Bug 10039 - winbind crashes right after start
Summary: winbind crashes right after start
Status: RESOLVED WORKSFORME
Alias: None
Product: Samba 3.6
Classification: Unclassified
Component: Winbind (show other bugs)
Version: 3.6.16
Hardware: x64 FreeBSD
: P5 critical
Target Milestone: ---
Assignee: Michael Adam
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-07-19 18:07 UTC by drookie
Modified: 2020-02-14 19:14 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description drookie 2013-07-19 18:07:01 UTC
Hi.

FreeBSD 10.0-CURRENT.

Winbind crashes right after start:

[2013/07/19 20:03:02,  0] winbindd/winbindd.c:1348(main)
  winbindd version 3.6.16 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2011
[2013/07/19 20:03:02.055981,  0] winbindd/winbindd_cache.c:3169(initialize_winbindd_cache)
  initialize_winbindd_cache: clearing cache and re-creating with version number 2
winbindd: sha1 checksum failed
[2013/07/19 20:03:07.684454,  0] lib/fault.c:51(fault_report)
  ===============================================================
[2013/07/19 20:03:07.684524,  0] lib/fault.c:52(fault_report)
  INTERNAL ERROR: Signal 6 in pid 43788 (3.6.16)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2013/07/19 20:03:07.684595,  0] lib/fault.c:54(fault_report)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2013/07/19 20:03:07.684663,  0] lib/fault.c:55(fault_report)
  ===============================================================
[2013/07/19 20:03:07.684728,  0] lib/util.c:1117(smb_panic)
  PANIC (pid 43788): internal error
[2013/07/19 20:03:07.685766,  0] lib/util.c:1221(log_stack_trace)
  BACKTRACE: 33 stack frames:
   #0 0x121d0ec <smb_panic+108> at /usr/local/sbin/winbindd
   #1 0x1208f6b <debug_register_msgs+555> at /usr/local/sbin/winbindd
   #2 0x1208f83 <debug_register_msgs+579> at /usr/local/sbin/winbindd
   #3 0x80243b2cb <_swapcontext+347> at /lib/libthr.so.3
   #4 0x80243aeb9 <sigaction+825> at /lib/libthr.so.3
   #5 0x7ffffffff003
   #6 0x802ba709c <krb5_abortx+140> at /usr/lib/libkrb5.so.11
   #7 0x802bb9464 <krb5_hmac+500> at /usr/lib/libkrb5.so.11
   #8 0x802bb9209 <krb5_generate_random_keyblock+665> at /usr/lib/libkrb5.so.11
   #9 0x802bb93c6 <krb5_hmac+342> at /usr/lib/libkrb5.so.11
   #10 0x802bb9639 <krb5_create_checksum+457> at /usr/lib/libkrb5.so.11
   #11 0x802bb9547 <krb5_create_checksum+215> at /usr/lib/libkrb5.so.11
   #12 0x802ba596f <krb5_padata_add+511> at /usr/lib/libkrb5.so.11
   #13 0x802ba5a2c <krb5_mk_req_extended+28> at /usr/lib/libkrb5.so.11
   #14 0x1277028 <kerberos_compatible_enctypes+2728> at /usr/local/sbin/winbindd
   #15 0x1277392 <cli_krb5_get_ticket+626> at /usr/local/sbin/winbindd
   #16 0x12798c5 <spnego_gen_krb5_negTokenInit+149> at /usr/local/sbin/winbindd
   #17 0x126356a <cli_session_setup_guest_recv+9818> at /usr/local/sbin/winbindd
   #18 0x1263953 <cli_session_setup_guest_recv+10819> at /usr/local/sbin/winbindd
   #19 0x1264de7 <cli_session_setup_spnego+2439> at /usr/local/sbin/winbindd
   #20 0x111e53b <set_domain_online_request+4443> at /usr/local/sbin/winbindd
   #21 0x1120856 <fetch_current_dc_from_gencache+1334> at /usr/local/sbin/winbindd
   #22 0x1120dd3 <close_conns_after_fork+643> at /usr/local/sbin/winbindd
   #23 0x111c659 <winbindd_priv_pipe_dir+921> at /usr/local/sbin/winbindd
   #24 0x11f59fc <messaging_dispatch_rec+124> at /usr/local/sbin/winbindd
   #25 0x11f87bd <messaging_tdb_parent_init+3981> at /usr/local/sbin/winbindd
   #26 0x11f74eb <ndr_print_dbwrap_tdb2_changes+651> at /usr/local/sbin/winbindd
   #27 0x8049a383a <tevent_common_check_signal+234> at /usr/local/lib/libtevent.so.0
   #28 0x123087c <run_events_poll+44> at /usr/local/sbin/winbindd
   #29 0x12311c0 <get_timed_events_timeout+592> at /usr/local/sbin/winbindd
   #30 0x8049a0302 <_tevent_loop_once+114> at /usr/local/lib/libtevent.so.0
   #31 0x1102325 <main+2613> at /usr/local/sbin/winbindd
   #32 0x10fed13 <_start+419> at /usr/local/sbin/winbindd
[2013/07/19 20:03:07.686627,  0] lib/fault.c:416(dump_core)
  dumping core in /var/log/samba/cores/winbindd

