Attachment 9426 Details for Bug 10246 – Backtrack with machine account information

Backtrack with machine account information

panich action backtrack 20131114-machineaccount.txt (text/plain), 18.16 KB, created by goetz.reinicke on 2013-11-15 10:07:29 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: goetz.reinicke

Created: 2013-11-15 10:07:29 UTC

Size: 18.16 KB

patch

obsolete

>
>
>The Samba 'panic action' script, /usr/local/bin/panic-action,
>was called for pid 8924 (/usr/sbin/smbd).
>
>Below is a backtrace for this process generated with gdb, which shows
>the state of the program at the time the error occured. If this problem
>is recurring, you should think about submitting a bugreport for Samba.
>
>
>
>[Thread debugging using libthread_db enabled]
>0x00007ffbb75ad7ae in waitpid () from /lib64/libc.so.6
>#0  0x00007ffbb75ad7ae in waitpid () from /lib64/libc.so.6
>No symbol table info available.
>#1  0x00007ffbb753f8c9 in do_system () from /lib64/libc.so.6
>No symbol table info available.
>#2  0x00007ffbbabc1873 in smb_panic (why=<value optimized out>) at lib/util.c:1123
>        cmd = 0x7ffbbcff6e00 "/usr/local/bin/panic-action 8924"
>        result = <value optimized out>
>        __FUNCTION__ = "smb_panic"
>#3  0x00007ffbbabb22d4 in fault_report (sig=11) at lib/fault.c:53
>        counter = 1
>#4  sig_fault (sig=11) at lib/fault.c:76
>No locals.
>#5  <signal handler called>
>No symbol table info available.
>#6  tcopy_passwd (mem_ctx=<value optimized out>, from=0x1f0) at ../lib/util/util_pw.c:82
>        ret = 0x7ffbbcf0ce30
>#7  0x00007ffbbab5c732 in pdb_copy_sam_account (dst=0x7ffbbcffb1a0, src=0x7ffbbcf0c5d0) at passdb/passdb.c:2114
>        buf = 0x7ffbbcff7c90 ""
>        len = <value optimized out>
>#8  0x00007ffbbab60b35 in pdb_getsampwsid (sam_acct=0x7ffbbcffb1a0, sid=0x7fffbd935ff0) at passdb/pdb_interface.c:414
>        cache_copy = <value optimized out>
>        pdb = 0x7ffbbceff190
>        rid = 1054
>        cache_data = <value optimized out>
>        ok = false
>        __FUNCTION__ = "pdb_getsampwsid"
>#9  0x00007ffbbaa9729c in _samr_OpenUser (p=0x7ffbbcfc7840, r=0x7ffbbcfc84c0) at rpc_server/samr/srv_samr_nt.c:2204
>        sampass = 0x7ffbbcffb1a0
>        sid = {sid_rev_num = 1 '\001', num_auths = 5 '\005', id_auth = "\000\000\000\000\000\005", sub_auths = {21, 3348813608, 2003740952, 1141461195, 1054, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}}
>        dinfo = <value optimized out>
>        uinfo = <value optimized out>
>        psd = 0x7ffbbcf0c300
>        acc_granted = <value optimized out>
>        des_access = 985087
>        extra_access = 0
>        sd_size = 168
>        ret = <value optimized out>
>        nt_status = {v = 3170879824}
>        needed_priv_1 = <value optimized out>
>        needed_priv_2 = <value optimized out>
>        status = {v = 0}
>        __FUNCTION__ = "_samr_OpenUser"
>#10 0x00007ffbbaaa70f7 in api_samr_OpenUser (p=0x7ffbbcfc7840) at librpc/gen_ndr/srv_samr.c:2745
>        call = <value optimized out>
>        pull = 0x7ffbbcff6f30
>        push = <value optimized out>
>        ndr_err = <value optimized out>
>        r = 0x7ffbbcfc84c0
