mod_auth_ntlm_winbind and NT_STATUS_ACCOUNT_LOCKED_OUT

[Stefan Gohmann]

Hello,

we have another mod_auth_ntlm_winbind problem (SIGSEGV) on SUN Solaris when 
ntlm_auth returned NT_STATUS_ACCOUNT_LOCKED_OUT.

The part of the apache error_log file:
[Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(411): [client 
184.1.23.51] sending back 
TlRMTVNTUAACAAAABgAGADAAAAA1gokg2bFZvEET/loAAAAAAAAAAD4APgA2AAAATwBMAEIAAgAGAE8ATABCAAEAEgBaAFMAVABVAEQASQBPADEAMQAEAAAAAwASAHoAcwB0AHUAZABpAG8AMQAxAAAAAAA=
[Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(1018): 
[client 184.1.23.51] doing ntlm auth dance
[Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(484): [client 
184.1.23.51] Using existing auth helper 4359 
samba-technical at samba.org
[Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(703): [client 
184.1.23.51] parsing reply from helper to KK 
TlRMTVNTUAADAAAAGAAYAGYAAABuAG4AfgAAAAYABgBIAAAADAAMAE4AAAAMAAwAWgAAAAAAAADsAAAABYKIIgUBKAoAAAAPTwBMAEIAYgAxADIANAAyADUAUAAzADAAMAA0ADQAttQz/A1nDpy7X3Wsql3O0DAIL9jTTkdM4RuvEkI6EfOm/nHh9SPUNAEBAAAAAAAA0hKxwkRixwEwCC/Y005HTAAAAAACAAYATwBMAEIAAQASAFoAUwBUAFUARABJAE8AMQAxAAQAAAADABIAegBzAHQAdQBkAGkAbwAxADEAAAAAAAAAAAB=\n
[Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(741): [client 
184.1.23.51] got response: NA NT_STATUS_ACCOUNT_LOCKED_OUT
[Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(765): [client 
184.1.23.51] user not authenticated: NT_STATUS_ACCOUNT_LOCKED_OUT
[Fri Mar 09 13:16:25 2007] [notice] child pid 4310 exit signal 
Segmentation fault (11), possible coredump in /usr/apache2

The http.conf part:
<Directory "/var/apache2/htdocs/auth">
AuthName "NTLM Authentication thingy"
NTLMAuth on
NTLMAuthHelper "/usr/sfw/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp -d 
400"
NTLMBasicAuthoritative on
AuthType NTLM
require valid-user
</Directory>


And the core dump output:

******************************************************************************
  Application core Dump Analysis Output                     MDeBug Rev 1.0
  Mon Mar 12 13:43:52 CET 2007                   Files: 
/usr/apache2/bin/httpd  core_zstudio11_httpd_80_80_1173702731_2290
  
******************************************************************************

               
               
                ** Core file status **
                ------------------------
debugging core file of httpd (32-bit) from zstudio11
file: /usr/apache2/bin/httpd
initial argv: /usr/apache2/bin/httpd -k start
threading model: multi-threaded
status: process terminated by SIGSEGV (Segmentation Fault)
               
               
                ** Thread stack($c) **
                ----------------------
0xff119260(223e0a3c, 7, f, 0, 4e7b30, fe523008)
mod_auth_ntlm_winbind.so`check_user_id+0xf0(4e7b30, 4e8d1f, 10000, 
fffefeb4,
fe533154, 4e1fd0)
ap_run_check_user_id+0x3c(4e7b30, fe522008, 70254, 4d5448, 6, 7)
ap_process_request_internal+0x27c(0, c1718, c1608, 7ce20, 0, 4e7b30)
ap_process_request+0x40(4e7b30, 0, 4, 0, 6d400, 4e7b30)
0x26674(4e1bf0, 0, 4e1c48, 4e1b18, 6d73c, 0)
ap_run_process_connection+0x3c(4e1bf0, 26604, 701ec, 4d5344, 1, 2)
0x2cfd0(4dfb80, 70400, ffbffb44, 6c7dc, 6c71c, 4e2e)
0x2d15c(2c800, 1, 6c400, 1, 6d400, 0)
0x2d1d4(4, 4ddaa8, 70400, 6c400, 6d734, 4)
ap_mpm_run+0x1d0(6, 6c400, a, 6c400, 5, 6c704)
main+0x878(3, 6c400, 7ce20, 55400, 6c638, 55400)
_start+0x108(0, 0, 0, 0, 0, 0)
               
              
               
                Thread stack for MT app
                ------------------------
stack pointer for thread 1: ffbff808
[ ffbff808 0xff119260() ]
  ffbff868 mod_auth_ntlm_winbind.so`check_user_id+0xf0()
  ffbff8d0 ap_run_check_user_id+0x3c()
  ffbff930 ap_process_request_internal+0x27c()
  ffbff990 ap_process_request+0x40()
  ffbff9f0 0x26674()
  ffbffa58 ap_run_process_connection+0x3c()
  ffbffab8 0x2cfd0()
  ffbffb48 0x2d15c()
  ffbffba8 0x2d1d4()
  ffbffc08 ap_mpm_run+0x1d0()
  ffbffc90 main+0x878()
  ffbffd40 _start+0x108()


Please let me know, if you need more information.

Thanks in advance.

Cheers
Stefan

-- 
Stefan Gohmann         Entwicklung              gohmann at univention.de
Univention GmbH        Linux for your Business  fon: +49 421 22 232- 0
Mary-Somerville-Str.1  28359 Bremen             fax: +49 421 22 232-99
                       http://www.univention.de