[Samba] Samba is still crashing

[Wayne Andersen]

I have had a problem for a couple of weeks now. I get very regular 
crashes on two of my three Domain Controllers.

I just updated to 4.1.0 and I am still getting the same problem.

I have added panic action = /bin/sleep 99999 to my config.
Here is a back trace for the crash.

(gdb) bt
#0  0x003c3424 in __kernel_vsyscall ()
#1  0xb76fa363 in __waitpid_nocancel () at 
../sysdeps/unix/syscall-template.S:82
#2  0xb7693eb3 in do_system (line=0x15b3d90 "/bin/sleep 99999") at 
../sysdeps/posix/system.c:149
#3  0x006a67ed in system (line=0x15b3d90 "/bin/sleep 99999") at 
pt-system.c:29
#4  0x0081fc28 in smb_panic_s3 (why=0x964ea1 "internal error") at 
../source3/lib/util.c:798
#5  0x0095356d in smb_panic (why=0x964ea1 "internal error") at 
../lib/util/fault.c:159
#6  0x00953237 in fault_report (sig=11) at ../lib/util/fault.c:77
#7  0x00953248 in sig_fault (sig=11) at ../lib/util/fault.c:88
#8  <signal handler called>
#9  0x003db680 in get_dcs_insite (ctx=0xad33f398, ldb=0xad59be60, 
sitedn=0xad50e948, list=0xad33f458, dofqdn=false) at 
../dfs_server/dfs_server_ad.c:236
#10 0x003dbcf0 in get_dcs (ctx=0xad33d668, ldb=0xad59be60, 
searched_site=0xad2e7f18 "Default-First-Site-Name", need_fqdn=false, 
pset_list=0xbfba3034, flags=0) at ../dfs_server/dfs_server_ad.c:345
#11 0x003dc760 in dodc_referral (lp_ctx=0xad6e8860, sam_ctx=0xad59be60, 
client=0xacffa098, r=0xad33d668, domain_name=0xad33d6e9 "CORP") at 
../dfs_server/dfs_server_ad.c:559
#12 0x003dd3e9 in dfs_server_ad_get_referrals (lp_ctx=0xad6e8860, 
sam_ctx=0xad59be60, client=0xacffa098, r=0xad33d668) at 
../dfs_server/dfs_server_ad.c:880
#13 0x00dd1ecd in dfs_samba4_get_referrals (handle=0xad4270f8, 
r=0xad33d668) at ../source3/modules/vfs_dfs_samba4.c:118
#14 0x00d3f075 in smb_vfs_call_get_dfs_referrals (handle=0xad4270f8, 
r=0xad33d668) at ../source3/smbd/vfs.c:1442
#15 0x00d67a1f in setup_dfs_referral (orig_conn=0xad274248, 
dfs_path=0xad33d608 "\\CORP", max_referral_level=3, ppdata=0xad1ee3fc, 
pstatus=0xbfba31dc) at ../source3/smbd/msdfs.c:1102
#16 0x00d20d73 in call_trans2getdfsreferral (conn=0xad274248, 
req=0xad33d528, pparams=0xad1ee3f4, total_params=14, ppdata=0xad1ee3fc, 
total_data=0, max_data_bytes=4096) at ../source3/smbd/trans2.c:8570
#17 0x00d217ff in handle_trans2 (conn=0xad274248, req=0xad33d528, 
state=0xad1ee3b0) at ../source3/smbd/trans2.c:8837
#18 0x00d221cb in reply_trans2 (req=0xad33d528) at 
../source3/smbd/trans2.c:9022
#19 0x00d5303c in switch_message (type=50 '2', req=0xad33d528) at 
../source3/smbd/process.c:1557
#20 0x00d531cc in construct_reply (sconn=0xace3a9c0, inbuf=0x0, size=86, 
unread_bytes=0, seqnum=0, encrypted=false, deferred_pcd=0x0) at 
../source3/smbd/process.c:1593
#21 0x00d53cba in process_smb (sconn=0xace3a9c0, inbuf=0xad33d498 "", 
nread=86, unread_bytes=0, seqnum=0, encrypted=false, deferred_pcd=0x0) 
at ../source3/smbd/process.c:1844
#22 0x00d54bca in smbd_server_connection_read_handler (sconn=0xace3a9c0, 
fd=44) at ../source3/smbd/process.c:2433
#23 0x00d54c40 in smbd_server_connection_handler (ev=0x14138e0, 
fde=0x156bab0, flags=1, private_data=0xace3a9c0) at 
../source3/smbd/process.c:2450
#24 0x0083b82c in run_events_poll (ev=0x14138e0, pollrtn=1, 
pfds=0xad198ce0, num_pfds=3) at ../source3/lib/events.c:257
#25 0x0083baf7 in s3_event_loop_once (ev=0x14138e0, location=0xec5c18 
"../source3/smbd/process.c:3627") at ../source3/lib/events.c:326
#26 0x008a8133 in _tevent_loop_once (ev=0x14138e0, location=0xec5c18 
"../source3/smbd/process.c:3627") at ../lib/tevent/tevent.c:530
#27 0x00d581ab in smbd_process (ev_ctx=0x14138e0, msg_ctx=0x1413960, 
sock_fd=44, interactive=false) at ../source3/smbd/process.c:3627
#28 0x004376d1 in smbd_accept_connection (ev=0x14138e0, fde=0xad132a98, 
flags=1, private_data=0xad1a1cb8) at ../source3/smbd/server.c:621
#29 0x0083b82c in run_events_poll (ev=0x14138e0, pollrtn=1, 
pfds=0xad198ce0, num_pfds=6) at ../source3/lib/events.c:257
#30 0x0083baf7 in s3_event_loop_once (ev=0x14138e0, location=0x43bf6e 
"../source3/smbd/server.c:943") at ../source3/lib/events.c:326
#31 0x008a8133 in _tevent_loop_once (ev=0x14138e0, location=0x43bf6e 
"../source3/smbd/server.c:943") at ../lib/tevent/tevent.c:530
#32 0x004383de in smbd_parent_loop (ev_ctx=0x14138e0, parent=0x1416630) 
at ../source3/smbd/server.c:943
#33 0x00439c70 in main (argc=4, argv=0xbfba3c34) at 
../source3/smbd/server.c:1577

Please let me know what other info I should provide.
Does this warrant a bug report?

-- 
Wayne Andersen