>#11 0x00007ffbbaab806a in rpcint_dispatch (mem_ctx=<value optimized out>, ev=0x7ffbbcfc8400, h=<value optimized out>, object=<value optimized out>, opnum=<value optimized out>, in_flags=<value optimized out>, in_data=0x7ffbbcff9590 "", in_length=28) at rpc_server/rpc_ncacn_np.c:210
>        num_cmds = <value optimized out>
>        cmds = <value optimized out>
>        i = <value optimized out>
>        ok = <value optimized out>
>#12 rpcint_bh_raw_call_send (mem_ctx=<value optimized out>, ev=0x7ffbbcfc8400, h=<value optimized out>, object=<value optimized out>, opnum=<value optimized out>, in_flags=<value optimized out>, in_data=0x7ffbbcff9590 "", in_length=28) at rpc_server/rpc_ncacn_np.c:308
>        hs = <value optimized out>
>        req = 0x7ffbbcf0c070
>        state = 0x7ffbbcffc950
>        ok = <value optimized out>
>        status = <value optimized out>
>#13 0x00007ffbbac347c9 in dcerpc_binding_handle_raw_call_send (mem_ctx=<value optimized out>, ev=0x7ffbbcfc8400, h=0x7ffbbcfc7760, object=0x0, opnum=34, in_flags=1048576, in_data=0x7ffbbcff9590 "", in_length=28) at ../librpc/rpc/binding_handle.c:133
>        req = 0x7ffbbcffda90
>        state = 0x7ffbbcffca30
>        subreq = <value optimized out>
>#14 0x00007ffbbac34a7b in dcerpc_binding_handle_call_send (mem_ctx=<value optimized out>, ev=0x7ffbbcfc8400, h=0x7ffbbcfc7760, object=0x0, table=<value optimized out>, opnum=34, r_mem=0x7ffbbcfc6e20, r_ptr=0x7fffbd936240) at ../librpc/rpc/binding_handle.c:414
>        req = 0x7ffbbcfc8a20
>        state = 0x7ffbbcff6cd0
>        subreq = <value optimized out>
>        ndr_err = <value optimized out>
>#15 0x00007ffbbac34b87 in dcerpc_binding_handle_call (h=0x7ffbbcfc7760, object=0x0, table=0x7ffbbb31d220, opnum=34, r_mem=<value optimized out>, r_ptr=<value optimized out>) at ../librpc/rpc/binding_handle.c:534
>        frame = 0x7ffbbcfc83b0
>        ev = <value optimized out>
>        subreq = <value optimized out>
>        status = <value optimized out>
>#16 0x00007ffbbab287fd in dcerpc_samr_OpenUser_r (h=<value optimized out>, mem_ctx=<value optimized out>, r=<value optimized out>) at librpc/gen_ndr/ndr_samr_c.c:7529
>        status = <value optimized out>
>#17 0x00007ffbbab2882d in dcerpc_samr_OpenUser (h=<value optimized out>, mem_ctx=<value optimized out>, _domain_handle=<value optimized out>, _access_mask=<value optimized out>, _rid=<value optimized out>, _user_handle=0x7fffbd936480, result=0x7fffbd936300) at librpc/gen_ndr/ndr_samr_c.c:7664
>        r = {in = {domain_handle = 0x7fffbd936310, access_mask = 33554432, rid = 1054}, out = {user_handle = 0x7fffbd9362d0, result = {v = 3170662240}}}
>        status = <value optimized out>
>#18 0x00007ffbbaa4962b in samr_find_machine_account (mem_ctx=0x7ffbbcfc6e20, b=0x7ffbbcfc7760, account_name=0x7ffbbcfc6980 "PC10768$", domain_sid_p=0x7fffbd936408, user_rid_p=0x7fffbd93641c, user_handle=0x7fffbd936480, access_mask=33554432) at rpc_server/netlogon/srv_netlog_nt.c:600
>        status = <value optimized out>
>        result = {v = 0}
>        connect_handle = {handle_type = 0, uuid = {time_low = 13, time_mid = 0, time_hi_and_version = 0, clock_seq = "\205R", node = "\315\314\334\"\000"}}
