[Samba] [PATCH] Workaround very slow nss_winbind, fix crash on the AD DC (particularly for backups)

[Andrew Bartlett]

On Fri, 2013-06-21 at 07:23 +0000, Philippe.Simonet at swisscom.com wrote:
> Hi Andrew,
> 
> sorry (my English...) I was not clear. I tried to say that the patch does not change anything for me, 
> the crash is still here.

Which (named) patch did you try?

I've attached both patches which I proposed.  Each attempts to solve the
problem in a different way.  Please try each of them, and tell me if you
still get the crash.  

Thanks,

Andrew Bartlett

> best regards
> 
> Philippe
> 
> 
> > -----Original Message-----
> > From: Andrew Bartlett [mailto:abartlet at samba.org]
> > Sent: Friday, June 21, 2013 9:18 AM
> > To: Simonet Philippe, ITS-OUS-OP-IFM-NW-IPE
> > Cc: samba-technical at samba.org; samba at samba.org;
> > qoole.samba at lillimoth.com
> > Subject: Re: [PATCH] Workaround very slow nss_winbind, fix crash on the AD
> > DC (particularly for backups)
> > 
> > On Fri, 2013-06-21 at 05:58 +0000, Philippe.Simonet at swisscom.com wrote:
> > > Hi Andrew,
> > >
> > > many thanks for you patch,
> > > i tested it on 2 different systems but without success (the crash is always
> > happening).
> > >
> > > before applying the patch, I had a strange problem :  I couldn't
> > > reproduce the problem (with wbinfo --uid-info 3000000) on one of the
> > > machine. no chance even if I reinstall, re-provision, ...). I finally
> > > reboot the machine and after the reboot the crash was reproduceable
> > > again (...)
> > 
> > Thank you for finally getting back to me on this.  After seeing it once, I was
> > also unable to reproduce the crash, and so was patching blind.
> > This remains illusive.
> > 
> > Does this alternative patch help?
> > 
> > > on both machines, what I've done :
> > > (...untar...)
> > > cd samba-4.0.6
> > > patch -p1 < 0001-s4-winbind-Add-special-case-for-BUILTIN-domain.patch
> > > ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var
> > > --enable-fhs make make install rm /etc/samba/smb.conf samba-tool
> > > domain provision --dns-backend=BIND9_FLATFILE --server-role=dc
> > > --realm TEST.CH  --domain TEST --adminpass=Pa$$w0rd samba -i -M single
> > >
> > > and ->>>  wbinfo --uid-info 3000000
> > >
> > > I get :
> > > ---------------------
> > > samba version 4.0.6 started.
> > > Copyright Andrew Tridgell and the Samba Team 1992-2012
> > > samba: using 'single' process model
> > > Attempting to autogenerate TLS self-signed keys for https for hostname
> > 'WZ3.test3.ch'
> > > TLS self-signed keys generated OK
> > >
> > ==========================================================
> > =====
> > > INTERNAL ERROR: Signal 11 in pid 4844 (4.0.6) Please read the
> > > Trouble-Shooting section of the Samba HOWTO
> > >
> > ==========================================================
> > =====
> > > PANIC: internal error
> > > Aborted
> > > ---------------------
> > >
> > > Best regards
> > >
> > > Philippe
> > 
> > Thanks,
> > 
> > Andrew Bartlett
> > 
> > --
> > Andrew Bartlett                                http://samba.org/~abartlet/
> > Authentication Developer, Samba Team           http://samba.org
> 
> 

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-gensec-work-around-nested-event-loops-by-ensuring-th.patch
Type: text/x-patch
Size: 1092 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba/attachments/20130621/99a89fe3/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-s4-winbind-Add-special-case-for-BUILTIN-domain.patch
Type: text/x-patch
Size: 4404 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba/attachments/20130621/99a89fe3/attachment-0001.bin>