[Samba] [PATCH] Workaround very slow nss_winbind, fix crash on the AD DC (particularly for backups)

[Philippe.Simonet at swisscom.com]

I tried both, and I get still crashes :
----
0001-gensec-work-around-nested-event-loops-by-ensuring-th.patch
0002-s4-winbind-Add-special-case-for-BUILTIN-domain.patch
----

-----
samba version 4.0.6 started.
Copyright Andrew Tridgell and the Samba Team 1992-2012
samba: using 'single' process model
talloc: access after free error - first free may be at ../source4/kdc/db-glue.c:206
Bad talloc magic value - access after free
PANIC: Bad talloc magic value - access after free
Aborted
----

philippe



> -----Original Message-----
> From: Andrew Bartlett [mailto:abartlet at samba.org]
> Sent: Friday, June 21, 2013 9:35 AM
> To: Simonet Philippe, ITS-OUS-OP-IFM-NW-IPE
> Cc: samba-technical at samba.org; samba at samba.org;
> qoole.samba at lillimoth.com
> Subject: Re: [PATCH] Workaround very slow nss_winbind, fix crash on the AD
> DC (particularly for backups)
> 
> On Fri, 2013-06-21 at 07:23 +0000, Philippe.Simonet at swisscom.com wrote:
> > Hi Andrew,
> >
> > sorry (my English...) I was not clear. I tried to say that the patch
> > does not change anything for me, the crash is still here.
> 
> Which (named) patch did you try?
> 
> I've attached both patches which I proposed.  Each attempts to solve the
> problem in a different way.  Please try each of them, and tell me if you still
> get the crash.
> 
> Thanks,
> 
> Andrew Bartlett
> 
> > best regards
> >
> > Philippe
> >
> >
> > > -----Original Message-----
> > > From: Andrew Bartlett [mailto:abartlet at samba.org]
> > > Sent: Friday, June 21, 2013 9:18 AM
> > > To: Simonet Philippe, ITS-OUS-OP-IFM-NW-IPE
> > > Cc: samba-technical at samba.org; samba at samba.org;
> > > qoole.samba at lillimoth.com
> > > Subject: Re: [PATCH] Workaround very slow nss_winbind, fix crash on
> > > the AD DC (particularly for backups)
> > >
> > > On Fri, 2013-06-21 at 05:58 +0000, Philippe.Simonet at swisscom.com
> wrote:
> > > > Hi Andrew,
> > > >
> > > > many thanks for you patch,
> > > > i tested it on 2 different systems but without success (the crash
> > > > is always
> > > happening).
> > > >
> > > > before applying the patch, I had a strange problem :  I couldn't
> > > > reproduce the problem (with wbinfo --uid-info 3000000) on one of
> > > > the machine. no chance even if I reinstall, re-provision, ...). I
> > > > finally reboot the machine and after the reboot the crash was
> > > > reproduceable again (...)
> > >
> > > Thank you for finally getting back to me on this.  After seeing it
> > > once, I was also unable to reproduce the crash, and so was patching blind.
> > > This remains illusive.
> > >
> > > Does this alternative patch help?
> > >
> > > > on both machines, what I've done :
> > > > (...untar...)
> > > > cd samba-4.0.6
> > > > patch -p1 <
> > > > 0001-s4-winbind-Add-special-case-for-BUILTIN-domain.patch
> > > > ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var
> > > > --enable-fhs make make install rm /etc/samba/smb.conf samba-tool
> > > > domain provision --dns-backend=BIND9_FLATFILE --server-role=dc
> > > > --realm TEST.CH  --domain TEST --adminpass=Pa$$w0rd samba -i -M
> > > > single
> > > >
> > > > and ->>>  wbinfo --uid-info 3000000
> > > >
> > > > I get :
> > > > ---------------------
> > > > samba version 4.0.6 started.
> > > > Copyright Andrew Tridgell and the Samba Team 1992-2012
> > > > samba: using 'single' process model Attempting to autogenerate TLS
> > > > self-signed keys for https for hostname
> > > 'WZ3.test3.ch'
> > > > TLS self-signed keys generated OK
> > > >
> > >
> ==========================================================
> > > =====
> > > > INTERNAL ERROR: Signal 11 in pid 4844 (4.0.6) Please read the
> > > > Trouble-Shooting section of the Samba HOWTO
> > > >
> > >
> ==========================================================
> > > =====
> > > > PANIC: internal error
> > > > Aborted
> > > > ---------------------
> > > >
> > > > Best regards
> > > >
> > > > Philippe
> > >
> > > Thanks,
> > >
> > > Andrew Bartlett
> > >
> > > --
> > > Andrew Bartlett                                http://samba.org/~abartlet/
> > > Authentication Developer, Samba Team           http://samba.org
> >
> >
> 
> --
> Andrew Bartlett                                http://samba.org/~abartlet/
> Authentication Developer, Samba Team           http://samba.org