Config:

[global]
workgroup = SOFTLAB
machine password timeout = 0
netbios name = CRYSTAL-ALPHA
server string = Samba 3.6.16 on FreeBSD 10.0-CURRENT
hosts allow = 192.168. 127. 172.16. fd00/16
guest account = pcguest
map to guest = bad user
log level = 0
log file = /var/log/samba/log.%m
max log size = 100

name resolve order = host wins bcast

security = ads
realm = norma.com

password server = hq-gc.norma.com

encrypt passwords = yes
socket options = TCP_NODELAY
dns proxy = no
local master = no
domain master = no
os level = 128
interfaces = vlan1 lo0
bind interfaces only = yes
syslog = 4
deadtime = 15
wins server = 192.168.3.34
printing = BSD
unix charset = KOI8-R
dos charset = 866

client ldap sasl wrapping = sign

idmap uid = 20000-30000
idmap gid = 20000-30000
winbind cache time = 1200
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
winbind separator = +
encrypt passwords = yes
template shell = /sbin/nologin

[pub]
create mask = 664
security mask = 664
directory mask = 775
directory security mask = 444
comment = Misc. Files
path = /usr/local/public/pub
guest ok = yes
guest only = no
browseable = yes
writeable = yes
Comment 1 Volker Lendecke 2013-07-20 11:12:10 UTC
This seems to come from an assert deep in the kerberos libraries. Does valgrind run on FreeBSD? If so, can you run winbind under valgrind and see if it throws any errors? Also, debug information from winbind and the kerberos libs might give more hints, such as exact line numbers.
Comment 2 drookie 2013-07-21 10:05:39 UTC
It kinda does, but it may be easily stuck when it encounters some FreeBSD native syscalls, which he doesn't know how to handle. Anyway, I'll try it, thanks.

Also, I forgot to mention that 3.5.x runs just fine in the same environment (including kerberos) and with the same config (actually, I had to downgrade my installation to 3.5.x).
Comment 3 Stanislav 2014-03-04 20:55:18 UTC
Hi
I have have same problem in kerberos. FreeBSD 10.0 samba 3.6.22 and samba4 DC role 2008R2.
>net ads testjoin
net: sha1 checksum failed
Abort (core dumped)

Hack method disable etypes aes128-cts-hmac-sha1-96 and aes256-cts-hmac-sha1-96 in samba.
--
cd /usr/pors/net/samba36
make configure
make extract
make configure
sed -i -e 's/#define HAVE_ENCTYPE_AES128_CTS_HMAC_SHA1_96 1//;s/#define HAVE_ENCTYPE_AES256_CTS_HMAC_SHA1_96 1//' /usr/ports/net/samba36/work/samba-3.6.22/source3/include/config.h
---
> net ads testjoin
Join is OK

Stanislav
Comment 4 Björn Jacke 2020-02-14 19:14:47 UTC
looks like an old kerberos library bug back then.