[Samba] Security context stack overflow on Debian5+LDAP

[Volker Lendecke]

On Thu, Sep 10, 2009 at 09:57:39AM +0200, Lorenzo Milesi wrote:
> Hi 
> 
> I'm setting up a Samba PDC, with auth over Zimbra's LDAP, with this howto: 
> http://wiki.zimbra.com/index.php?title=UNIX_and_Windows_Accounts_in_Zimbra_LDAP_and_Zimbra_Admin_UI_6.0 
> 
> System is a fully updated Debian 5. All packages from distro. Samba is 3.2.5-4lenny6. 
> Now everything is almost ok, but I'm getting an error when trying to mount the samba share: 
> [2009/09/10 09:44:07, 2] passdb/pdb_ldap.c:init_group_from_ldap(2344) 
> init_group_from_ldap: Entry found for group: 10001 
> [2009/09/10 09:44:07, 0] smbd/sec_ctx.c:push_sec_ctx(210) 
> Security context stack overflow! 
> [2009/09/10 09:44:07, 0] lib/util.c:smb_panic(1663) 
> PANIC (pid 17363): Security context stack overflow! 
> [2009/09/10 09:44:07, 0] lib/util.c:log_stack_trace(1767) 
> BACKTRACE: 58 stack frames: 
> #0 /usr/sbin/smbd(log_stack_trace+0x2d) [0x8201d24] 
> #1 /usr/sbin/smbd(smb_panic+0x80) [0x8201e81] 
> #2 /usr/sbin/smbd(push_sec_ctx+0x7b) [0x80ce8f1] 
> #3 /usr/sbin/smbd(become_root+0x17) [0x80c152a] 
> #4 /usr/sbin/smbd(lookup_sids+0x845) [0x81b841f] 
> #5 /usr/sbin/smbd(lookup_sid+0x12a) [0x81b8c20] 

...

Hmmm. 3.2.5-4lenny6, is that an up-to-date package? I'm
pretty certain I have seen that ages ago and it was fixed.
Is it possible for you to retry with 3.4.1? If not, the
least we need is a debug level 10 log leading up to this,
and if possible also a network trace of the LDAP traffic.

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL: <http://lists.samba.org/pipermail/samba/attachments/20090910/2b7c78c0/attachment.pgp>