[Samba] Samba produces odd messages records and crash

Bjoern Meier bjoern.meier at googlemail.com
Wed Feb 22 02:26:22 MST 2012


hi,

today I saw our File-Server was crashed and in the message log I found this:

Feb 22 07:59:54 file-server smbd_audit[32593]: close fd 27
Feb 22 08:00:01 file-server smbd_audit[32593]: close fd 36
^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@zystkie
wystąpienia /usr/lib/X11/fonts/CID.
Extended_description-pt.utf-8: O caminho do local dos tipos de letra
TrueType e CID geridos por defoma foram modificados novamente. Por
favor adicione estas entradas à secção "Files" do ficheiro
/etc/X11/xorg.conf:\n\n  FontPath
"/var/lib/defoma/x-ttcidfont-conf.d/dirs/CID"\n  FontPath
"/var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType"\n\n\nAdicione
também estes dois directórios às listas de caminho "catalogue" em
/etc/X11/fs/config·e/ou·/etc/X11/fs-xtt/config, e apague qualquer
menção de qualquer destes ficheiros em /usr/lib/X11/fonts/CID.
Extended_description-pt_br.utf-8: Os caminhos para fontes TrueType e
CID, os quais são gerenciados pelo defoma, mudaram novamente. Por
favor, adicione estas entradas a seção "Files" do arquivo
/etc/X11/xorg.conf :\n\n  FontPath
"/var/lib/defoma/x-ttcidfont-conf.d/dirs/CID"\n  FontPath
"/var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType"\n\n\nAdicione
também estes dois diretórios às listas de caminhos "catalogue" em
/etc/X11/fs/config e/ou /etc/X11/fs-xtt/config e remova qualquer
menção do diretório /usr/lib/X11/fonts/CID em ambos os arquivos.
Extended_description-ru.utf-8: Пути к типам шрифтов TrueType и CID,
управляемых через defoma опять изменились. Добавьте следующие записи в
раздел "Files" файла /etc/X11/xorg.conf:\n\n  FontPath
"/var/lib/defoma/x-ttcidfont-conf.d/dirs/CID"\n  FontPath
"/var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType"\n\n\nТакже добавьте
эти два каталога в список путей "catalogue" в файлах
/etc/X11/fs/config и/или /etc/X11/fs-xtt/config и удалите все указания
на /usr/lib/X11/fonts/CID во всех этих файлах.


So, this is reproduceible as I listed an specific directory.
As you can see, I've activated the samba audit and our samba version
is: 3.5.12-SerNet-Debian on Debian 6.0.4

Can someone explain me that and how we could avoid this?

Thanks.
Greetings, Björn


More information about the samba mailing list