[Samba] Samba Upgrade to 3.0.25b leads to core dumps with winbind and ldap idmap

Wed May 14 18:15:33 GMT 2008

I have recently upgraded a Samba server running on a Red Hat Enterprise 4 (32 bit) server.  The version of samba upgraded to is 3.0.25b.  I noticed that a new index had to be added to my ldap (openldap) server for the sambaSID attribute.  So I added the index line to slapd.conf as follows:

Index sambaSID eq,sub

Afterwards I ran slapindex to recreate the indices in the openldap database.  Everything seems to be working fine.  However, I now see a large number of Samba core dumps in my /var/log/samba/winbindd-idmap.log file.  Here is a sample from the log:

[2008/05/14 12:43:37, 0] lib/fault.c:fault_report(41)
  ===============================================================
[2008/05/14 12:43:37, 0] lib/fault.c:fault_report(42)
  INTERNAL ERROR: Signal 6 in pid 4839 (3.0.25b-1.el4_6.4)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2008/05/14 12:43:37, 0] lib/fault.c:fault_report(44)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2008/05/14 12:43:37, 0] lib/fault.c:fault_report(45)
  ===============================================================
[2008/05/14 12:43:37, 0] lib/util.c:smb_panic(1654)
  PANIC (pid 4839): internal error
[2008/05/14 12:43:37, 0] lib/util.c:log_stack_trace(1758)
  BACKTRACE: 22 stack frames:
   #0 winbindd(log_stack_trace+0x2d) [0x3d67b9]
   #1 winbindd(smb_panic+0x56) [0x3d68c0]
   #2 winbindd [0x3c2db5]
   #3 /lib/tls/libc.so.6 [0x59b908]
   #4 /lib/tls/libc.so.6(abort+0xe9) [0x59d279]
   #5 /lib/tls/libc.so.6(__assert_fail+0x101) [0x594d91]
   #6 /usr/lib/libldap-2.2.so.7(ldap_next_entry+0x6b) [0xfb8c2b]
   #7 winbindd [0x4fab15]
   #8 winbindd(idmap_unixids_to_sids+0x5e4) [0x4f3c87]
   #9 winbindd(idmap_uid_to_sid+0x6e) [0x4f714e]
   #10 winbindd(winbindd_dual_uid2sid+0x50) [0x37a896]
   #11 winbindd [0x37535d]
   #12 winbindd [0x376509]
   #13 winbindd(winbindd_sid2gid_async+0xcc) [0x37794c]
   #14 winbindd [0x362fa4]
   #15 winbindd [0x377f1b]
   #16 winbindd [0x376457]
   #17 winbindd [0x375e07]
   #18 winbindd [0x348bac]
   #19 winbindd(main+0x778) [0x34a044]
   #20 /lib/tls/libc.so.6(__libc_start_main+0xd3) [0x588de3]
   #21 winbindd [0x348661]
[2008/05/14 12:43:37, 0] lib/fault.c:dump_core(181)
  dumping core in /var/log/samba/cores/winbindd
[2008/05/14 12:43:37, 2] lib/smbldap.c:smbldap_open_connection(786)
  smbldap_open_connection: connection opened
winbindd: ../../../libraries/libldap/getentry.c:48: ldap_next_entry: Assertion `entry != ((void *)0)' failed.

And here is the /var/log/openldap.log file output from the same time as the core dump.

