"Bad talloc magic value" [Was: Upgrade from S3 to a Samba4 DC]

[Andrew Bartlett]

On Thu, 2011-10-27 at 08:52 -0400, Adam Tauno Williams wrote:
> Quoting Adam Tauno Williams <awilliam at whitemice.org>:
> > Quoting Adam Tauno Williams <awilliam at whitemice.org>:
> >> On Tue, 2011-09-20 at 08:16 -0700, Andrew Bartlett wrote:
> >>> On Mon, 2011-09-19 at 22:20 +0200, Pavel Herrmann wrote:
> >>>> On Monday 19 of September 2011 16:03:20 Adam Tauno Williams wrote:
> >>>> > Quoting Adam Tauno Williams <awilliam at whitemice.org>:
> >>>> > linux-hvej:~ # /opt/s4/sbin/samba-tool user setpassword administrator
> >>>> > New Password:
> >>>> > Changed password OK
> >>>> >   --- kinit says my password expired, and can't change it (???
> >>>> > linux-hvej:~ # kinit administrator at MICORE.US
> >>>> > Password for administrator at MICORE.US:
> >>>> > Password expired.  You must change it now.
> >>>> > Enter new password:
> >>>> > Enter it again:
> >>>> > kinit: Password has expired while getting initial credentials
> >>>> you can try setting passwords to never expir
> >>>> samba-tool pwsettings set --max-pwd-age=0
> >>> If this is required, it means that the password polices were not
> >>> upgraded correctly.  This was a bug in earlier versions of this tool,
> >>> but I thought it had been fixed.
> >>> If this is still happening with current GIT, can you get me the ldif of
> >>> your domain object?  I want to check that the maxPwdAge is is negative
> >>> nanoseconds, not positive seconds.  (NTTIME vs unix time).
> >> I'll update my git, rebuild, and import again [hopefully today, but it
> >> may take a couple of days]/
> > I finally got back to my AD migration.  After pulling the git and  
> > rebuilding the import now fails completely.
> > linux-hvej:~ # samba-tool domain samba3upgrade --dbdir=/tmp/x   
> > /tmp/x/smb.conf
> > Reading smb.conf
> > Provisioning
> > no talloc stackframe around, leaking memory
> > Exporting account policy
> > Exporting groups
> > talloc: access after free error - first free may be at ?? [wonky characters]
> > Bad talloc magic value - access after free
> > Aborted
> > 4.0.0alpha18-GIT-1d53109
> 
> It I change debug level to 10 I can capture the attached output.

We should never abort, but this looks wrong:

Finding user barbel$
Trying _Get_Pwnam(), username as lowercase is barbel$
Trying _Get_Pwnam(), username as uppercase is BARBEL$
Checking combinations of 0 uppercase letters in barbel$
Get_Pwnam_internals didn't find user [barbel$]!

Does that user exist as a posix user in your LDAP directory?  in Samba3,
every Samba user *must* also appear via 'getent passwd <user>'.  

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org