>        domain_handle = {handle_type = 0, uuid = {time_low = 14, time_mid = 0, time_hi_and_version = 0, clock_seq = "\205R", node = "\315\314\334\"\000"}}
>        domain_name = {length = 24, size = 24, string = 0x7ffbbcef60d0 "FILMAKADEMIE"}
>        domain_sid = 0x7ffbbcf0c8f0
>        names = {length = 16, size = 16, string = 0x7ffbbcfc6980 "PC10768$"}
>        rids = {count = 1, ids = 0x7ffbbcffd770}
>        types = {count = 1, ids = 0x7ffbbcf0c1e0}
>        rid = <value optimized out>
>#19 0x00007ffbbaa498bb in get_md4pw (p=0x7ffbbcf0c3d0, r=0x7ffbbcfc6590) at rpc_server/netlogon/srv_netlog_nt.c:699
>        status = <value optimized out>
>        h = 0x7ffbbcfc7760
>        info = <value optimized out>
>        client_id = {addr = "127.0.0.1", '\000' <repeats 36 times>, name = 0x7ffbbae34cfd "127.0.0.1"}
>        result = {v = 0}
>        mem_ctx = 0x7ffbbcfc6e20
>        user_handle = {handle_type = 0, uuid = {time_low = 0, time_mid = 0, time_hi_and_version = 0, clock_seq = "\000", node = "\000\000\000\000\000"}}
>        user_rid = <value optimized out>
>        domain_sid = <value optimized out>
>        acct_ctrl = <value optimized out>
>        session_info = 0x7ffbbcfc6e70
>#20 _netr_ServerAuthenticate3 (p=0x7ffbbcf0c3d0, r=0x7ffbbcfc6590) at rpc_server/netlogon/srv_netlog_nt.c:947
>        status = <value optimized out>
>        srv_flgs = 1073889791
>        in_neg_flags = <value optimized out>
>        fn = 0x7ffbbaefcbe5 "_netr_ServerAuthenticate3"
>        sid = {sid_rev_num = 15 '\017', num_auths = 0 '\000', id_auth = "\000\000\000\000\000", sub_auths = {3170657840, 32763, 16, 0, 1, 0, 3170657704, 32763, 8, 0, 8, 0, 3132998565, 32763, 3180553368}}
>        mach_pwd = {hash = "\220e\374\274\373\177\000\000\006\271Óº\373\177\000"}
>        creds = <value optimized out>
>        pipe_state = 0x7ffbbcfec070
>        __FUNCTION__ = "_netr_ServerAuthenticate3"
>#21 0x00007ffbbaa4e6fc in api_netr_ServerAuthenticate3 (p=0x7ffbbcf0c3d0) at librpc/gen_ndr/srv_netlogon.c:2168
>        call = <value optimized out>
>        pull = 0x7ffbbcfc6630
>        push = <value optimized out>
>        ndr_err = <value optimized out>
>        r = 0x7ffbbcfc6590
>#22 0x00007ffbbaab44d6 in api_rpcTNP (p=0x7ffbbcf0c3d0, pkt=0x7ffbbcff94d0, api_rpc_cmds=0x7ffbbb3387a0, n_cmds=<value optimized out>) at rpc_server/srv_pipe.c:1647
>        fn_num = <value optimized out>
>        offset1 = 0
>        __FUNCTION__ = "api_rpcTNP"
>#23 0x00007ffbbaab574f in api_pipe_request (p=0x7ffbbcf0c3d0) at rpc_server/srv_pipe.c:1580
>        frame = 0x7ffbbcfc6540
>        ret = false
>        changed_user = false
>        pipe_fns = 0x7ffbbcf0bbe0
>#24 process_request_pdu (p=0x7ffbbcf0c3d0) at rpc_server/srv_pipe.c:1837
>        ret = false
>        status = <value optimized out>
>#25 process_complete_pdu (p=0x7ffbbcf0c3d0) at rpc_server/srv_pipe.c:1894
>        pkt = 0x7ffbbcff94d0
>        status = <value optimized out>
>        reply = false
>        __FUNCTION__ = "process_complete_pdu"
>#26 0x00007ffbbaab6ec8 in process_incoming_data (p=0x7ffbbcf0c3d0, data=0x7ffbbcf304e0 "h", n=<value optimized out>) at rpc_server/srv_pipe_hnd.c:218
>        data_to_copy = 112
>        __FUNCTION__ = "process_incoming_data"