May 14 12:43:37 s10 slapd[4091]: conn=40 op=284 SRCH base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0 filter="(&(objectClass=sambaIdmapEntry)(uidNumber=10020))"
May 14 12:43:37 s10 slapd[4091]: conn=40 op=284 SRCH attr=sambaSID uidNumber gidNumber objectClass
May 14 12:43:37 s10 slapd[4091]: conn=40 op=284 SEARCH RESULT tag=101 err=0 nentries=2 text=
May 14 12:43:37 s10 slapd[4091]: conn=40 fd=11 closed
May 14 12:43:37 s10 slapd[4091]: conn=41 op=7 UNBIND
May 14 12:43:37 s10 slapd[4091]: conn=41 fd=15 closed
May 14 12:43:37 s10 slapd[4091]: conn=42 fd=11 ACCEPT from IP=192.168.10.8:32899 (IP=0.0.0.0:389)
May 14 12:43:37 s10 slapd[4091]: conn=42 op=0 BIND dn="cn=Manager,dc=rbrooks,dc=com" method=128
May 14 12:43:37 s10 slapd[4091]: conn=42 op=0 BIND dn="cn=Manager,dc=rbrooks,dc=com" mech=SIMPLE ssf=0
May 14 12:43:37 s10 slapd[4091]: conn=42 op=0 RESULT tag=97 err=0 text=
May 14 12:43:37 s10 slapd[4091]: conn=42 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
May 14 12:43:37 s10 slapd[4091]: conn=42 op=1 SRCH attr=supportedControl
May 14 12:43:37 s10 slapd[4091]: conn=42 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
May 14 12:43:37 s10 slapd[4091]: conn=42 op=2 SRCH base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0 filter="(&(objectClass=sambaIdmapEntry)(uidNumber=10020))"
May 14 12:43:37 s10 slapd[4091]: conn=42 op=2 SRCH attr=sambaSID uidNumber gidNumber objectClass
May 14 12:43:37 s10 slapd[4091]: conn=42 op=2 SEARCH RESULT tag=101 err=0 nentries=2 text=
May 14 12:43:37 s10 slapd[4091]: conn=42 fd=11 closed
May 14 12:43:37 s10 slapd[4091]: conn=43 fd=11 ACCEPT from IP=192.168.10.8:32901 (IP=0.0.0.0:389)
May 14 12:43:37 s10 slapd[4091]: conn=43 op=0 BIND dn="cn=Manager,dc=rbrooks,dc=com" method=128
May 14 12:43:37 s10 slapd[4091]: conn=43 op=0 BIND dn="cn=Manager,dc=rbrooks,dc=com" mech=SIMPLE ssf=0
May 14 12:43:37 s10 slapd[4091]: conn=43 op=0 RESULT tag=97 err=0 text=
May 14 12:43:37 s10 slapd[4091]: connection_input: conn=43 deferring operation: binding
May 14 12:43:37 s10 slapd[4091]: conn=43 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
May 14 12:43:37 s10 slapd[4091]: conn=43 op=1 SRCH attr=supportedControl
May 14 12:43:37 s10 slapd[4091]: conn=43 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
May 14 12:43:37 s10 slapd[4091]: conn=43 op=2 SRCH base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0 filter="(&(objectClass=sambaIdmapEntry)(uidNumber=10020))"
May 14 12:43:37 s10 slapd[4091]: conn=43 op=2 SRCH attr=sambaSID uidNumber gidNumber objectClass
May 14 12:43:37 s10 slapd[4091]: conn=43 op=2 SEARCH RESULT tag=101 err=0 nentries=2 text=
May 14 12:43:37 s10 slapd[4091]: conn=43 fd=11 closed
May 14 12:43:37 s10 slapd[4091]: conn=44 fd=11 ACCEPT from IP=192.168.10.8:32902 (IP=0.0.0.0:389)
May 14 12:43:37 s10 slapd[4091]: conn=44 op=0 BIND dn="cn=Manager,dc=rbrooks,dc=com" method=128
May 14 12:43:37 s10 slapd[4091]: conn=44 op=0 BIND dn="cn=Manager,dc=rbrooks,dc=com" mech=SIMPLE ssf=0
May 14 12:43:37 s10 slapd[4091]: conn=44 op=0 RESULT tag=97 err=0 text=
May 14 12:43:37 s10 slapd[4091]: connection_input: conn=44 deferring operation: binding
May 14 12:43:37 s10 slapd[4091]: conn=44 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
May 14 12:43:37 s10 slapd[4091]: conn=44 op=1 SRCH attr=supportedControl
May 14 12:43:37 s10 slapd[4091]: conn=44 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
May 14 12:43:37 s10 slapd[4091]: conn=44 op=2 SRCH base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0 filter="(&(objectClass=sambaIdmapEntry)(uidNumber=10020))"
May 14 12:43:37 s10 slapd[4091]: conn=44 op=2 SRCH attr=sambaSID uidNumber gidNumber objectClass
May 14 12:43:37 s10 slapd[4091]: conn=44 op=2 SEARCH RESULT tag=101 err=0 nentries=2 text=
May 14 12:43:37 s10 slapd[4091]: conn=44 fd=11 closed
