Add new user -> swat core dump

[Pierre Dehaen]

Hi there,

I have a problem when I try to create a new user with swat. I use binaries of 
Samba 2.2.2 coming from www.samba.org, or from www.sunfreeware.com 
on Solaris 2.6 and on 8. I compiled the sources and the result is the same.

When I click on "Add New User"  (Server Password Management), I receive 
a nearly blank page: I can only see the samba gif on top and the user is not 
created in the smbpasswd file. The source of that html page ends with:

...
<input type=submit name=chg_s_passwd_flag value="Change Password">
<input type=submit name=add_user_flag value="Add New User">
<input type=submit name=delete_user_flag value="Delete User">
<input type=submit name=disable_user_flag value="Disable User">
<input type=submit name=enable_user_flag value="Enable User">
<p></FORM>



This problem does not appear when I use a non existing unix user (I receive 
the same page back with an error messages), nor when I change the 
password of an existing samba user, or whatever.

On the Solaris box, I can find a core file in the swat directory. If I truss (see 
the system calls) the inetd process and its childs, I see at the end:

...[27542 is the swat PID]...
27542:	open64("/usr/local/samba/private/smbpasswd", O_RDONLY) = 5
27542:	sigaction(SIGALRM, 0xEFFFEF98, 0x00000000)      = 0
27542:	alarm(5)                                        = 300
27542:	fcntl(5, F_SETLKW64, 0xEFFFF0A8)                = 0
27542:	alarm(0)                                        = 5
27542:	sigaction(SIGALRM, 0xEFFFEF98, 0x00000000)      = 0
27542:	fchmod(5, 0600)                                 = 0
27542:	read(5, " #   S a m b a   S M B  ".., 1024)     = 1024
27542:	read(5, " 5 C F A 4 E 6 5 D 6 6 2".., 1024)     = 1024
27542:	read(5, " 0 E 4 0 1 C : 7 9 7 D E".., 1024)     = 1024
27542:	read(5, " A B 8 0 1 4 6 F 5 7 4 9".., 1024)     = 1024
27542:	read(5, " 1 E 3 :\n m a r c e l p".., 1024)     = 1024
27542:	read(5, " [ U                    ".., 1024)     = 1024
27542:	read(5, " A 1 D 1 9 C 8 8 5 7 A 9".., 1024)     = 1024
27542:	read(5, " 4 3 5 B 5 1 4 0 4 E E :".., 1024)     = 1024
27542:	read(5, " F F 2 7 6 E 3 D 9 2 C A".., 1024)     = 1024
27542:	read(5, " a i : 1 4 1 : 0 1 2 3 7".., 1024)     = 204
27542:	read(5, 0x0014E074, 1024)                       = 0
27542:	sigaction(SIGALRM, 0xEFFFF0C8, 0x00000000)      = 0
27542:	alarm(5)                                        = 0
27542:	fcntl(5, F_SETLKW64, 0xEFFFF1D8)                = 0
27542:	alarm(0)                                        = 5
27542:	sigaction(SIGALRM, 0xEFFFF0C8, 0x00000000)      = 0
27542:	llseek(5, 0, SEEK_CUR)                          = 9420
27542:	close(5)                                        = 0
27542:	Incurred fault #6, FLTBOUNDS  %pc = 0x00099A90
27542:	siginfo: SIGSEGV SEGV_MAPERR addr=0x000000E9
27542:	Received signal #11, SIGSEGV [caught]
27542:	siginfo: SIGSEGV SEGV_MAPERR addr=0x000000E9
27542:	time()                                          = 1006354606
27542:	time()                                          = 1006354606
27542:	umask(022)                                      = 022
27542:	open64("", O_WRONLY|O_CREAT|O_TRUNC, 0666)      Err#2 
ENOENT
27542:	umask(022)                                      = 022
27542:	umask(022)                                      = 022
...[the last lines repeated several times]...
27542:	open64("", O_WRONLY|O_CREAT|O_TRUNC, 0666)      Err#2 
ENOENT
27542:	umask(022)                                      = 022
27542:	sigaction(SIGABRT, 0x00000000, 0xEFFFEA90)      = 0
27542:	write(1, " H T T P / 1 . 0   2 0 0".., 1696)    = 1696
27542:	sigaction(SIGABRT, 0xEFFFE960, 0xEFFFE9E0)      = 0
27542:	sigprocmask(SIG_UNBLOCK, 0xEFFFEA10, 0x00000000) = 0
27542:	getpid()                                        = 27542 [171]
27542:	kill(27542, SIGABRT)                            = 0
27542:	Received signal #6, SIGABRT [default]
27542:	siginfo: SIGABRT pid=27542 uid=0
27542:	*** process killed ***
171:	Received signal #18, SIGCLD, in poll() [caught]
171:	siginfo: SIGCLD CLD_DUMPED pid=27542 status=0x0006
...[171 is the inetd PID]...


Help would be appreciated,
Pierre
PS: It worked fine with 2.0.7 in the past.