>#27 0x00007ffbbaab7361 in write_to_internal_pipe (mem_ctx=<value optimized out>, ev=0x7ffbbcef4510, handle=<value optimized out>, data=<value optimized out>, len=128) at rpc_server/srv_pipe_hnd.c:244
>        data_used = <value optimized out>
>        data_left = 112
>#28 np_write_send (mem_ctx=<value optimized out>, ev=0x7ffbbcef4510, handle=<value optimized out>, data=<value optimized out>, len=128) at rpc_server/srv_pipe_hnd.c:538
>        p = 0x7ffbbcf0c3d0
>        req = 0x7ffbbcf309a0
>        state = 0x7ffbbcf30b00
>        status = <value optimized out>
>        __FUNCTION__ = "np_write_send"
>#29 0x00007ffbba92da1b in smbd_smb2_write_send (req=0x7ffbbcf301c0) at smbd/smb2_write.c:260
>        subreq = 0x0
>        status = <value optimized out>
>        state = 0x7ffbbcf30830
>        smbreq = 0x7ffbbcf308b0
>        conn = 0x7ffbbcff9190
>        req = 0x7ffbbcf306d0
>        nwritten = <value optimized out>
>        lock = {context = {smblctx = 140720235970560, tid = 56032, pid = {pid = 12, vnn = 0, unique_id = 140719183479040}}, start = 255, size = 140719146385197, fnum = 55520, lock_type = 32763, lock_flav = 3129992156}
>#30 smbd_smb2_request_process_write (req=0x7ffbbcf301c0) at smbd/smb2_write.c:97
>        status = <value optimized out>
>        inhdr = <value optimized out>
>        inbody = <value optimized out>
>        i = <value optimized out>
>        in_data_offset = <value optimized out>
>        in_data_length = <value optimized out>
>        in_data_buffer = {data = 0x7ffbbcf304d0 "\005", length = 128}
>        in_fsp = 0x7ffbbcf0ba70
>        subreq = 0x7ffbbcf306d0
>        __FUNCTION__ = "smbd_smb2_request_process_write"
>#31 0x00007ffbba923d95 in smbd_smb2_request_dispatch (req=0x7ffbbcf301c0) at smbd/smb2_server.c:1569
>        inhdr = <value optimized out>
>        i = <value optimized out>
>        opcode = 9
>        flags = 0
>        status = <value optimized out>
>        session_status = {v = 0}
>        allowed_flags = <value optimized out>
>        __FUNCTION__ = "smbd_smb2_request_dispatch"
>#32 0x00007ffbba92539d in smbd_smb2_request_incoming (subreq=0x0) at smbd/smb2_server.c:2657
>        sconn = 0x7ffbbcef45d0
>        status = <value optimized out>
>        req = <value optimized out>
>        __FUNCTION__ = "smbd_smb2_request_incoming"
>#33 0x00007ffbba922690 in smbd_smb2_request_read_done (subreq=0x7ffbbcf1be40) at smbd/smb2_server.c:2500
>        req = 0x7ffbbcfc8a20
>        ret = <value optimized out>
>        sys_errno = 32763
>        status = <value optimized out>
>#34 0x00007ffbba9c2172 in tstream_readv_pdu_queue_done (subreq=0x7ffbbcf0c240) at ../lib/tsocket/tsocket_helpers.c:394
>        req = 0x7ffbbcf1be40
>        state = 0x7ffbbcffc950
>        ret = 244
>        sys_errno = <value optimized out>
>#35 0x00007ffbba9c24f4 in tstream_readv_pdu_readv_done (subreq=0x7ffbbcf0ca20) at ../lib/tsocket/tsocket_helpers.c:287
>        req = 0x7ffbbcf0c240
>        state = 0x7ffbbcffb830
>        ret = <value optimized out>
>        sys_errno = <value optimized out>
>#36 0x00007ffbba9c14c4 in tstream_readv_done (subreq=0x0) at ../lib/tsocket/tsocket.c:604
>        req = 0x7ffbbcf0ca20
>        state = 0x7ffbbcffb8c0
>        ret = 174
