[Samba] One Winbind process goes defunct, the other eats memory

[Josh T]

I'm running Samba 3.0.2a via Debian stable binary packages from 
samba.org, joined to Windows 2000 ADS domain.  There was normally two 
running winbindd process after I installed Samba.  I've noticed after a 
couple of days of running, when I run top - one process went defunct and 
the other starts to slowly use up memory:

PID   USER  PRI NI SIZE  RSS SHARE STAT %CPU %MEM TIME COMMAND
28085 root  9   0  27148 26M 2192  S    0.0  2.6  1:39 winbindd
28086 root  9   0     0  0   0     Z    0.0  0.0  0:00 winbindd<defunct>

As far as I can tell, there is no loss of functionality - I can connect 
to the shares, wbinfo -p succeeds and I get valid results from wbinfo -u 
or -g.  /etc/init.d/winbind restart fixes the problem.  I can't find any 
info in the logs, but I get the following when I restart winbind:

[2004/04/27 08:35:09, 1] nsswitch/winbindd.c:main(843)
   winbindd version 3.0.2a started.
   Copyright The Samba Team 2000-2004
[2004/04/27 08:35:09, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)
   Added domain MYDOMAIN MYDOMAIN.local <snip sid>
[2004/04/27 08:35:09, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269)
   krb5_cc_get_principal failed (No credentials cache found)

net ads testjoin says OK - is that last message normal?

Here is my testparm output:
# Global parameters
[global]
         workgroup = MYDOMAIN
         realm = MYDOMAIN.LOCAL
         server string = %h server (Samba %v)
         security = ADS
         obey pam restrictions = Yes
         password server = DC1 DC2
         passwd program = /usr/bin/passwd %u
         passwd chat = *Enter\snew\sUNIX\spassword:* %n\n 
*Retype\snew\sUNIX\spassword:* %n\n .
         lanman auth = No
         ntlm auth = No
         client NTLMv2 auth = Yes
         client lanman auth = No
         client plaintext auth = No
         syslog = 0
         log file = /var/log/samba/log.%m
         max log size = 1000
         dns proxy = No
         wins server = 192.168.1.8
         ldap ssl = no
         panic action = /usr/share/samba/panic-action %d
         idmap uid = 10000-20000
         idmap gid = 10000-20000
         template homedir = /home/%D
         winbind separator = +
         invalid users = root
         hosts allow = 192.168.1., 127.

Thanks,
Josh