[Samba] Crash of winbind on RODC

cn at brain-biotech.de cn at brain-biotech.de
Tue Feb 16 13:55:45 UTC 2021


I have been testing a bit more with the RODC. I have have setup our 
pfsense to use the RODC as LDAP authentication source. Identical as our 
other DCs. This is just for testing as in pfsense there is a 
functionality to test authentication sources.

If I test there I get this in the Logs of the RODC:


Feb 16 14:37:25 rodc.hq.domain.de samba[53258]: [2021/02/16 
14:37:25.210882,  2] 
../../auth/auth_log.c:653(log_authentication_event_human_readable)
Feb 16 14:37:25 rodc.hq.domain.de samba[53258]:   Auth: [LDAP,simple 
bind] user [(null)]\[pfsense at HQ.domain.DE] at [Tue, 16 Feb 2021 
14:37:25.210818 CET] with [Plaintext] status 
[NT_STATUS_CONNECTION_DISCONNECTED] workstation [(null)] remote host 
[ipv4:10.1.0.9:10499] mapped to [BRAIN-02]\[ldapsearch]. local host 
[ipv4:10.1.0.77:636]

Thats the ldap simple bind as the user pfsense which is used to connect 
to the ldap server instead of anonymous binds. The user I test with here 
is different and works with "wbinfo -a".

Then windbind dumps core:

Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]: [2021/02/16 
14:32:25.560792,  0] ../../lib/util/fault.c:159(smb_panic_log)
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]: 
===============================================================
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]: [2021/02/16 
14:32:25.560965,  0] ../../lib/util/fault.c:163(smb_panic_log)
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:   INTERNAL ERROR: 
Signal 11: Segmentation fault in pid 53292 (4.13.4-SerNet-RedHat-6.el8)
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]: [2021/02/16 
14:32:25.561010,  0] ../../lib/util/fault.c:168(smb_panic_log)
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:   If you are running 
a recent Samba version, and if you think this problem is not yet fixed 
in the latest versions, please consider reporting this bug, see 
https://wiki.samba.org/index.php/Bug_Reporting
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]: [2021/02/16 
14:32:25.561036,  0] ../../lib/util/fault.c:169(smb_panic_log)
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]: 
===============================================================
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]: [2021/02/16 
14:32:25.561056,  0] ../../lib/util/fault.c:171(smb_panic_log)
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:   PANIC (pid 53292): 
Signal 11: Segmentation fault in 4.13.4-SerNet-RedHat-6.el8
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]: [2021/02/16 
14:32:25.561735,  0] ../../lib/util/fault.c:275(log_stack_trace)
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:   BACKTRACE: 32 stack 
frames:
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #0 
/usr/lib64/samba/libsamba-util.so.0(log_stack_trace+0x30) [0x7f838f88a4f2]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #1 
/usr/lib64/samba/libsamba-util.so.0(smb_panic_log+0x5b) [0x7f838f88a624]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #2 
/usr/lib64/samba/libsamba-util.so.0(smb_panic+0x23) [0x7f838f88a786]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #3 
/usr/lib64/samba/libsamba-util.so.0(+0x179d2) [0x7f838f88a9d2]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #4 
/lib64/libpthread.so.0(+0x12b20) [0x7f838a51eb20]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #5 
/usr/lib64/samba/liblibcli-netlogon3-samba4.so(rpccli_netlogon_network_logon+0x1ce) 
[0x7f838ec3142f]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #6 
/usr/sbin/winbindd(+0x60f41) [0x56204fd8cf41]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #7 
/usr/sbin/winbindd(winbind_dual_SamLogon+0x13b) [0x56204fd910ab]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #8 
/usr/sbin/winbindd(_winbind_SamLogon+0x164) [0x56204fdae62e]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #9 
/usr/sbin/winbindd(+0x8580c) [0x56204fdb180c]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #10 
/usr/sbin/winbindd(winbind__op_local+0xe) [0x56204fdb1a35]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #11 
/usr/sbin/winbindd(winbindd_dual_ndrcmd+0x331) [0x56204fdaa3ee]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #12 
/usr/sbin/winbindd(+0x79d22) [0x56204fda5d22]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #13 
/usr/lib64/samba/libtevent.so.0(tevent_common_invoke_fd_handler+0x84) 
[0x7f839205d0e3]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #14 
/usr/lib64/samba/libtevent.so.0(+0xc659) [0x7f8392063659]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #15 
/usr/lib64/samba/libtevent.so.0(+0xa2a7) [0x7f83920612a7]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #16 
/usr/lib64/samba/libtevent.so.0(_tevent_loop_once+0xa2) [0x7f839205c8f6]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #17 
/usr/sbin/winbindd(+0x7d632) [0x56204fda9632]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #18 
/usr/sbin/winbindd(+0x7d7a9) [0x56204fda97a9]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #19 
/usr/lib64/samba/libtevent.so.0(_tevent_req_notify_callback+0x1b) 
[0x7f839205dc50]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #20 
/usr/lib64/samba/libtevent.so.0(+0x6cf8) [0x7f839205dcf8]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #21 
/usr/lib64/samba/libtevent.so.0(_tevent_req_done+0x11) [0x7f839205dd14]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #22 
/usr/lib64/samba/libtevent.so.0(+0x682a) [0x7f839205d82a]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #23 
/usr/lib64/samba/libtevent.so.0(+0x6815) [0x7f839205d815]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #24 
/usr/lib64/samba/libtevent.so.0(tevent_common_invoke_immediate_handler+0x134) 
[0x7f839205d505]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #25 
/usr/lib64/samba/libtevent.so.0(tevent_common_loop_immediate+0x1f) 
[0x7f839205d526]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #26 
/usr/lib64/samba/libtevent.so.0(+0xc379) [0x7f8392063379]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #27 
/usr/lib64/samba/libtevent.so.0(+0xa2a7) [0x7f83920612a7]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #28 
/usr/lib64/samba/libtevent.so.0(_tevent_loop_once+0xa2) [0x7f839205c8f6]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #29 
/usr/sbin/winbindd(main+0x18c4) [0x56204fd585c1]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #30 
/lib64/libc.so.6(__libc_start_main+0xf3) [0x7f8389d7b7b3]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:    #31 
/usr/sbin/winbindd(_start+0x2e) [0x56204fd501de]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]: [2021/02/16 
14:32:25.562146,  0] ../../source3/lib/util.c:838(smb_panic_s3)
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:   smb_panic(): 
calling panic action [/usr/share/samba/scripts/panic-action 53292]
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]: [2021/02/16 
14:32:25.624148,  0] ../../source3/lib/util.c:846(smb_panic_s3)
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:   smb_panic(): action 
returned status 0
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]: [2021/02/16 
14:32:25.624300,  0] ../../source3/lib/dumpcore.c:318(dump_core)
Feb 16 14:32:25 rodc.hq.domain.de winbindd[53292]:   coredump is handled 
by helper binary specified at /proc/sys/kernel/core_pattern

Feb 16 14:32:26 rodc.hq.domain.de winbindd[53226]: [2021/02/16 
14:32:26.508890,  0] 
../../source3/winbindd/winbindd_irpc.c:56(wb_irpc_forward_callback)
Feb 16 14:32:26 rodc.hq.domain.de winbindd[53226]:   RPC callback failed 
for winbind_SamLogon - NT_STATUS_CONNECTION_DISCONNECTED
Feb 16 14:32:26 rodc.hq.domain.de samba[53253]: [2021/02/16 
14:32:26.509571,  2] 
../../auth/auth_log.c:653(log_authentication_event_human_readable)
Feb 16 14:32:26 rodc.hq.domain.de samba[53253]:   Auth: [LDAP,simple 
bind] user [(null)]\[ldapsearch at HQ.domain.DE] at [Tue, 16 Feb 2021 
14:32:26.509499 CET] with [Plaintext] status 
[NT_STATUS_CONNECTION_DISCONNECTED] workstation [(null)] remote host 
[ipv4:10.1.0.9:11693] mapped to [BRAIN-02]\[ldapsearch]. local host 
[ipv4:10.1.0.77:636]
Feb 16 14:32:26 rodc.hq.domain.de systemd-coredump[53300]: Process 53292 
(winbindd) of user 0 dumped core.