>        sys_errno = <value optimized out>
>#37 0x00007ffbbabd252f in tevent_common_loop_immediate (ev=0x7ffbbcef4510) at ../lib/tevent/tevent_immediate.c:135
>        im = 0x7ffbbcf0cae0
>        handler = 0x7ffbbabd36d0 <tevent_req_trigger>
>        private_data = 0x7ffbbcff94d0
>#38 0x00007ffbbabd07bc in run_events_poll (ev=0x7ffbbcef4510, pollrtn=0, pfds=0x0, num_pfds=0) at lib/events.c:197
>        state = <value optimized out>
>        pollfd_idx = <value optimized out>
>        fde = <value optimized out>
>        now = {tv_sec = 140719183311040, tv_usec = 8192}
>        __FUNCTION__ = "run_events_poll"
>#39 0x00007ffbba90e8e8 in smbd_server_connection_loop_once (sconn=0x7ffbbcef45d0) at smbd/process.c:995
>        timeout = 0
>        num_pfds = 2
>        ret = <value optimized out>
>        retry = <value optimized out>
>#40 smbd_process (sconn=0x7ffbbcef45d0) at smbd/process.c:3159
>        status = <value optimized out>
>        frame = 0x7ffbbcfc64e0
>        ss = {ss_family = 2, __ss_align = 0, __ss_padding = "\001\000\000\000\000\000\000\000\320\375\376\274\373\177\000\000;\246\371\272\373\177\000\000 \376\376\274\373\177\000\000\200\252\367\274\373\177\000\000\260\060\357\274\373\177\000\000\001\000\000\000\000\000\000\000\211\263\354\267\373\177\000\000 \376\376\274\373\177\000\000\001\000\000\000\000\000\000\000\063\000\000\000\000\000\000\000\202\222\060Ý\330\070F\200j\357\274\373\177\000\000)E\272\272\373\177\000"}
>        sa = 0x7fffbd936cf0
>        sa_socklen = <value optimized out>
>        local_address = 0x7ffbbcfef540
>        remote_address = 0x7ffbbcfef470
>        remaddr = <value optimized out>
>        ret = <value optimized out>
>        __FUNCTION__ = "smbd_process"
>#41 0x00007ffbbae318ef in smbd_accept_connection (ev=<value optimized out>, fde=<value optimized out>, flags=<value optimized out>, private_data=<value optimized out>) at smbd/server.c:514
>        status = <value optimized out>
>        s = 0x0
>        addr = {ss_family = 2, __ss_align = 0, __ss_padding = "\020X\357\274\373\177\000\000\200j\357\274\373\177\000\000\003\000\000\000\000\000\000\000\232\331Y\267\373\177\000\000\ad\372\272\373\177\000\000\221\f\271\272\373\177\000\000\260\037\275\272\373\177\000\000\260\060\357\274\373\177\000\000\023\000\000\000\000\000\000\000\276@\017\000\000\000\000\000\260n\223\275\377\177\000\000\024\370\237\275\377\177\000\000\360n\223\275\377\177\000\000\000\000\000\000\000\000\000"}
>        in_addrlen = 16
>        fd = <value optimized out>
>        pid = 0
>        unique_id = 5060032246508982914
>        __FUNCTION__ = "smbd_accept_connection"
>#42 0x00007ffbbabd0af7 in run_events_poll (ev=0x7ffbbcef4510, pollrtn=<value optimized out>, pfds=0x7ffbbcef6a80, num_pfds=3) at lib/events.c:286
>        pfd = <value optimized out>
>        flags = <value optimized out>
>        state = <value optimized out>
>        pollfd_idx = 0x7ffbbcff9b70
>        fde = 0x7ffbbcfedf70
>        now = {tv_sec = 1384500429, tv_usec = 161701}
>        __FUNCTION__ = "run_events_poll"
>#43 0x00007ffbbabd0faf in s3_event_loop_once (ev=0x7ffbbcef4510, location=<value optimized out>) at lib/events.c:349
>        state = 0x7ffbbcef5810
