[Samba] coredump while loggin in on SSH with a user ( with UID )

[Jeremy Allison]

On Thu, Nov 13, 2014 at 05:09:53PM +0100, L.P.H. van Belle wrote:
> Hai, i've seen a core dump... 
>  
> Clean server, static ip, Debian Jessie, samba 4.1.13 and cups installed. 
>  
> Im leaving the office now, but ill go test tomorrow some more. 
> It happend while logging in on ssh server. 
> pretty basic setup, like on the wiki, and pam was updated by running pam-auth-update. 
> tomorrow more info if this is not known. 
>  
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:   STATUS=daemon 'winbindd' finished starting up and ready to serve connections===============================================================
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]: [2014/11/13 16:57:03.632387,  0] ../lib/util/fault.c:73(fault_report)
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:   INTERNAL ERROR: Signal 11 in pid 12690 (4.1.13-Debian)
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:   Please read the Trouble-Shooting section of the Samba HOWTO
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]: [2014/11/13 16:57:03.632593,  0] ../lib/util/fault.c:75(fault_report)
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:   ===============================================================
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]: [2014/11/13 16:57:03.632721,  0] ../source3/lib/util.c:785(smb_panic_s3)
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:   PANIC (pid 12690): internal error
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]: [2014/11/13 16:57:03.633531,  0] ../source3/lib/util.c:896(log_stack_trace)
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:   BACKTRACE: 27 stack frames:
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #0 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f78ea00a2ca]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #1 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f78ea00a3b0]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #2 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(smb_panic+0x2f) [0x7f78ee333cbf]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #3 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(+0x1cedf) [0x7f78ee333edf]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #4 /lib/x86_64-linux-gnu/libpthread.so.0(+0xf8d0) [0x7f78ee7648d0]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #5 /usr/lib/x86_64-linux-gnu/libkrb5.so.26(krb5_storage_free+0x1) [0x7f78e8b44231]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #6 /usr/lib/x86_64-linux-gnu/libkrb5.so.26(+0x47605) [0x7f78e8b29605]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #7 /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(+0x8e06) [0x7f78eaba1e06]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #8 /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(gse_krb5_get_server_keytab+0xeb) [0x7f78eaba232b]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #9 /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(+0xb03a) [0x7f78eaba403a]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #10 /usr/lib/x86_64-linux-gnu/libgensec.so.0(gensec_start_mech+0x72) [0x7f78eb033ab2]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #11 /usr/lib/x86_64-linux-gnu/libgensec.so.0(gensec_start_mech_by_oid+0x26) [0x7f78eb033d96]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #12 /usr/sbin/winbindd(kerberos_return_pac+0x42c) [0x7f78eebbac3c]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #13 /usr/sbin/winbindd(winbindd_dual_pam_auth+0x1150) [0x7f78eebe0530]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #14 /usr/sbin/winbindd(+0x5fcec) [0x7f78eebf4cec]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #15 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x92cb) [0x7f78e80652cb]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #16 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x7797) [0x7f78e8063797]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #17 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d) [0x7f78e805ff9d]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #18 /usr/sbin/winbindd(+0x62068) [0x7f78eebf7068]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #19 /usr/sbin/winbindd(+0x62765) [0x7f78eebf7765]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #20 /usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_immediate+0xd4) [0x7f78e80607c4]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #21 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x908e) [0x7f78e806508e]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #22 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x7797) [0x7f78e8063797]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #23 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d) [0x7f78e805ff9d]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #24 /usr/sbin/winbindd(main+0xaac) [0x7f78eebb9fac]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #25 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f78e7cd4b45]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:    #26 /usr/sbin/winbindd(+0x25621) [0x7f78eebba621]
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]: [2014/11/13 16:57:03.641384,  0] ../source3/lib/dumpcore.c:312(dump_core)
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:   unable to change to /var/log/samba/cores/winbindd
> Nov 13 16:57:03 rtd-printsvr1 winbindd[12690]:   refusing to dump core

Hmmm. Looks like it's going down inside krb
due to bad storage. Any chance of reproducing
under valgrind with symbols ?