[samba] ldapsam:trusted = yes kills smbd

[Daniel Wilson]

Hi!

i did an bash# strace ./smbd -d 10 -i 2 >/tmp/smbd-strace.txt


available at:

http://www.sunderland.ac.uk/~ws0dwi/smbd-strace.txt


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Daniel Wilson
Systems Administrator

IT & Communications Service
University of Sunderland
Unit1 Technology Park
Chester Road
Sunderland
SR2 7PT

Tel: 0191 515 2695

This e-mail contains information which is confidential and may be 
privileged and is for the exclusive use of the recipient. 
It is the responsibility of the recipient to ensure that this message 
and its attachments are virus free. 
Any views or opinions presented are solely those of the author and do 
not necessarily represent those of the University, unless otherwise 
specifically
stated. 

----- Original Message -----
From: Jeremy Allison <jra at samba.org>
Date: Thursday, September 29, 2005 9:50 pm
Subject: Re: [samba] ldapsam:trusted = yes kills smbd

> On Thu, Sep 29, 2005 at 09:55:29PM +0100, Daniel Wilson wrote:
> > Hi,
> > 
> > we want to use ldapsam:trusted=yes to improve performace as 
> nss_ldap 
> > is killing our ldap server doing enumeration.
> > 
> > once i enable it smbd dies silently...
> > 
> > 
> > this is the last part of a ./smbd -d 10 -i
> > 
> > NT user token: (NULL)
> > UNIX token of user 0
> > Primary group is 0 and contains 0 supplementary groups
> > smbldap_search: base => 
> > [ou=groups,ou=filestore,dc=sunderland,dc=ac,dc=uk], filt
> > er => [(&(objectClass=posixGroup)(|(memberUid=nobody)
> > (gidNumber=65533)))], scope
> >  => [2]
> > primary group of [nobody] not found
> > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> > get_user_groups_from_local_sam failed
> > attempting to free (and zero) a server_info structure
> > attempting to free (and zero) a server_info structure
> > /tmp/dan lines 520-538/538 (END) 
> > 
> > however i do have a group called nobody with gidNumber of 65533 
> and 
> > nobody as a memberUid, when i run the smbldap_search query i do 
> get a 
> > result!
> > 
> > my nobody user in ldap has a gidNumber of 65533 too!
> > 
> > Help would be appreciated!
> 
> Any chance of tracing it using strace ? That would tell us
> what was causing it to abort.
> 
> Jeremy.
>