[Samba] smb_panic sys_setgroups failed

[Gaiseric Vandal]

What OS?

I am running Solaris 10 machines with Samba 3.4.x and 3.0.x

Samba 3.4.x (and presumably 3.5.x) checks to see how many windows groups 
the user belongs to.  It checks what the max number of groups a user is 
allowed to belong to by the unix syste.  If the windows group list 
exceeds this maximum you will have problems.  On Solaris, this is the 
"ngroup_max" kernel parameter.   By default it is 16 (this is for 
backwards compatibility with NFS + RPC authentication.)

You can increase the limit by editing the /etc/system file and 
rebooting-  e.g.

     set ngroups_max=32

This can break NFS mounts if the user is in more than 16 groups.    
Which may not be an issue.

I don't know if there is an equivalent setting in Linux, of if linux 
even has such a setting.


How is a user in 188 groups?



On 10/05/2010 02:46 AM, walter.van.der.heijden at nl.abnamro.com wrote:
> Hi,
>
> We have Samba version 3.5.4 and we are using winbind (Active Directory) for authorisation.
>
> The issue  is that for most of the members of a Samba share it is not possible to connect this Samba share. This because of the error below. It seems to be that the number of Active Directory groups where this Samba member belongs to is too high.
>
> UNIX token of user 588109
>    Primary group is 10049 and contains 188 supplementary groups
>
> [2010/10/04 14:12:22.682600,  0] lib/util.c:1465(smb_panic)
>    PANIC (pid 14999610): sys_setgroups failed
>
> [2010/10/04 14:12:22.682922,  0] lib/util.c:1619(log_stack_trace)
>    unable to produce a stack trace on this platform
>
> [2010/10/04 14:12:22.683121,  0] lib/fault.c:326(dump_core)
>    dumping core in /opt/pware64/var/cores/smbd
>
> [2010/10/04 14:12:22.740533,  3] smbd/server.c:259(remove_child_pid)
>    smbd/server.c:259 Unclean shutdown of pid 14999610
>
> [2010/10/04 14:12:22.740965,  1] smbd/server.c:267(remove_child_pid)
>    Scheduled cleanup of brl and lock database after unclean shutdown
>
>
> Can you tell me the cause of this issue?
>
>
>
>
> Met vriendelijke groet, Kind regards,
>
>
> Walter van der Heijden | AIX/RedHat System Specialist
> ABN AMRO | I&O /Expertise /Midrange /Unix
> Polanerbaan 11 | 3447 GN  Woerden | Netherlands | W04.00.40
> Tel.: +31 (0) 30 2260597
>
> Denk aan het milieu voordat u deze e-mail print
>
>
>
>
> ********************************* DISCLAIMER *********************************
>
> This message (including any attachments) is confidential and may be privileged.
> If you have received it by mistake please notify the sender by return e-mail and delete this
> message from your system.
> Any unauthorised use or dissemination of this message in whole or in part is strictly prohibited.
> Please note that e-mails are susceptible to change.
> ABN AMRO Bank N.V, which has its seat at Amsterdam, the Netherlands, and is registered in
> the Commercial Register under number 34334259, including its group companies,
> shall not be liable for the improper or incomplete transmission of the information contained
> in this communication nor for any delay in its receipt or damage to your system.
> ABN AMRO Bank N.V. (or its group companies) does not guarantee that the integrity of this
> communication has been maintained nor that this communication is free of viruses,
> interceptions or interference.
> -----------------------------------------------------------------------------
> Dit bericht (inclusief de eventuele bijlagen) is vertrouwelijk.
> Wanneer u dit bericht ten onrechte heeft ontvangen, dient u de afzender hiervan onmiddellijk
> per kerende e-mail op de hoogte te brengen en dit bericht te verwijderen uit uw systeem.
> Elk onbevoegd gebruik en/of onbevoegde verspreiding van dit bericht is niet toegestaan.
> U wordt erop gewezen dat e-mail berichten aan wijziging onderhevig kunnen zijn.
>   ABN AMRO Bank N.V., statutair gevestigd te Amsterdam en ingeschreven in het handelsregister
> van de Kamer van Koophandel onder nummer 34334259, en haar groepsmaatschappijen,
> is niet aansprakelijk voor de onjuiste en onvolledige overdracht van de informatie in dit bericht
> noch voor mogelijke vertraging in de ontvangst van dit bericht of schade aan uw systeem als
> gevolg van dit bericht. ABN AMRO Bank N.V. (en haar groepsmaatschappijen) staat er niet
> voor in dat de integriteit van dit bericht behouden is gebleven noch dat dit bericht vrij is
> van virussen, niet is onderschept of vatbaar is geweest voor tussenkomst (door derden).
> *****************************************************************************
>