[Samba] RE: problem with winbind

[Ngo, Toan]

I am having the exact same problem this morning.
I have the latest krb5 libs according to yum

krb5-libs-1.4.3-4.1
krb5-workstation-1.4.3-4.1
krb5-devel-1.4.3-4.1

Running FC5 with samba 3.0.23 rpms off samba.org
Same panic:

[2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218)
  Not a user account? atype=0x30000000
[2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218)
  Not a user account? atype=0x30000000
[2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218)
  Not a user account? atype=0x30000000
[2006/07/12 11:04:21, 0] lib/fault.c:fault_report(41)
  ===============================================================
[2006/07/12 11:04:21, 0] lib/fault.c:fault_report(42)
  INTERNAL ERROR: Signal 11 in pid 1898 (3.0.23)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2006/07/12 11:04:21, 0] lib/fault.c:fault_report(44)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2006/07/12 11:04:21, 0] lib/fault.c:fault_report(45)
  ===============================================================
[2006/07/12 11:04:21, 0] lib/util.c:smb_panic(1592)
  PANIC (pid 1898): internal error
[2006/07/12 11:04:21, 0] lib/util.c:log_stack_trace(1699)
  BACKTRACE: 22 stack frames:
   #0 winbindd(log_stack_trace+0x2d) [0x9de81d]
   #1 winbindd(smb_panic+0x5d) [0x9de94d]
   #2 winbindd [0x9ca30a]
   #3 [0x110420]
   #4 /lib/libc.so.6(__libc_free+0x3e) [0x2023b5]
   #5 /usr/lib/libkrb5.so.3(krb5_free_principal+0x76) [0x3f8906]
   #6 /usr/lib/libkrb5.so.3(krb5_free_cred_contents+0x2d) [0x3f9c1d]
   #7 /usr/lib/libkrb5.so.3(krb5_free_creds+0x29) [0x3f9d09]
   #8 /usr/lib/libkrb5.so.3(krb5_free_tgt_creds+0x2e) [0x3f9d4e]
   #9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1dc) [0x3f447c]
   #10 winbindd(cli_krb5_get_ticket+0x4b9) [0xa07ed9]
   #11 winbindd(spnego_gen_negTokenTarg+0x62) [0xa08ef2]
   #12 winbindd(cli_session_setup_spnego+0x6b6) [0xa000b6]
   #13 winbindd [0x970d1d]
   #14 winbindd(set_dc_type_and_flags+0x9c) [0x97225c]
   #15 winbindd(find_domain_from_name+0x48) [0x95d498]
   #16 winbindd(winbindd_getpwent+0x397) [0x9559a7]
   #17 winbindd [0x9535d7]
   #18 winbindd [0x954ca8]
   #19 winbindd(main+0x8e9) [0x954129]
   #20 /lib/libc.so.6(__libc_start_main+0xdc) [0x1b0724]
   #21 winbindd [0x9527b1]
[2006/07/12 11:04:22, 0] lib/fault.c:dump_core(173)
  dumping core in /var/log/samba/cores/winbindd

Toan
Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Heyrendt, Jean-Marc wrote:
> >
> > Since 1 month, I tried without any success to
> > configure Samba.
> >
> > My problem is that winbind crashes when I list
> > users and groups. And I think that it is linked to my
> > trusted domains (wbinfo -domain=myADdomain -u works
> > well).
> >
> >   BACKTRACE: 23 stack frames:
> >    #0 winbindd(log_stack_trace+0x2d) [0x50081d]
> >    #1 winbindd(smb_panic+0x5d) [0x50094d]
> >    #2 winbindd [0x4ec30a]
> >    #3 [0x297420]
> >    #4 /lib/libc.so.6(memcpy+0x1c) [0x18464c]
> >    #5 /usr/lib/libkrb5.so.3(krb5_copy_principal+0x115) [0xb90ea5]
> >    #6 /usr/lib/libkrb5.so.3(krb5_copy_creds+0x64) [0xb90a04]
> >    #7 /usr/lib/libkrb5.so.3 [0xb86feb]
> >    #8 /usr/lib/libkrb5.so.3(krb5_cc_store_cred+0x20) [0xb87b90]
> >    #9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1c3) [0xb94463]
> >    #10 winbindd(cli_krb5_get_ticket+0x4b9) [0x529ed9]
> >    #11 winbindd(spnego_gen_negTokenTarg+0x62) [0x52aef2]
>
> > I run samba 3.023 on a Fedora Core 5 server. My AD domain
> > is in a large forest. My AD domain controller is
> > running Windows 2003 sp1. Other trusted domains are
> > not in the same subnet.
>
> I've not seen that particular backtrace but its pretty apparent
> there's have a bug in your krb5 libs.  Make sure to get the
> latest krb5-libs rpm via yum.
>
> > Several questions. Is winbind needed in my configuration ?
>
> There's no hard and fast rule but in your case I would
> recommend it.
>
> > How to limit the usage of Samba to my domain (how to
> > remove trusted domains scans)?
>
> Read smb.conf(5).  You must set 'allow trusted domains = no'.
>
>
>
> cheers, jerry
> =====================================================================
> Samba                                    ------- http://www.samba.org
> Centeris                         -----------  http://www.centeris.com
> "What man is a man who does not make the world better?"      --Balian
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2 (GNU/Linux)
> Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org
>
> iD8DBQFEtN+hIR7qMdg1EfYRAg3cAJ43DbXD6rav8g93Ro+Brx/ltnSeYACg3F91
> FsA9FYQbkihoZ4fnK9Q3NSw=
> =FfpN
> -----END PGP SIGNATURE-----
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba