[Samba] RE: problem with winbind
Ngo, Toan
tngo at midway.com
Thu Jul 13 17:09:38 GMT 2006
Upgrading krb5 seems to solve the problem. No more errors and wbinfo
does not seg fault winbind.
krb-1.5.1
Toan
-----Original Message-----
From: samba-bounces+tngo=midway.com at lists.samba.org
[mailto:samba-bounces+tngo=midway.com at lists.samba.org] On Behalf Of Ngo,
Toan
Sent: Wednesday, July 12, 2006 1:58 PM
To: samba at lists.samba.org
Subject: RE: [Samba] RE: problem with winbind
I increased the log level and got this from winbindd.log
[2006/07/12 13:54:00, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
rpc_pipe_bind: Remote machine MYDOMAIN-DC1 pipe \NETLOGON fnum 0x800e
bind request returned ok.
[2006/07/12 13:54:00, 5] rpc_parse/parse_prs.c:prs_debug(84)
000000 smb_io_rpc_hdr hdr
[2006/07/12 13:54:00, 5] rpc_parse/parse_prs.c:prs_uint8(615)
"winbindd.log" 605L, 25945C
smb_vwv[12]=59479 (0xE857)
smb_vwv[13]=62763 (0xF52B)
smb_vwv[14]=50853 (0xC6A5)
smb_vwv[15]=11265 (0x2C01)
smb_vwv[16]= 1 (0x1)
smb_bcc=119
[2006/07/12 13:54:04, 5]
nsswitch/winbindd_cm.c:cm_prepare_connection(272)
connecting to MY_OTHER_DOMAIN-DC1 from TEST-SERVER with kerberos
principal [TEST-SERVER$@MYDOMAIN.COM]
[2006/07/12 13:54:04, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(723)
Doing spnego session setup (blob length=119)
[2006/07/12 13:54:04, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(748)
got OID=1 2 840 48018 1 2 2
[2006/07/12 13:54:04, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(748)
got OID=1 2 840 113554 1 2 2
[2006/07/12 13:54:04, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(748)
got OID=1 2 840 113554 1 2 2 3
[2006/07/12 13:54:04, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(748)
got OID=1 3 6 1 4 1 311 2 2 10
[2006/07/12 13:54:04, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(757)
got principal=my_other_domain-dc1$@MY_OTHER_DOMAIN.COM
[2006/07/12 13:54:04, 2]
libsmb/cliconnect.c:cli_session_setup_kerberos(546)
Doing kerberos session setup
[2006/07/12 13:54:04, 0] lib/fault.c:fault_report(41)
===============================================================
[2006/07/12 13:54:04, 0] lib/fault.c:fault_report(42)
INTERNAL ERROR: Signal 11 in pid 1963 (3.0.23)
Please read the Trouble-Shooting section of the Samba3-HOWTO
[2006/07/12 13:54:04, 0] lib/fault.c:fault_report(44)
From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2006/07/12 13:54:04, 0] lib/fault.c:fault_report(45)
I have several different domain so it's trying to query them to get a
list of users and faults.
Any ideas?
Toan
-----Original Message-----
From: samba-bounces+tngo=midway.com at lists.samba.org
[mailto:samba-bounces+tngo=midway.com at lists.samba.org] On Behalf Of Ngo,
Toan
Sent: Wednesday, July 12, 2006 11:33 AM
To: samba at lists.samba.org
Subject: [Samba] RE: problem with winbind
I am having the exact same problem this morning.
