_domain (nsswitch/winbindd_util.c:154)
    by 0x808066D: add_trusted_domains (nsswitch/winbindd_util.c:240)
    by 0x80808E9: init_domain_list (nsswitch/winbindd_util.c:305)
    by 0x807AC4F: main (nsswitch/winbindd.c:938)

If jeremy's fix is right, the only way we get that is if:

if (ldap_domain2hostlist(name, &list) != LDAP_SUCCESS)
	return False;
Allocates an uninitialised buffer.

Can you try the attached patch (of which a mangled version is included
in-line), to prove it is uninitialised *before* the string conversion?

Index: libsmb/namequery.c
RCS file: /home/cvs/samba/source/libsmb/namequery.c,v
retrieving revision
diff -u -r1.93.2.23 namequery.c
--- libsmb/namequery.c	8 Feb 2004 00:54:32 -0000
+++ libsmb/namequery.c	13 Feb 2004 10:16:14 -0000
@@ -929,12 +929,15 @@
 		if ( lp_security() != SEC_ADS )
 			return False;
-		DEBUG(5,("resolve_hosts: Attempting to resolve DC's for %s using
+		DEBUG(5,("resolve_ads: Attempting to resolve DC's for %s using
 		if (ldap_domain2hostlist(name, &list) != LDAP_SUCCESS)
 			return False;
+		DEBUG(0,("resolve_ads: Found [%s] as the list of DCs for domain %s in
+			list, name));
 		count = count_chars(list, ' ') + 1;
 		if ( (*return_iplist = malloc(count * sizeof(struct ip_service))) ==
NULL ) {
 			DEBUG(0,("resolve_hosts: malloc failed for %d entries\n", count ));

Andrew Bartlett

Andrew Bartlett                                 abartlet at
Manager, Authentication Subsystems, Samba Team  abartlet at
Student Network Administrator, Hawker College   abartlet at

BBCi at

This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically
If you have received it in error, please delete it from your system. Do not use, copy or disclose the information in any way nor act in
reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received.
Further communication will signify your consent to this.
-------------- next part --------------
A non-text attachment was scrubbed...
Type: application/x-zip-compressed
Size: 2289 bytes
Url :

More information about the samba-technical mailing list