[Samba] problem with winbind

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Heyrendt, Jean-Marc wrote:
>  
> Since 1 month, I tried without any success to 
> configure Samba.
> 
> My problem is that winbind crashes when I list 
> users and groups. And I think that it is linked to my
> trusted domains (wbinfo -domain=myADdomain -u works
> well).
> 
>   BACKTRACE: 23 stack frames:
>    #0 winbindd(log_stack_trace+0x2d) [0x50081d]
>    #1 winbindd(smb_panic+0x5d) [0x50094d]
>    #2 winbindd [0x4ec30a]
>    #3 [0x297420]
>    #4 /lib/libc.so.6(memcpy+0x1c) [0x18464c]
>    #5 /usr/lib/libkrb5.so.3(krb5_copy_principal+0x115) [0xb90ea5]
>    #6 /usr/lib/libkrb5.so.3(krb5_copy_creds+0x64) [0xb90a04]
>    #7 /usr/lib/libkrb5.so.3 [0xb86feb]
>    #8 /usr/lib/libkrb5.so.3(krb5_cc_store_cred+0x20) [0xb87b90]
>    #9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1c3) [0xb94463]
>    #10 winbindd(cli_krb5_get_ticket+0x4b9) [0x529ed9]
>    #11 winbindd(spnego_gen_negTokenTarg+0x62) [0x52aef2]

> I run samba 3.023 on a Fedora Core 5 server. My AD domain 
> is in a large forest. My AD domain controller is
> running Windows 2003 sp1. Other trusted domains are
> not in the same subnet.

I've not seen that particular backtrace but its pretty apparent
there's have a bug in your krb5 libs.  Make sure to get the
latest krb5-libs rpm via yum.

> Several questions. Is winbind needed in my configuration ? 

There's no hard and fast rule but in your case I would
recommend it.

> How to limit the usage of Samba to my domain (how to
> remove trusted domains scans)?

Read smb.conf(5).  You must set 'allow trusted domains = no'.



cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEtN+hIR7qMdg1EfYRAg3cAJ43DbXD6rav8g93Ro+Brx/ltnSeYACg3F91
FsA9FYQbkihoZ4fnK9Q3NSw=
=FfpN
-----END PGP SIGNATURE-----