[Samba] pwdMustChange Problem (PANIC: failed to set gid)

[Georg Glas]

Hi Folks .. 

Running samba-2.2.7 in Daemon Mode with LDAP; When the user tries to logon and 
he is forced to change password (via pwdMustChange==0) i get "1727: RPC Call 
failed" on a Windows XP Machine (de); In the logs i can see that i get an 
smb_panic(1094) while the child tries to set gid to 65534 (nogroup); well wy 
does it try to force a chgid to 65534, when changing password ?  I guess the 
problem is somewhere around [2003/01/22 12:00:44, 3] 
smbd/sec_ctx.c:get_current_groups(172) where the result of get gid == -1 ? 
wich looks very strange to me .. 

is i ask nss what gid belongs to this user i get:
glas at intern:/var/log/samba$ id
uid=1087(glas) gid=100(users) groups=100(users),200(Domain Admins)
which is correct .. 

If the user profile is copied (roaming profiles) and the logon script is run, 
the user can changes its password using crtl-alt-del it works perfect .. 

if i try to change the password via smbpasswd -r logon-grz -U glas it works to 
.. the problem seems only to occure before the profile is written to the 
client .. 

even as Domain Admin or via Uid 0 (yust for testing purposes) it does not work 
.. ;-( .. 

------ SNIP ------
2003/01/22 12:00:29, 3] rpc_server/srv_util.c:get_domain_user_groups(192)
  domain admin group access  512/7  granted
[2003/01/22 12:00:29, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 4792
[2003/01/22 12:00:29, 3] smbd/pipes.c:reply_pipe_write_and_X(198)
  writeX-IPC pnum=70a1 nwritten=282
[2003/01/22 12:00:29, 3] smbd/process.c:process_smb(878)
  Transaction 4975 of length 63
[2003/01/22 12:00:29, 3] smbd/process.c:switch_message(685)
  switch message SMBreadX (pid 10502)
[2003/01/22 12:00:29, 3] smbd/pipes.c:reply_pipe_read_and_X(239)
  readX-IPC pnum=70a1 min=1024 max=1024 nread=588
[2003/01/22 12:00:43, 3] smbd/process.c:process_smb(878)
  Transaction 4976 of length 93
[2003/01/22 12:00:43, 3] smbd/process.c:switch_message(685)
  switch message SMBntcreateX (pid 10502)
[2003/01/22 12:00:43, 3] smbd/nttrans.c:nt_open_pipe(559)
  nt_open_pipe: Known pipe samr opening.
[2003/01/22 12:00:43, 3] smbd/process.c:process_smb(878)
  Transaction 4977 of length 198
[2003/01/22 12:00:43, 3] smbd/process.c:switch_message(685)
  switch message SMBwriteX (pid 10502)
[2003/01/22 12:00:43, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(751)
  api_pipe_bind_req: \PIPE\samr -> \PIPE\lsass
[2003/01/22 12:00:43, 3] smbd/pipes.c:reply_pipe_write_and_X(198)
  writeX-IPC pnum=70a3 nwritten=130
[2003/01/22 12:00:43, 3] smbd/process.c:process_smb(878)
  Transaction 4978 of length 63
[2003/01/22 12:00:43, 3] smbd/process.c:switch_message(685)
  switch message SMBreadX (pid 10502)
[2003/01/22 12:00:43, 3] smbd/pipes.c:reply_pipe_read_and_X(239)
  readX-IPC pnum=70a3 min=1024 max=1024 nread=116
[2003/01/22 12:00:43, 3] smbd/process.c:process_smb(878)
  Transaction 4979 of length 169
[2003/01/22 12:00:43, 3] smbd/process.c:switch_message(685)
  switch message SMBwriteX (pid 10502)
[2003/01/22 12:00:43, 3] smbd/sec_ctx.c:push_sec_ctx(297)
  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2003/01/22 12:00:43, 3] smbd/uid.c:push_conn_ctx(286)
  push_conn_ctx(104) : conn_ctx_stack_ndx = 0
[2003/01/22 12:00:43, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/01/22 12:00:44, 3] smbd/sec_ctx.c:get_current_groups(172)
  get_current_groups: user is in 2 groups: -1, 202
[2003/01/22 12:00:44, 3] smbd/sec_ctx.c:pop_sec_ctx(436)
  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2003/01/22 12:00:44, 0] lib/util_sec.c:assert_gid(114)
  Failed to set gid privileges to (0,65534) now set to (0,-1) uid=(0,65534)
[2003/01/22 12:00:44, 0] lib/util.c:smb_panic(1094)
  PANIC: failed to set gid
------ SNIP ------

mfg.
Georg Glas