May 14 12:43:37 s10 slapd[4091]: conn=45 fd=11 ACCEPT from IP=192.168.10.8:32903 (IP=0.0.0.0:389)
May 14 12:43:37 s10 slapd[4091]: conn=45 op=0 BIND dn="cn=Manager,dc=rbrooks,dc=com" method=128
May 14 12:43:37 s10 slapd[4091]: conn=45 op=0 BIND dn="cn=Manager,dc=rbrooks,dc=com" mech=SIMPLE ssf=0
May 14 12:43:37 s10 slapd[4091]: conn=45 op=0 RESULT tag=97 err=0 text=
May 14 12:43:37 s10 slapd[4091]: conn=45 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
May 14 12:43:37 s10 slapd[4091]: conn=45 op=1 SRCH attr=supportedControl
May 14 12:43:37 s10 slapd[4091]: conn=45 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
May 14 12:43:37 s10 slapd[4091]: conn=45 op=2 SRCH base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0 filter="(&(objectClass=sambaIdmapEntry)(sambaSID=s-1-0-0))"
May 14 12:43:37 s10 slapd[4091]: conn=45 op=2 SRCH attr=sambaSID uidNumber gidNumber objectClass
May 14 12:43:37 s10 slapd[4091]: conn=45 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
May 14 12:43:37 s10 slapd[4091]: conn=45 op=3 SRCH base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0 filter="(&(objectClass=sambaIdmapEntry)(uidNumber=10020))"
May 14 12:43:37 s10 slapd[4091]: conn=45 op=3 SRCH attr=sambaSID uidNumber gidNumber objectClass
May 14 12:43:37 s10 slapd[4091]: conn=45 op=3 SEARCH RESULT tag=101 err=0 nentries=2 text=
May 14 12:43:38 s10 slapd[4091]: conn=45 fd=11 closed
May 14 12:43:38 s10 slapd[4091]: conn=46 fd=11 ACCEPT from IP=192.168.10.8:32904 (IP=0.0.0.0:389)
May 14 12:43:38 s10 slapd[4091]: conn=46 op=0 BIND dn="cn=Manager,dc=rbrooks,dc=com" method=128
May 14 12:43:38 s10 slapd[4091]: conn=46 op=0 BIND dn="cn=Manager,dc=rbrooks,dc=com" mech=SIMPLE ssf=0
May 14 12:43:38 s10 slapd[4091]: conn=46 op=0 RESULT tag=97 err=0 text=
May 14 12:43:38 s10 slapd[4091]: connection_input: conn=46 deferring operation: binding
May 14 12:43:38 s10 slapd[4091]: conn=46 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
May 14 12:43:38 s10 slapd[4091]: conn=46 op=1 SRCH attr=supportedControl
May 14 12:43:38 s10 slapd[4091]: conn=46 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
May 14 12:43:38 s10 slapd[4091]: conn=46 op=2 SRCH base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0 filter="(&(objectClass=sambaIdmapEntry)(uidNumber=10020))"
May 14 12:43:38 s10 slapd[4091]: conn=46 op=2 SRCH attr=sambaSID uidNumber gidNumber objectClass
May 14 12:43:38 s10 slapd[4091]: conn=46 op=2 SEARCH RESULT tag=101 err=0 nentries=2 text=
May 14 12:43:38 s10 slapd[4091]: conn=46 fd=11 closed

On a daily basis this Samba system is freezing.  Either I can log in to the system and have to perform a restart or the system is non-responsive and a hard reboot has to be performed.  Either way, all services on the system become unavailable.

I looked into the ldap idmap backend by using an LDAP client on my local computer and browsing the LDAP tree.  If I do a search for a specific uidNumber, the results returned are 2 nodes.  Each node represents a SID from our windows domain servers.  Why do I have 2 SID's for each UID?  Is this normal?  Could this be what is causing the problems?

Any help would be appreciated.

Thanks,
Chippy

***********************************
CONFIDENTIALITY NOTICE
***********************************
All information contained in this message or in any attachment to it is the CONFIDENTIAL AND PROPRIETARY information of R.Brooks Associates, Inc. and is intended only for restricted use by the individual to whom it is addressed.  If you are not the intended recipient you may not use, disclose, distribute, copy, print or rely on this e-mail.  If you have received this information by mistake, please notify the sender immediately by reply e-mail and delete this e-mail from your system.  The e-mail address of the sender may not be used, copied, sold, disclosed or incorporated into any database or mailing list.

Thank you.