[Samba] Cannot change password on HP-UX: PANIC: failed to set gid, INTERNAL ERROR

Alexander Skwar not-NOSPAM-from at email-server.info
Tue Feb 24 09:34:16 GMT 2004


Hello.

I'm having some difficulties with Samba 3.0.2a on a HP-UX 11.00 machine.
I compiled Samba with gcc:

vz6tml_tc51:/u/vz6tml/tmp/tc51-misc/Source/Samba/samba-3.0.2a/source/ > /usr/local/bin/gcc --version
gcc (GCC) 3.3.1
Copyright (C) 2003 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
vz6tml_tc51:/u/vz6tml/tmp/tc51-misc/Source/Samba/samba-3.0.2a/source/ > uname -a
HP-UX tc51 B.11.00 A 9000/785 2003669075 two-user license

When I run smbpasswd as a user to change the password, I'm getting the
following messages in log.smbd:

################################################################################
[...]
[2004/02/24 10:07:01.907161, 10, pid=7813, effective(0, 0), real(0, 0)] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)
  pdb_set_group_sid_from_rid:
        setting group sid S-1-5-21-2073086230-3380733499-3392870098-514 from rid 514
[2004/02/24 10:07:01.907312, 11, pid=7813, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:pdb_get_init_flags(199)
  element 20: DEFAULT
[2004/02/24 10:07:01.907514, 3, pid=7813, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/02/24 10:07:01.908197, 10, pid=7813, effective(0, 0), real(0, 0)] lib/system_smbd.c:sys_getgrouplist(113)
  sys_getgrouplist: user [nobody]
[2004/02/24 10:07:01.908372, 10, pid=7813, effective(0, 0), real(0, 0)] lib/system_smbd.c:sys_getgrouplist(122)
  sys_getgrouplist(): disabled winbindd for group lookup [user == nobody]
[2004/02/24 10:07:01.908483, 3, pid=7813, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2004/02/24 10:07:01.908588, 3, pid=7813, effective(0, 0), real(0, 0)] smbd/uid.c:push_conn_ctx(287)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2004/02/24 10:07:01.908689, 3, pid=7813, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/02/24 10:07:01.908791, 5, pid=7813, effective(0, 0), real(0, 0)] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2004/02/24 10:07:01.908888, 5, pid=7813, effective(0, 0), real(0, 0)] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2004/02/24 10:07:01.944528, 0, pid=7813, effective(0, 0), real(0, 0)] lib/util_sec.c:assert_gid(113)
  Failed to set gid privileges to (-1,-2) now set to (0,0) uid=(0,0)
[2004/02/24 10:07:01.944717, 0, pid=7813, effective(0, 0), real(0, 0)] lib/util.c:smb_panic(1400)
  PANIC: failed to set gid

[2004/02/24 10:07:01.945014, 0, pid=7813, effective(0, 0), real(0, 0)] lib/fault.c:fault_report(36)
  ===============================================================
[2004/02/24 10:07:01.945129, 0, pid=7813, effective(0, 0), real(0, 0)] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 6 in pid 7813 (3.0.2a)
  Please read the appendix Bugs of the Samba HOWTO collection
[2004/02/24 10:07:01.945260, 0, pid=7813, effective(0, 0), real(0, 0)] lib/fault.c:fault_report(39)
  ===============================================================
[2004/02/24 10:07:01.945370, 0, pid=7813, effective(0, 0), real(0, 0)] lib/util.c:smb_panic(1400)
  PANIC: internal error
################################################################################

As root, I can change/set passwords just fine.

There's no core file created - I did a 'find /opt/samba3.0.2a/. -type f
-name "core*"'.

I'm getting this error on multiple machines, not just the "tc51" host.

What can I do?

