[Samba] winbindd panic 3.0.24

Tue Feb 13 16:47:15 GMT 2007

Hi Samba team!

I tried with 3.0.22 and now with 2.0.24 and I got the same error.
When I try to connect to my file server using a user from a trusted domain
(DOMAIN2) my winbindd dies:

[2007/02/12 15:14:26, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(328)
  [    0]: getpwnam domain2+asspw
[2007/02/12 15:14:26, 3] libsmb/namequery.c:resolve_lmhosts(962)
  resolve_lmhosts: Attempting lmhosts lookup for name server02.domain2.biz<0x20>
[2007/02/12 15:14:26, 3] libsmb/namequery.c:resolve_wins(859)
  resolve_wins: Attempting wins lookup for name server02.domain2.biz<0x20>
[2007/02/12 15:14:26, 3] libsmb/namequery.c:resolve_wins(862)
  resolve_wins: WINS server resolution selected and no WINS servers listed.
[2007/02/12 15:14:26, 3] libsmb/namequery.c:resolve_hosts(1025)
  resolve_hosts: Attempting host lookup for name server02.domain2.biz<0x20>
[2007/02/12 15:14:26, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(508)
  cm_get_ipc_userpass: Retrieved auth-user from secrets.tdb [DOMAIN1\myuser]
[2007/02/12 15:14:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(722)
  Doing spnego session setup (blob length=114)
[2007/02/12 15:14:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(747)
  got OID=1 2 840 48018 1 2 2
[2007/02/12 15:14:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(747)
  got OID=1 2 840 113554 1 2 2
[2007/02/12 15:14:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(747)
  got OID=1 2 840 113554 1 2 2 3
[2007/02/12 15:14:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(747)
  got OID=1 3 6 1 4 1 311 2 2 10
[2007/02/12 15:14:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(755)
  got principal=server02$@DOMAIN2.BIZ
[2007/02/12 15:14:26, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(546)
  Doing kerberos session setup
[2007/02/12 15:14:27, 0] lib/fault.c:fault_report(41)
  ===============================================================
[2007/02/12 15:14:27, 0] lib/fault.c:fault_report(42)
  INTERNAL ERROR: Signal 11 in pid 2992 (3.0.24-0.1.49-1172-SUSE-CODE10)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2007/02/12 15:14:27, 0] lib/fault.c:fault_report(44)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2007/02/12 15:14:27, 0] lib/fault.c:fault_report(45)
  ===============================================================
[2007/02/12 15:14:27, 0] lib/util.c:smb_panic(1599)
  PANIC (pid 2992): internal error
[2007/02/12 15:14:27, 0] lib/util.c:log_stack_trace(1706)
  BACKTRACE: 22 stack frames:
   #0 /usr/sbin/winbindd(log_stack_trace+0x2d) [0x800c5c5d]
   #1 /usr/sbin/winbindd(smb_panic+0x5d) [0x800c5d8d]
   #2 /usr/sbin/winbindd [0x800b1b6a]
   #3 [0xffffe420]
   #4 /usr/lib/libkrb5.so.3(krb5_free_principal+0x76) [0xb7edee46]
   #5 /usr/lib/libkrb5.so.3(krb5_free_cred_contents+0x2d) [0xb7ee015d]
   #6 /usr/lib/libkrb5.so.3(krb5_free_creds+0x29) [0xb7ee0249]
   #7 /usr/lib/libkrb5.so.3(krb5_free_tgt_creds+0x2e) [0xb7ee028e]
   #8 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1dc) [0xb7edac9c]
   #9 /usr/sbin/winbindd(cli_krb5_get_ticket+0x4b9) [0x800ee7e9]
   #10 /usr/sbin/winbindd(spnego_gen_negTokenTarg+0x62) [0x800ef802]
   #11 /usr/sbin/winbindd(cli_session_setup_spnego+0x6c5) [0x800e7055]
   #12 /usr/sbin/winbindd [0x80057cc4]
   #13 /usr/sbin/winbindd [0x80057e34]
   #14 /usr/sbin/winbindd(init_dc_connection+0x29) [0x80057e89]
   #15 /usr/sbin/winbindd(find_domain_from_name+0x4f) [0x8004274f]
   #16 /usr/sbin/winbindd(winbindd_getpwnam+0x14e) [0x8003b9ee]
   #17 /usr/sbin/winbindd [0x80037ff7]
   #18 /usr/sbin/winbindd [0x80039718]
   #19 /usr/sbin/winbindd(main+0x94d) [0x80038bad]
   #20 /lib/libc.so.6(__libc_start_main+0xdc) [0xb7d2387c]
   #21 /usr/sbin/winbindd [0x80037211]
[2007/02/12 15:14:27, 0] lib/fault.c:dump_core(173)
  dumping core in /var/log/samba/cores/winbindd
[2007/02/12 15:14:27, 1] smbd/sesssetup.c:reply_spnego_kerberos(310)
  Username DOMAIN2+asspw is invalid on this system

My smb.conf:

[global]
        workgroup = DOMAIN1
        security = ads
        realm = DOMAIN1
        password server = x.x.x.x,x.x.x.x,x.x.x.x
        enable privileges = yes
        deadtime = 5

        idmap uid = 1000-100000
        idmap gid = 1000-100000
        winbind cache time = 43200
        winbind enum users = no
        winbind enum groups = no
        allow trusted domains = yes
        winbind separator = +

        printing = cups
        cups options = raw
        load printers = yes
        show add printer wizard = no
        printcap cache time = 0
        guest only = yes
        lpq cache time = 60

[printers]
        comment = All Printers
        path = /var/tmp
        printable = Yes
        create mask = 0600
        browseable = No
        guest ok = yes

My kerberos files (kinit works fine with both):

# cat /var/lib/samba/smb_krb5/krb5.conf.DOMAIN1
[libdefaults]
        default_realm = DOMAIN1.BIZ

[realms]
        DOMAIN1.BIZ = {
        kdc = x.x.x.x
        kdc = x.x.x.x
        }

# cat /var/lib/samba/smb_krb5/krb5.conf.DOMAIN2
[libdefaults]
        default_realm = DOMAIN2.BIZ

[realms]
        DOMAIN2.BIZ = {
        kdc = x.x.x.x
        kdc = x.x.x.x
        }

I'd appreciate any help!

Bruno Gomes Pessanha