mod_auth_ntlm_winbind and NT_STATUS_ACCOUNT_LOCKED_OUT

[Stefan Gohmann]

Hello,

the following patch solved the problem for me, but I don't think it is a good 
idea to disable the apr_pool_destroy call.

Cheers,
Stefan



Am Mittwoch, 21. März 2007 07:05 schrieb Stefan Gohmann:
> Hello,
>
> we have another mod_auth_ntlm_winbind problem (SIGSEGV) on SUN Solaris when
> ntlm_auth returned NT_STATUS_ACCOUNT_LOCKED_OUT.
>
> The part of the apache error_log file:
> [Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(411): [client
> 184.1.23.51] sending back
> TlRMTVNTUAACAAAABgAGADAAAAA1gokg2bFZvEET/loAAAAAAAAAAD4APgA2AAAATwBMAEIAAgA
>GAE8ATABCAAEAEgBaAFMAVABVAEQASQBPADEAMQAEAAAAAwASAHoAcwB0AHUAZABpAG8AMQAxAAA
>AAAA= [Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(1018):
> [client 184.1.23.51] doing ntlm auth dance
> [Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(484): [client
> 184.1.23.51] Using existing auth helper 4359
> samba-technical at samba.org
> [Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(703): [client
> 184.1.23.51] parsing reply from helper to KK
> TlRMTVNTUAADAAAAGAAYAGYAAABuAG4AfgAAAAYABgBIAAAADAAMAE4AAAAMAAwAWgAAAAAAAAD
>sAAAABYKIIgUBKAoAAAAPTwBMAEIAYgAxADIANAAyADUAUAAzADAAMAA0ADQAttQz/A1nDpy7X3W
>sql3O0DAIL9jTTkdM4RuvEkI6EfOm/nHh9SPUNAEBAAAAAAAA0hKxwkRixwEwCC/Y005HTAAAAAA
>CAAYATwBMAEIAAQASAFoAUwBUAFUARABJAE8AMQAxAAQAAAADABIAegBzAHQAdQBkAGkAbwAxADE
>AAAAAAAAAAAB=\n [Fri Mar 09 13:16:24 2007] [debug]
> mod_auth_ntlm_winbind.c(741): [client 184.1.23.51] got response: NA
> NT_STATUS_ACCOUNT_LOCKED_OUT
> [Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(765): [client
> 184.1.23.51] user not authenticated: NT_STATUS_ACCOUNT_LOCKED_OUT
> [Fri Mar 09 13:16:25 2007] [notice] child pid 4310 exit signal
> Segmentation fault (11), possible coredump in /usr/apache2
>
> The http.conf part:
> <Directory "/var/apache2/htdocs/auth">
> AuthName "NTLM Authentication thingy"
> NTLMAuth on
> NTLMAuthHelper "/usr/sfw/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
> -d 400"
> NTLMBasicAuthoritative on
> AuthType NTLM
> require valid-user
> </Directory>
>
>
> And the core dump output:
>
> ***************************************************************************
>*** Application core Dump Analysis Output                     MDeBug Rev 1.0
> Mon Mar 12 13:43:52 CET 2007                   Files:
> /usr/apache2/bin/httpd  core_zstudio11_httpd_80_80_1173702731_2290
>
> ***************************************************************************
>***
>
>
>
>                 ** Core file status **
>                 ------------------------
> debugging core file of httpd (32-bit) from zstudio11
> file: /usr/apache2/bin/httpd
> initial argv: /usr/apache2/bin/httpd -k start
> threading model: multi-threaded
> status: process terminated by SIGSEGV (Segmentation Fault)
>
>
>                 ** Thread stack($c) **
>                 ----------------------
> 0xff119260(223e0a3c, 7, f, 0, 4e7b30, fe523008)
> mod_auth_ntlm_winbind.so`check_user_id+0xf0(4e7b30, 4e8d1f, 10000,
> fffefeb4,
> fe533154, 4e1fd0)
> ap_run_check_user_id+0x3c(4e7b30, fe522008, 70254, 4d5448, 6, 7)
> ap_process_request_internal+0x27c(0, c1718, c1608, 7ce20, 0, 4e7b30)
> ap_process_request+0x40(4e7b30, 0, 4, 0, 6d400, 4e7b30)
> 0x26674(4e1bf0, 0, 4e1c48, 4e1b18, 6d73c, 0)
> ap_run_process_connection+0x3c(4e1bf0, 26604, 701ec, 4d5344, 1, 2)
> 0x2cfd0(4dfb80, 70400, ffbffb44, 6c7dc, 6c71c, 4e2e)
> 0x2d15c(2c800, 1, 6c400, 1, 6d400, 0)
> 0x2d1d4(4, 4ddaa8, 70400, 6c400, 6d734, 4)
> ap_mpm_run+0x1d0(6, 6c400, a, 6c400, 5, 6c704)
> main+0x878(3, 6c400, 7ce20, 55400, 6c638, 55400)
> _start+0x108(0, 0, 0, 0, 0, 0)
>
>
>
>                 Thread stack for MT app
>                 ------------------------
> stack pointer for thread 1: ffbff808
> [ ffbff808 0xff119260() ]
>   ffbff868 mod_auth_ntlm_winbind.so`check_user_id+0xf0()
>   ffbff8d0 ap_run_check_user_id+0x3c()
>   ffbff930 ap_process_request_internal+0x27c()
>   ffbff990 ap_process_request+0x40()
>   ffbff9f0 0x26674()
>   ffbffa58 ap_run_process_connection+0x3c()
>   ffbffab8 0x2cfd0()
>   ffbffb48 0x2d15c()
>   ffbffba8 0x2d1d4()
>   ffbffc08 ap_mpm_run+0x1d0()
>   ffbffc90 main+0x878()
>   ffbffd40 _start+0x108()
>
>
> Please let me know, if you need more information.
>
> Thanks in advance.
>
> Cheers
> Stefan

-- 
Stefan Gohmann         Entwicklung              gohmann at univention.de
Univention GmbH        Linux for your Business  fon: +49 421 22 232- 0
Mary-Somerville-Str.1  28359 Bremen             fax: +49 421 22 232-99
                       http://www.univention.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mod_auth_ntlm_winbind.c.patch
Type: text/x-diff
Size: 875 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20070322/e45ec76f/mod_auth_ntlm_winbind.c.bin