################################################################################

root_tc51:/opt/samba3.0.2a/ > /opt/samba3.0.2a/bin/testparm
Load smb config files from /opt/samba3.0.2a/lib/smb.conf
Processing section "[caxshare]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

# Global parameters
[global]
        workgroup = EUROPE
        server string = MCAD CIFS Server on %h
        security = SERVER
        log level = 100
        max log size = 4096
        debug hires timestamp = Yes
        debug pid = Yes
        debug uid = Yes
        load printers = No

[caxshare]
        comment = CAx Shares
        path = /usr/local/samba/shares/caxshare
        write list = @sysadmin
        guest ok = Yes
        fstype = Samba

root_tc51:/opt/samba3.0.2a/ > /opt/samba3.0.2a/bin/testparm -vs
Load smb config files from /opt/samba3.0.2a/lib/smb.conf
Processing section "[caxshare]"
Loaded services file OK.
# Global parameters
[global]
        dos charset = CP850
        unix charset = UTF-8
        display charset = LOCALE
        workgroup = EUROPE
        netbios name = TC51
        netbios aliases =
        netbios scope =
        server string = MCAD CIFS Server on %h
        interfaces =
        bind interfaces only = No
        security = SERVER
        auth methods =
        encrypt passwords = Yes
        update encrypted = No
        client schannel = Auto
        server schannel = Auto
        allow trusted domains = Yes
        hosts equiv =
        min passwd length = 5
        map to guest = Never
        null passwords = No
        obey pam restrictions = No
        password server = *
        smb passwd file = /opt/samba3.0.2a/private/smbpasswd
        private dir = /opt/samba3.0.2a/private
        passdb backend = smbpasswd
        algorithmic rid base = 1000
        root directory =
        guest account = nobody
        pam password change = No
        passwd program =
        passwd chat = *new*password* %n\n *new*password* %n\n *changed*
        passwd chat debug = No
        passwd chat timeout = 2
        username map =
        password level = 0
        username level = 0
        unix password sync = No
        restrict anonymous = 0
        lanman auth = Yes
        ntlm auth = Yes
        client NTLMv2 auth = No
        client lanman auth = Yes
        client plaintext auth = Yes
        preload modules =
        log level = 100
        syslog = 1
        syslog only = No
        log file =
        max log size = 4096
        timestamp logs = Yes
        debug hires timestamp = Yes
        debug pid = Yes
        debug uid = Yes
        smb ports = 445 139
        protocol = NT1
        large readwrite = Yes
        max protocol = NT1
        min protocol = CORE
        unicode = Yes
        read bmpx = No
        read raw = Yes
        write raw = Yes
        disable netbios = No
        acl compatibility =
        nt pipe support = Yes
        nt status support = Yes
        announce version = 4.9
        announce as = NT
        max mux = 50
        max xmit = 16644
        name resolve order = lmhosts wins host bcast
        max ttl = 259200
        max wins ttl = 518400
        min wins ttl = 21600
        time server = No
        unix extensions = Yes
        use spnego = Yes
        client signing = auto
        server signing = No
        client use spnego = Yes
        change notify timeout = 60
        deadtime = 0
        getwd cache = Yes
        keepalive = 300
        kernel change notify = Yes
        lpq cache time = 10
        max smbd processes = 0
        paranoid server security = Yes
        max disk size = 0
        max open files = 10000
        socket options = TCP_NODELAY
        use mmap = No
        hostname lookups = No
        name cache timeout = 660
        load printers = No
        printcap name = /etc/printcap
        disable spoolss = No
        enumports command =
        addprinter command =
        deleteprinter command =
        show add printer wizard = Yes
        os2 driver map =
        mangling method = hash2
        mangle prefix = 1
        stat cache = Yes
        machine password timeout = 604800
        add user script =
        delete user script =
        add group script =
        delete group script =
        add user to group script =
        delete user from group script =
        set primary group script =
        add machine script =
        shutdown script =
        abort shutdown script =
        logon script =
        logon path = \\%N\%U\profile
        logon drive =
        logon home = \\%N\%U
        domain logons = No
        os level = 20
        lm announce = Auto
        lm interval = 60
        preferred master = Auto
        local master = Yes
        domain master = Auto
        browse list = Yes
        enhanced browsing = Yes
        dns proxy = Yes
        wins proxy = No
        wins server =
