[Samba] Overloaded winbind
Edward L. Hannaford
elhannaford at psfinc.com
Tue Aug 31 19:42:43 GMT 2004
I'm running Samba 3.0.4 on Red Hat Enterprise ES v3 (Update 2), utilizing ACLs on ext3. Yesterday I discovered that my backup application (Galaxy 5.0) doesn't back up ACLs and won't until the next release (sometime this fall). I figured that I'd do a "poor man's backup" of the ACLs by running "getfacl -R --absolute-names /shares > /root/acls" on a daily basis. Then, in the event of a catastrophic loss, I could use "setfacl --restore=/root/acls" to restore my ACLs.
However, the /shares directory has tens, if not hundreds, of thousands of files and directories. When I ran the getfacl command it took about a half-hour to complete and created a 140MB text file of all the ACLs. That's not bad in and of itself - I have the disk space for it - but apparently getfacl uses winbind to resolve the uids and gids assigned to files and directories (makes sense) and I apparently overloaded it. Here's the significant piece of winbindd.log (I ran the getfacl command between 17:30 and 18:00):
winbindd.log:
[2004/08/30 17:33:21, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:21, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-8107
[2004/08/30 17:33:21, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-8107
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:33:22, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:34:54, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(298)
group sys in domain WALIFILE does not exist
[2004/08/30 17:37:07, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-8107
[2004/08/30 17:39:17, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:39:17, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:39:17, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:39:17, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:39:17, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:39:17, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:39:17, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:39:17, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1414
[2004/08/30 17:39:37, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(246)
could not lookup sid S-1-5-21-1482476501-261478967-1177238915-1241
[2004/08/30 17:39:54, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(298)
group sys in domain WALIFILE does not exist
[2004/08/30 17:40:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
free(): invalid pointer 0xbfffb2b8!
[2004/08/30 17:44:01, 0] tdb/tdbutil.c:tdb_log(725)
free(): invalid pointer 0xbfffaf78!
tdb(/var/cache/samba/winbindd_cache.tdb): tdb_alloc_read malloc failed len=9926 (Cannot allocate memory)
[2004/08/30 17:44:01, 1] libsmb/clikrb5.c:cli_krb5_get_ticket(376)
krb5_init_context failed (Cannot allocate memory)
free(): invalid pointer 0xbfffae68!
[2004/08/30 17:44:01, 0] libads/kerberos.c:ads_kinit_password(136)
free(): invalid pointer 0xbfffab28!
kerberos_kinit_password HOST/walifile at PSFINC.COM failed: Cannot allocate memory
[2004/08/30 17:44:01, 1] libads/ldap_utils.c:ads_do_search_retry(77)
ads_search_retry: failed to reconnect (Cannot allocate memory)
[2004/08/30 17:44:01, 1] nsswitch/winbindd_ads.c:lookup_groupmem(702)
ads: lookup_groupmem ads_search: Cannot allocate memory
[2004/08/30 17:44:01, 1] nsswitch/winbindd_group.c:fill_grent_mem(133)
could not lookup membership for group rid S-1-5-21-1482476501-261478967-1177238915-1336 in domain PSFINC (error: NT_STATUS_UNSUCCESSFUL)
[2004/08/30 17:44:01, 1] nsswitch/winbindd_group.c:fill_grent_mem(133)
could not lookup membership for group rid S-1-5-21-1482476501-261478967-1177238915-1336 in domain PSFINC (error: NT_STATUS_UNSUCCESSFUL)
[2004/08/30 17:44:42, 1] nsswitch/winbindd_group.c:fill_grent_mem(133)
could not lookup membership for group rid S-1-5-21-1482476501-261478967-1177238915-1336 in domain PSFINC (error: NT_STATUS_UNSUCCESSFUL)
[2004/08/30 17:44:42, 1] nsswitch/winbindd_group.c:fill_grent_mem(133)
could not lookup membership for group rid S-1-5-21-1482476501-261478967-1177238915-1336 in domain PSFINC (error: NT_STATUS_UNSUCCESSFUL)
[2004/08/30 17:44:42, 1] nsswitch/winbindd_group.c:fill_grent_mem(133)
could not lookup membership for group rid S-1-5-21-1482476501-261478967-1177238915-1336 in domain PSFINC (error: NT_STATUS_UNSUCCESSFUL)
winbindd: ../../../libraries/liblber/sockbuf.c:635: sb_rdahead_read: Assertion `p->buf_size > 0' failed.
[2004/08/30 17:44:49, 0] lib/fault.c:fault_report(36)
free(): invalid pointer 0xbfffa4fc!
===============================================================
[2004/08/30 17:44:49, 0] lib/fault.c:fault_report(37)
free(): invalid pointer 0xbfffa4fc!
INTERNAL ERROR: Signal 6 in pid 3002 (3.0.4-6.3E)
free(): invalid pointer 0xbfffa4fc!
Please read the appendix Bugs of the Samba HOWTO collection
[2004/08/30 17:44:49, 0] lib/fault.c:fault_report(39)
free(): invalid pointer 0xbfffa4fc!
===============================================================
The "invalid pointer" and "Cannot allocate memory" errors lead me to believe that I "overloaded" winbind. Again, this makes a certain sense; I was certainly stress-testing it! Can anyone recommend a way to configure winbind so that this getfacl command will work without causing winbind to crash?
-Edward L. Hannaford
More information about the samba
mailing list