                                                                   Stack 
trace of thread 53292:
                                                                   #0 
0x00007f8389d8f7ff raise (libc.so.6)
                                                                   #1 
0x00007f8389d79c35 abort (libc.so.6)
                                                                   #2 
0x00007f838c8be3be dump_core (libsmbconf.so.0)
                                                                   #3 
0x00007f838c8cc830 smb_panic_s3 (libsmbconf.so.0)
                                                                   #4 
0x00007f838f88a797 smb_panic (libsamba-util.so.0)
                                                                   #5 
0x00007f838f88a9d2 sig_fault (libsamba-util.so.0)
                                                                   #6 
0x00007f838a51eb20 __restore_rt (libpthread.so.0)
                                                                   #7 
0x00007f838ec3142f rpccli_netlogon_network_logon 
(liblibcli-netlogon3-samba4.so)
                                                                   #8 
0x000056204fd8cf41 winbind_samlogon_retry_loop (winbindd)
                                                                   #9 
0x000056204fd910ab winbind_dual_SamLogon (winbindd)
                                                                   #10 
0x000056204fdae62e _winbind_SamLogon (winbindd)
                                                                   #11 
0x000056204fdb180c winbind__op_dispatch_internal (winbindd)
                                                                   #12 
0x000056204fdb1a35 winbind__op_local (winbindd)
                                                                   #13 
0x000056204fdaa3ee winbindd_dual_ndrcmd (winbindd)
                                                                   #14 
0x000056204fda5d22 child_handler (winbindd)
                                                                   #15 
0x00007f839205d0e3 tevent_common_invoke_fd_handler (libtevent.so.0)
                                                                   #16 
0x00007f8392063659 epoll_event_loop_once (libtevent.so.0)
                                                                   #17 
0x00007f83920612a7 std_event_loop_once (libtevent.so.0)
                                                                   #18 
0x00007f839205c8f6 _tevent_loop_once (libtevent.so.0)
                                                                   #19 
0x000056204fda9632 fork_domain_child (winbindd)
                                                                   #20 
0x000056204fda97a9 wb_child_request_waited (winbindd)
                                                                   #21 
0x00007f839205dc50 _tevent_req_notify_callback (libtevent.so.0)
                                                                   #22 
0x00007f839205dcf8 tevent_req_finish (libtevent.so.0)
                                                                   #23 
0x00007f839205dd14 _tevent_req_done (libtevent.so.0)
                                                                   #24 
0x00007f839205d82a tevent_queue_wait_trigger (libtevent.so.0)
                                                                   #25 
0x00007f839205d815 tevent_queue_immediate_trigger (libtevent.so.0)
                                                                   #26 
0x00007f839205d505 tevent_common_invoke_immediate_handler (libtevent.so.0)
                                                                   #27 
0x00007f839205d526 tevent_common_loop_immediate (libtevent.so.0)
                                                                   #28 
0x00007f8392063379 epoll_event_loop_once (libtevent.so.0)
                                                                   #29 
0x00007f83920612a7 std_event_loop_once (libtevent.so.0)
                                                                   #30 
0x00007f839205c8f6 _tevent_loop_once (libtevent.so.0)
                                                                   #31 
0x000056204fd585c1 main (winbindd)
                                                                   #32 
0x00007f8389d7b7b3 __libc_start_main (libc.so.6)
                                                                   #33 
0x000056204fd501de _start (winbindd)


A bug or something else?

Regards


Christian

-- 
Dr. Christian Naumer
Vice President
Unit Head Bioprocess Development

B.R.A.I.N Aktiengesellschaft
Darmstaedter Str. 34-36, D-64673 Zwingenberg
e-mail cn at brain-biotech.com, homepage www.brain-biotech.com
phone +49-6251-9331-30 / fax +49-6251-9331-11

Sitz der Gesellschaft: Zwingenberg/Bergstrasse
Registergericht AG Darmstadt, HRB 24758
Vorstand: Adriaan Moelker (Vorstandsvorsitzender), 
Lukas Linnig
Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen



More information about the samba mailing list