[Samba] PANIC: internal error; winbind daemon (3.0.4) crashes
Alex de Vaal
a.vaal at nh-hotels.com
Tue Jul 27 22:27:26 GMT 2004
Hello,
I'm using samba 3.0.4, compiled with Kerberos 1.3.1-7, in an W2k3 ADS
environment and Kerberos and the Winbind daemon are used for authentication.
While checking a winbindd.log file I saw the following PANIC internal error:
winbindd.log
=========
[2004/07/21 12:15:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
[2004/07/21 12:15:00, 1] libsmb/clikrb5.c:ads_krb5_mk_req(306)
krb5_cc_get_principal failed (No credentials cache found)
[2004/07/21 12:15:03, 1] libsmb/clikrb5.c:ads_krb5_mk_req(306)
krb5_cc_get_principal failed (No credentials cache found)
[2004/07/21 12:16:29, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
[2004/07/21 12:25:03, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
[cut]
[2004/07/21 22:01:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
[2004/07/21 22:05:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
[2004/07/21 22:15:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
[2004/07/21 22:15:01, 0] lib/fault.c:fault_report(36)
===============================================================
[2004/07/21 22:15:01, 0] lib/fault.c:fault_report(37)
INTERNAL ERROR: Signal 11 in pid 1317 (3.0.4)
Please read the appendix Bugs of the Samba HOWTO collection
[2004/07/21 22:15:01, 0] lib/fault.c:fault_report(39)
===============================================================
[2004/07/21 22:15:01, 0] lib/util.c:smb_panic2(1398)
PANIC: internal error
[2004/07/21 22:15:01, 0] lib/util.c:smb_panic2(1406)
BACKTRACE: 24 stack frames:
#0 winbindd(smb_panic2+0x128) [0x80c8d58]
#1 winbindd(smb_panic+0x19) [0x80c8c29]
#2 winbindd [0x80b6da2]
#3 /lib/tls/libc.so.6 [0x420275c8]
#4 winbindd [0x80e9624]
#5 winbindd [0x80e98f0]
#6 winbindd(cli_krb5_get_ticket+0x1da) [0x80e9cfa]
#7 winbindd(spnego_gen_negTokenTarg+0x41) [0x80ea991]
#8 winbindd [0x816c61f]
#9 winbindd [0x816c909]
#10 winbindd(ads_sasl_bind+0x132) [0x816d022]
#11 winbindd(ads_connect+0x1ac) [0x816798c]
#12 winbindd(ads_do_search_retry+0xd5) [0x816fc25]
#13 winbindd(ads_search_retry+0x3f) [0x816fecf]
#14 winbindd [0x8084ec8]
#15 winbindd [0x807960c]
#16 winbindd [0x8070ffe]
#17 winbindd(winbindd_getgrgid+0x365) [0x8071ef5]
#18 winbindd(strftime+0x13f3) [0x806e0d3]
#19 winbindd(winbind_process_packet+0x21) [0x806e3c1]
#20 winbindd(do_dual_daemon+0x14d) [0x8086a8d]
#21 winbindd(main+0x468) [0x806f238]
#22 /lib/tls/libc.so.6(__libc_start_main+0xe4) [0x42015574]
#23 winbindd(chroot+0x31) [0x806d8f1]
[2004/07/21 22:19:03, 1] libsmb/clikrb5.c:ads_krb5_mk_req(306)
krb5_cc_get_principal failed (No credentials cache found)
[2004/07/21 22:25:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
[2004/07/21 22:35:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
It seems that winbind crashed at the moment that a new kerberos ticket is
needed. At 12:15h a new kerberos ticket was applied and exactly 10 hours
later (at 22:15h) a new ticket must be applied and at that moment winbind
crashed obviously. After the PANIC message in winbindd.log everything
seemed to work properly and the samba server worked properly until today (7
days later) because it freezed the RHL9 server...
After a reboot Samba worked fine however...
Sometimes I see subjoined messages in the winbindd.log file, it seems that
sometimes winbind can't connect to the ADS server (the ADS server is on a
remote location and the connection is established via a 128 kb/s leased
line).
[2004/07/19 21:35:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
[2004/07/19 21:45:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
[2004/07/19 21:46:24, 0] lib/util_sock.c:write_socket_data(413)
write_socket_data: write failure. Error = Connection reset by peer
[2004/07/19 21:46:24, 0] lib/util_sock.c:write_socket(438)
write_socket: Error writing 262 bytes to socket 16: ERRNO = Connection
reset by peer
[2004/07/19 21:46:24, 0] libsmb/clientgen.c:cli_send_smb(155)
Error writing 262 bytes to client. -1 (Connection reset by peer)
[2004/07/19 21:46:24, 0] rpc_client/cli_pipe.c:rpc_api_pipe(424)
cli_pipe: return critical error. Error was Write error: Connection reset
by peer
[2004/07/19 21:46:47, 1] libads/ldap.c:ads_connect(222)
Failed to get ldap server info
[2004/07/19 21:46:58, 1] libsmb/cliconnect.c:cli_start_connection(1408)
failed negprot
[2004/07/19 21:47:06, 1] lib/util_sock.c:open_socket_out(757)
timeout connecting to 10.2.20.240:445
[2004/07/19 21:47:15, 1] lib/util_sock.c:open_socket_out(757)
timeout connecting to 10.2.20.240:139
[2004/07/19 21:47:15, 1] libsmb/cliconnect.c:cli_connect(1297)
Error connecting to 10.2.20.240 (Operation already in progress)
[2004/07/19 21:47:15, 1] libsmb/cliconnect.c:cli_start_connection(1377)
cli_full_connection: failed to connect to NHADM01<20> (10.2.20.240)
[2004/07/19 21:47:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(159)
user 'prisma-fo1$' does not exist
[2004/07/19 21:47:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(159)
user 'prisma-fo1$' does not exist
[2004/07/19 21:47:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(159)
user 'prisma-fo1$' does not exist
[2004/07/19 21:47:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(159)
user 'PRISMA-FO1$' does not exist
[2004/07/19 21:55:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
[2004/07/19 22:01:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
My smb.conf is like this (only global section):
[global]
workgroup = XXXX
realm = XXXX.COM
server string = %h server (Samba %v)
security = ADS
password server = adm03.XXX.com, adm01.XXX.com, *
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
unix password sync = Yes
log file = /var/log/samba/%m.log
max log size = 200
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
add user script = /usr/sbin/useradd -d /dev/null -g 100 -s
/bin/false -M %u
add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s
/bin/false -M %u
domain master = No
dns proxy = No
idmap uid = 10000-20000
idmap gid = 10000-20000
template homedir = /data/hom/%U
template shell = /bin/bash
printer admin = root, '@XXXX.COM\Domain Admins',
@XXXX.COM\DEP_ADMIN_GERMANY
oplocks = No
level2 oplocks = No
My krb5.conf file is like this:
[libdefaults]
dns_fallback = true
--
Regards,
Alex de Vaal.
Visit our Web site: http://www.nh-hotels.com
This message is from NH HOTELES and it is private and confidential.
Its content may be legally protected.Reception by a non-intended person does not waive legal protection rights.
If you receive this message by mistake, please delete it from your system and report the sender.
Although this message has been cleared for viruses using currently available virus definitions before sending,
it is the responsibility of the receiver to ensure it is virus-free.Thank you.
More information about the samba
mailing list