>        timeout = 20000
>        num_pfds = 3
>        ret = 1
>#44 0x00007ffbbabd1330 in _tevent_loop_once (ev=0x7ffbbcef4510, location=0x7ffbbb03c969 "smbd/server.c:820") at ../lib/tevent/tevent.c:494
>        ret = <value optimized out>
>        nesting_stack_ptr = 0x0
>#45 0x00007ffbbae32beb in smbd_parent_loop (argc=<value optimized out>, argv=0x7ffbbcff2590) at smbd/server.c:820
>        ret = <value optimized out>
>        frame = 0x7ffbbcf2cdf0
>#46 main (argc=<value optimized out>, argv=0x7ffbbcff2590) at smbd/server.c:1304
>        is_daemon = <value optimized out>
>        interactive = <value optimized out>
>        Fork = <value optimized out>
>        no_process_group = <value optimized out>
>        log_stdout = <value optimized out>
>        ports = 0x0
>        profile_level = 0x0
>        opt = <value optimized out>
>        pc = <value optimized out>
>        print_build_options = 176
>        long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x7ffbb82db420, val = 0, descrip = 0x7ffbbb03c613 "Help options:", argDescrip = 0x0}, {longName = 0x7ffbbaf92686 "daemon", shortName = 68 'D', argInfo = 0, arg = 0x0, val = 1000, descrip = 0x7ffbbb03c621 "Become a daemon (default)", argDescrip = 0x0}, {longName = 0x7ffbbb03c63b "interactive", shortName = 105 'i', argInfo = 0, arg = 0x0, val = 1001, descrip = 0x7ffbbb03cd50 "Run interactive (not a daemon)", argDescrip = 0x0}, {longName = 0x7ffbbb03c647 "foreground", shortName = 70 'F', argInfo = 0, arg = 0x0, val = 1002, descrip = 0x7ffbbb03cd70 "Run daemon in foreground (for daemontools, etc.)", argDescrip = 0x0}, {longName = 0x7ffbbb03c652 "no-process-group", shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 1003, descrip = 0x7ffbbb03cda8 "Don't create a new process group", argDescrip = 0x0}, {longName = 0x7ffbbb03c663 "log-stdout", shortName = 83 'S', argInfo = 0, arg = 0x0, val = 1004, descrip = 0x7ffbbb03c66e "Log to stdout", argDescrip = 0x0}, {longName = 0x7ffbbb03c67c "build-options", shortName = 98 'b', argInfo = 0, arg = 0x0, val = 98, descrip = 0x7ffbbb03c68a "Print build options", argDescrip = 0x0}, {longName = 0x7ffbbaec6189 "port", shortName = 112 'p', argInfo = 1, arg = 0x7fffbd937288, val = 0, descrip = 0x7ffbbb03c69e "Listen on the specified ports", argDescrip = 0x0}, {longName = 0x7ffbbb03c6bc "profiling-level", shortName = 80 'P', argInfo = 1, arg = 0x7fffbd937280, val = 0, descrip = 0x7ffbbb03c6cc "Set profiling level", argDescrip = 0x7ffbbb03c6e0 "PROFILE_LEVEL"}, {longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x7ffbbb33b480, val = 0, descrip = 0x7ffbbb03c6ee "Common samba options:", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x7ffbbb31e300, val = 0, descrip = 0x7ffbbb03cdd0 "Build-time configuration overrides:", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 0, descrip = 0x0, argDescrip = 0x0}}
>        parent = 0x7ffbbcff2590
>        frame = <value optimized out>
>        status = <value optimized out>
>        __FUNCTION__ = "main"
>A debugging session is active.
>
>	Inferior 1 [process 8924] will be detached.
>
>Quit anyway? (y or n) [answered Y; input not from terminal]
>

Actions: View

Attachments on bug 10246: 9363 | 9425 | 9426 | 9427 | 9428 | 9726