mod_auth_ntlm_winbind and NT_STATUS_ACCOUNT_LOCKED_OUT
Stefan Gohmann
gohmann at univention.de
Wed Mar 21 06:05:23 GMT 2007
Hello,
we have another mod_auth_ntlm_winbind problem (SIGSEGV) on SUN Solaris when
ntlm_auth returned NT_STATUS_ACCOUNT_LOCKED_OUT.
The part of the apache error_log file:
[Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(411): [client
184.1.23.51] sending back
TlRMTVNTUAACAAAABgAGADAAAAA1gokg2bFZvEET/loAAAAAAAAAAD4APgA2AAAATwBMAEIAAgAGAE8ATABCAAEAEgBaAFMAVABVAEQASQBPADEAMQAEAAAAAwASAHoAcwB0AHUAZABpAG8AMQAxAAAAAAA=
[Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(1018):
[client 184.1.23.51] doing ntlm auth dance
[Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(484): [client
184.1.23.51] Using existing auth helper 4359
samba-technical at samba.org
[Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(703): [client
184.1.23.51] parsing reply from helper to KK
TlRMTVNTUAADAAAAGAAYAGYAAABuAG4AfgAAAAYABgBIAAAADAAMAE4AAAAMAAwAWgAAAAAAAADsAAAABYKIIgUBKAoAAAAPTwBMAEIAYgAxADIANAAyADUAUAAzADAAMAA0ADQAttQz/A1nDpy7X3Wsql3O0DAIL9jTTkdM4RuvEkI6EfOm/nHh9SPUNAEBAAAAAAAA0hKxwkRixwEwCC/Y005HTAAAAAACAAYATwBMAEIAAQASAFoAUwBUAFUARABJAE8AMQAxAAQAAAADABIAegBzAHQAdQBkAGkAbwAxADEAAAAAAAAAAAB=\n
[Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(741): [client
184.1.23.51] got response: NA NT_STATUS_ACCOUNT_LOCKED_OUT
[Fri Mar 09 13:16:24 2007] [debug] mod_auth_ntlm_winbind.c(765): [client
184.1.23.51] user not authenticated: NT_STATUS_ACCOUNT_LOCKED_OUT
[Fri Mar 09 13:16:25 2007] [notice] child pid 4310 exit signal
Segmentation fault (11), possible coredump in /usr/apache2
The http.conf part:
<Directory "/var/apache2/htdocs/auth">
AuthName "NTLM Authentication thingy"
NTLMAuth on
NTLMAuthHelper "/usr/sfw/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp -d
400"
NTLMBasicAuthoritative on
AuthType NTLM
require valid-user
</Directory>
And the core dump output:
******************************************************************************
Application core Dump Analysis Output MDeBug Rev 1.0
Mon Mar 12 13:43:52 CET 2007 Files:
/usr/apache2/bin/httpd core_zstudio11_httpd_80_80_1173702731_2290
******************************************************************************
** Core file status **
------------------------
debugging core file of httpd (32-bit) from zstudio11
file: /usr/apache2/bin/httpd
initial argv: /usr/apache2/bin/httpd -k start
threading model: multi-threaded
status: process terminated by SIGSEGV (Segmentation Fault)
** Thread stack($c) **
----------------------
0xff119260(223e0a3c, 7, f, 0, 4e7b30, fe523008)
mod_auth_ntlm_winbind.so`check_user_id+0xf0(4e7b30, 4e8d1f, 10000,
fffefeb4,
fe533154, 4e1fd0)
ap_run_check_user_id+0x3c(4e7b30, fe522008, 70254, 4d5448, 6, 7)
ap_process_request_internal+0x27c(0, c1718, c1608, 7ce20, 0, 4e7b30)
ap_process_request+0x40(4e7b30, 0, 4, 0, 6d400, 4e7b30)
0x26674(4e1bf0, 0, 4e1c48, 4e1b18, 6d73c, 0)
ap_run_process_connection+0x3c(4e1bf0, 26604, 701ec, 4d5344, 1, 2)
0x2cfd0(4dfb80, 70400, ffbffb44, 6c7dc, 6c71c, 4e2e)
0x2d15c(2c800, 1, 6c400, 1, 6d400, 0)
0x2d1d4(4, 4ddaa8, 70400, 6c400, 6d734, 4)
ap_mpm_run+0x1d0(6, 6c400, a, 6c400, 5, 6c704)
main+0x878(3, 6c400, 7ce20, 55400, 6c638, 55400)
_start+0x108(0, 0, 0, 0, 0, 0)
Thread stack for MT app
------------------------
stack pointer for thread 1: ffbff808
[ ffbff808 0xff119260() ]
ffbff868 mod_auth_ntlm_winbind.so`check_user_id+0xf0()
ffbff8d0 ap_run_check_user_id+0x3c()
ffbff930 ap_process_request_internal+0x27c()
ffbff990 ap_process_request+0x40()
ffbff9f0 0x26674()
ffbffa58 ap_run_process_connection+0x3c()
ffbffab8 0x2cfd0()
ffbffb48 0x2d15c()
ffbffba8 0x2d1d4()
ffbffc08 ap_mpm_run+0x1d0()
ffbffc90 main+0x878()
ffbffd40 _start+0x108()
Please let me know, if you need more information.
Thanks in advance.
Cheers
Stefan
--
Stefan Gohmann Entwicklung gohmann at univention.de
Univention GmbH Linux for your Business fon: +49 421 22 232- 0
Mary-Somerville-Str.1 28359 Bremen fax: +49 421 22 232-99
http://www.univention.de
More information about the samba-technical
mailing list