I have the latest krb5 libs according to yum
krb5-libs-1.4.3-4.1
krb5-workstation-1.4.3-4.1
krb5-devel-1.4.3-4.1
Running FC5 with samba 3.0.23 rpms off samba.org
Same panic:
[2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218)
Not a user account? atype=0x30000000
[2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218)
Not a user account? atype=0x30000000
[2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218)
Not a user account? atype=0x30000000
[2006/07/12 11:04:21, 0] lib/fault.c:fault_report(41)
===============================================================
[2006/07/12 11:04:21, 0] lib/fault.c:fault_report(42)
INTERNAL ERROR: Signal 11 in pid 1898 (3.0.23)
Please read the Trouble-Shooting section of the Samba3-HOWTO
[2006/07/12 11:04:21, 0] lib/fault.c:fault_report(44)
From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2006/07/12 11:04:21, 0] lib/fault.c:fault_report(45)
===============================================================
[2006/07/12 11:04:21, 0] lib/util.c:smb_panic(1592)
PANIC (pid 1898): internal error
[2006/07/12 11:04:21, 0] lib/util.c:log_stack_trace(1699)
BACKTRACE: 22 stack frames:
#0 winbindd(log_stack_trace+0x2d) [0x9de81d]
#1 winbindd(smb_panic+0x5d) [0x9de94d]
#2 winbindd [0x9ca30a]
#3 [0x110420]
#4 /lib/libc.so.6(__libc_free+0x3e) [0x2023b5]
#5 /usr/lib/libkrb5.so.3(krb5_free_principal+0x76) [0x3f8906]
#6 /usr/lib/libkrb5.so.3(krb5_free_cred_contents+0x2d) [0x3f9c1d]
#7 /usr/lib/libkrb5.so.3(krb5_free_creds+0x29) [0x3f9d09]
#8 /usr/lib/libkrb5.so.3(krb5_free_tgt_creds+0x2e) [0x3f9d4e]
#9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1dc) [0x3f447c]
#10 winbindd(cli_krb5_get_ticket+0x4b9) [0xa07ed9]
#11 winbindd(spnego_gen_negTokenTarg+0x62) [0xa08ef2]
#12 winbindd(cli_session_setup_spnego+0x6b6) [0xa000b6]
#13 winbindd [0x970d1d]
#14 winbindd(set_dc_type_and_flags+0x9c) [0x97225c]
#15 winbindd(find_domain_from_name+0x48) [0x95d498]
#16 winbindd(winbindd_getpwent+0x397) [0x9559a7]
#17 winbindd [0x9535d7]
#18 winbindd [0x954ca8]
#19 winbindd(main+0x8e9) [0x954129]
#20 /lib/libc.so.6(__libc_start_main+0xdc) [0x1b0724]
#21 winbindd [0x9527b1]
[2006/07/12 11:04:22, 0] lib/fault.c:dump_core(173)
dumping core in /var/log/samba/cores/winbindd
Toan
Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Heyrendt, Jean-Marc wrote:
> >
> > Since 1 month, I tried without any success to
> > configure Samba.
> >
> > My problem is that winbind crashes when I list
> > users and groups. And I think that it is linked to my
> > trusted domains (wbinfo -domain=myADdomain -u works
> > well).
> >
> > BACKTRACE: 23 stack frames:
> > #0 winbindd(log_stack_trace+0x2d) [0x50081d]
> > #1 winbindd(smb_panic+0x5d) [0x50094d]
> > #2 winbindd [0x4ec30a]
> > #3 [0x297420]
> > #4 /lib/libc.so.6(memcpy+0x1c) [0x18464c]
> > #5 /usr/lib/libkrb5.so.3(krb5_copy_principal+0x115) [0xb90ea5]
> > #6 /usr/lib/libkrb5.so.3(krb5_copy_creds+0x64) [0xb90a04]
> > #7 /usr/lib/libkrb5.so.3 [0xb86feb]
> > #8 /usr/lib/libkrb5.so.3(krb5_cc_store_cred+0x20) [0xb87b90]
> > #9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1c3) [0xb94463]
> > #10 winbindd(cli_krb5_get_ticket+0x4b9) [0x529ed9]
> > #11 winbindd(spnego_gen_negTokenTarg+0x62) [0x52aef2]
>
> > I run samba 3.023 on a Fedora Core 5 server. My AD domain
> > is in a large forest. My AD domain controller is
> > running Windows 2003 sp1. Other trusted domains are
> > not in the same subnet.
>
> I've not seen that particular backtrace but its pretty apparent
> there's have a bug in your krb5 libs. Make sure to get the
> latest krb5-libs rpm via yum.
>
> > Several questions. Is winbind needed in my configuration ?
>
> There's no hard and fast rule but in your case I would
> recommend it.
>
> > How to limit the usage of Samba to my domain (how to
> > remove trusted domains scans)?
>
> Read smb.conf(5). You must set 'allow trusted domains = no'.
>
>
>
> cheers, jerry
> =====================================================================
> Samba ------- http://www.samba.org
> Centeris ----------- http://www.centeris.com
> "What man is a man who does not make the world better?" --Balian
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2 (GNU/Linux)
> Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org
>
> iD8DBQFEtN+hIR7qMdg1EfYRAg3cAJ43DbXD6rav8g93Ro+Brx/ltnSeYACg3F91
> FsA9FYQbkihoZ4fnK9Q3NSw=
> =FfpN
> -----END PGP SIGNATURE-----
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
More information about the samba
mailing list