[Samba] Samba 3.0.21b winbind crash

Thomas Limoncelli limoncelli at web.de
Wed Feb 22 00:07:32 GMT 2006 

I'm using Samba 3.0.21b on SuSE 9.3 Pro (x86) with the binary RPMs from samba.org/suse.com (3.0.21b-1.1.2-SUSE-SL9.3) on a Domain Member Server in ADS mode with winbind against W2K3 SP1 AD servers and idmap uids/gids stored in a central OpenLDAP directory.

Unfortunately, winbind gives me a hard time and reproducibly dies with a PANIC on a "wbinfo -g", although I think I've followed TOSHARG's and S3bE's advices and have used it successfully in similar environments (although not with 3.0.21b) in the past. Can anyone shed some light on this? Below please find my smb.conf and level 10 log.winbindd (both slightly obfuscated to protect the innocent, but not mangled in any other way). I can provide Ethereal traces privately on request.

- --- smb.conf ---
[global]
        realm = YYY.DE
        workgroup = XXX
        security = ADS
        wins server = 172.16.1.1, 172.16.1.2
        interfaces = 10.23.207.11
        bind interfaces only = Yes
        ldap admin dn = cn=root,dc=yyy,dc=de
        ldap idmap suffix = ou=Idmap
        ldap suffix = dc=yyy,dc=de
        idmap backend = ldap:ldap://openldap
        idmap uid = 10500-20000
        idmap gid = 10500-20000
        winbind use default domain = Yes
        log level = 1 winbind:10

- --- log.winbindd ---
2006/02/22 00:29:44, 1] nsswitch/winbindd.c:main(979)
  winbindd version 3.0.21b-1.1.2-SUSE-SL9.3 started.
  Copyright The Samba Team 2000-2004
[2006/02/22 00:29:44, 2] nsswitch/winbindd_util.c:add_trusted_domain(174)
  Added domain XXX YYY.DE S-1-5-21-1004849351-3390790938-2803357102
[2006/02/22 00:29:44, 2] nsswitch/winbindd_util.c:add_trusted_domain(174)
  Added domain BUILTIN  S-1-5-32
[2006/02/22 00:29:44, 2] nsswitch/winbindd_util.c:add_trusted_domain(174)
  Added domain MYSERVER  S-1-5-21-4017196506-4081282237-3136230588
[2006/02/22 00:29:44, 10] nsswitch/winbindd_util.c:open_winbindd_socket(911)
  open_winbindd_socket: opened socket fd 12
[2006/02/22 00:29:44, 10] nsswitch/winbindd_util.c:open_winbindd_priv_socket(923)
  open_winbindd_priv_socket: opened socket fd 14
[2006/02/22 00:29:46, 5] nsswitch/winbindd_dual.c:async_reply_recv(192)
  Could not receive async reply
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 13
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(471)
  [    0]: request interface version
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(504)
  [    0]: request location of privileged pipe
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 17
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn GID_TO_SID
[2006/02/22 00:30:01, 3] nsswitch/winbindd_sid.c:winbindd_gid_to_sid(406)
  [    0]: gid to sid 65533
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 13
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(471)
  [    0]: request interface version
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(504)
  [    0]: request location of privileged pipe
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 17
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn UID_TO_SID
[2006/02/22 00:30:01, 3] nsswitch/winbindd_sid.c:winbindd_uid_to_sid(279)
  [    0]: uid to sid 0
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn GID_TO_SID
[2006/02/22 00:30:01, 3] nsswitch/winbindd_sid.c:winbindd_gid_to_sid(406)
  [    0]: gid to sid 0
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 13
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(471)
  [    0]: request interface version
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(504)
  [    0]: request location of privileged pipe
2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 18
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn GETGROUPS
[2006/02/22 00:30:01, 3] nsswitch/winbindd_group.c:winbindd_getgroups(925)
  [    0]: getgroups root
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 13
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(471)
  [    0]: request interface version
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(504)
  [    0]: request location of privileged pipe
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 20
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn GETGROUPS
[2006/02/22 00:30:01, 3] nsswitch/winbindd_group.c:winbindd_getgroups(925)
  [    0]: getgroups root
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 13
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(471)
  [    0]: request interface version
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(504)
  [    0]: request location of privileged pipe
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 21
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn GETGROUPS
[2006/02/22 00:30:01, 3] nsswitch/winbindd_group.c:winbindd_getgroups(925)
  [    0]: getgroups root
[2006/02/22 00:30:03, 5] nsswitch/winbindd_dual.c:async_reply_recv(192)
  Could not receive async reply
[2006/02/22 00:30:05, 5] nsswitch/winbindd_dual.c:async_reply_recv(192)
  Could not receive async reply
[2006/02/22 00:30:20, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 13
[2006/02/22 00:30:20, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2006/02/22 00:30:20, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(471)
  [    0]: request interface version
[2006/02/22 00:30:20, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2006/02/22 00:30:20, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(504)
  [    0]: request location of privileged pipe
[2006/02/22 00:30:20, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 19
[2006/02/22 00:30:20, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn LIST_GROUPS
[2006/02/22 00:30:20, 3] nsswitch/winbindd_group.c:winbindd_list_groups(813)
  [    0]: list groups
[2006/02/22 00:30:20, 4] nsswitch/winbindd_group.c:get_sam_group_entries(523)
  get_sam_group_entries: BUILTIN or local domain; enumerating local groups as well
[2006/02/22 00:30:20, 3] nsswitch/winbindd_group.c:get_sam_group_entries(528)
  get_sam_group_entries: Failed to enumerate domain local groups!
[2006/02/22 00:30:20, 4] nsswitch/winbindd_group.c:get_sam_group_entries(523)
  get_sam_group_entries: BUILTIN or local domain; enumerating local groups as well
[2006/02/22 00:30:20, 3] nsswitch/winbindd_group.c:get_sam_group_entries(528)
  get_sam_group_entries: Failed to enumerate domain local groups!
[2006/02/22 00:30:20, 8] nsswitch/winbindd_cm.c:connection_ok(865)
  Connection to  for domain XXX has NULL cli!
[2006/02/22 00:30:20, 5] nsswitch/winbindd_cm.c:receive_getdc_response(524)
  Received packet for \MAILSLOT\NET\GETDCA7810AC
[2006/02/22 00:30:20, 10] nsswitch/winbindd_cm.c:receive_getdc_response(568)
  GetDC gave name ADSERVER1 for domain XXX
[2006/02/22 00:30:20, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(94)
  cm_get_ipc_userpass: No auth-user defined
[2006/02/22 00:30:20, 5] nsswitch/winbindd_cm.c:cm_prepare_connection(272)
  connecting to ADSERVER1 from MYSERVER with kerberos principal [MYSERVER$@XXX.DE]
[2006/02/22 00:30:22, 10] nsswitch/winbindd_cache.c:set_global_winbindd_state_online(2297)
  set_global_winbindd_state_online: online requested.
[2006/02/22 00:30:22, 10] nsswitch/winbindd_cache.c:set_global_winbindd_state_online(2300)
  set_global_winbindd_state_online: rejecting.
[2006/02/22 00:30:22, 5] nsswitch/winbindd_cache.c:get_cache(123)
  get_cache: Setting ADS methods for domain XXX
[2006/02/22 00:30:22, 0] lib/fault.c:fault_report(36)
  ===============================================================
[2006/02/22 00:30:22, 0] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 27549 (3.0.21b-1.1.2-SUSE-SL9.3)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2006/02/22 00:30:22, 0] lib/fault.c:fault_report(39)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2006/02/22 00:30:22, 0] lib/fault.c:fault_report(40)
  ===============================================================
[2006/02/22 00:30:22, 0] lib/util.c:smb_panic2(1554)
  PANIC: internal error
[2006/02/22 00:30:22, 0] lib/util.c:smb_panic2(1562)
  BACKTRACE: 4 stack frames:
   #0 /usr/sbin/winbindd(smb_panic2+0x120) [0x80fae50]
   #1 /usr/sbin/winbindd(smb_panic+0x26) [0x80fb026]
   #2 /usr/sbin/winbindd [0x80e4c6b]
   #3 [0xffffe420]

- --- misc ---
myserver# grep winbind /etc/nsswitch.conf
passwd: files winbind
group:  files winbind

myserver# cat /etc/krb5.conf
[libdefaults]
        default_realm = YYY.DE

[realms]
        YYY.DE = {
                kdc = adserver1.yyy.de
                kdc = adserver2.yyy.de
        }

[logging]
    kdc = FILE:/var/log/krb5kdc.log
    admin_server = FILE:/var/log/kadmin.log
    default = FILE:/var/log/krb5lib.log

myserver# net ads testjoin
Join is OK

myserver# chkconfig nscd
nscd  off


__________________________________________________________________________
Erweitern Sie FreeMail zu einem noch leistungsstarkeren E-Mail-Postfach!		
Mehr Infos unter http://freemail.web.de/home/landingpad/?mc=021131

More information about the samba mailing list