        wins support = No
        wins hook =
        wins partners =
        kernel oplocks = Yes
        lock spin count = 3
        lock spin time = 10
        oplock break wait time = 0
        ldap suffix =
        ldap machine suffix =
        ldap user suffix =
        ldap group suffix =
        ldap idmap suffix =
        ldap filter = (uid=%u)
        ldap admin dn =
        ldap ssl =
        ldap passwd sync = no
        ldap delete dn = No
        ldap replication sleep = 1000
        add share command =
        change share command =
        delete share command =
        config file =
        preload =
        lock directory = /opt/samba3.0.2a/var/locks
        pid directory = /opt/samba3.0.2a/var/locks
        utmp directory =
        wtmp directory =
        utmp = No
        default service =
        message command =
        dfree command =
        get quota command =
        set quota command =
        remote announce =
        remote browse sync =
        socket address = 0.0.0.0
        homedir map =
        afs username map =
        time offset = 0
        NIS homedir = No
        panic action =
        host msdfs = No
        enable rid algorithm = Yes
        idmap backend =
        idmap uid =
        idmap gid =
        template primary group = nobody
        template homedir = /home/%D/%U
        template shell = /bin/false
        winbind separator = \
        winbind cache time = 300
        winbind enable local accounts = Yes
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = No
        winbind trusted domains only = No
        comment =
        path =
        username =
        invalid users =
        valid users =
        admin users =
        read list =
        write list =
        printer admin =
        force user =
        force group =
        read only = Yes
        create mask = 0744
        force create mode = 00
        security mask = 0777
        force security mode = 00
        directory mask = 0755
        force directory mode = 00
        directory security mask = 0777
        force directory security mode = 00
        inherit permissions = No
        inherit acls = No
        guest only = No
        guest ok = No
        only user = No
        hosts allow =
        hosts deny =
        nt acl support = Yes
        profile acls = No
        map acl inherit = No
        afs share = No
        block size = 1024
        max connections = 0
        min print space = 0
        strict allocate = No
        strict sync = No
        sync always = No
        use sendfile = No
        write cache size = 0
        max reported print jobs = 0
        max print jobs = 1000
        printable = No
        printing = hpux
        print command = lp -c -d%p %s; rm %s
        lpq command = lpstat -o%p
        lprm command = cancel %p-%j
        lppause command =
        lpresume command =
        queuepause command = disable %p
        queueresume command = enable %p
        printer name =
        use client driver = No
        default devmode = No
        default case = lower
        case sensitive = No
        preserve case = Yes
        short preserve case = Yes
        mangle case = No
        mangling char = ~
        hide dot files = Yes
        hide special files = No
        hide unreadable = No
        hide unwriteable files = No
        delete veto files = No
        veto files =
        hide files =
        veto oplock files =
        map system = No
        map hidden = No
        map archive = Yes
        mangled names = Yes
        mangled map =
        browseable = Yes
        blocking locks = Yes
        csc policy = manual
        fake oplocks = No
        locking = Yes
        oplocks = Yes
        level2 oplocks = Yes
        oplock contention limit = 2
        posix locking = Yes
        strict locking = Yes
        share modes = Yes
        copy =
        include =
        exec =
        preexec close = No
        postexec =
        root preexec =
        root preexec close = No
        root postexec =
        available = Yes
        volume =
        fstype = NTFS
        set directory = No
        wide links = Yes
        follow symlinks = Yes
        dont descend =
        magic script =
        magic output =
        delete readonly = No
        dos filemode = No
        dos filetimes = No
        dos filetime resolution = No
        fake directory create times = No
        vfs objects =
        msdfs root = No
        msdfs proxy =

[caxshare]
        comment = CAx Shares
        path = /usr/local/samba/shares/caxshare
        write list = @sysadmin
        guest ok = Yes
        fstype = Samba

Thanks a lot,

Alexander Skwar
-- 
Sind Schäfchens Locken schwarz und braun,
dann lehnt es am Elektrozaun.
Und wenn es mit den Äuglein rollt,
dann will es sagen: "Zuviel Volt!"



More information about the samba mailing list