Bug 357 - Connecting as a certain user through NT style auth causes smb_panic
Summary: Connecting as a certain user through NT style auth causes smb_panic
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: User/Group Accounts (show other bugs)
Version: 3.0.0preX
Hardware: All Linux
: P3 critical
Target Milestone: 3.0.0rc3
Assignee: Gerald (Jerry) Carter (dead mail address)
QA Contact:
Depends on:
Reported: 2003-08-27 10:54 UTC by Tom Dickson
Modified: 2005-11-14 09:27 UTC (History)
0 users

See Also:

Level 10 log showing panic (34.31 KB, text/plain)
2003-08-27 10:55 UTC, Tom Dickson
no flags Details
smb.conf (3.23 KB, text/plain)
2003-08-27 10:56 UTC, Tom Dickson
no flags Details
Full logs for all connections made (23.56 KB, application/octet-stream)
2003-08-27 10:58 UTC, Tom Dickson
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Tom Dickson 2003-08-27 10:54:21 UTC
When attempting to connect to a share as the user "HAENGINEERING+kmr", smbd
panics. Below is the last command before the panic:

I'll attach the full logs and the smb.conf soon.

[2003/08/27 13:27:22, 10] lib/system_smbd.c:sys_getgrouplist(113)
  sys_getgrouplist: user [HAENGINEERS+kmr]
[2003/08/27 13:27:22, 0] lib/fault.c:fault_report(36)
[2003/08/27 13:27:22, 0] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 2901 (3.0.0beta3)
  Please read the appendix Bugs of the Samba HOWTO collection
[2003/08/27 13:27:22, 0] lib/fault.c:fault_report(39)
[2003/08/27 13:27:22, 0] lib/util.c:smb_panic(1462)
  PANIC: internal error
[2003/08/27 13:27:22, 0] lib/util.c:smb_panic(1469)
  BACKTRACE: 23 stack frames:
   #0 smbd(smb_panic+0x14e) [0x81813be]
Comment 1 Tom Dickson 2003-08-27 10:55:35 UTC
Created attachment 107 [details]
Level 10 log showing panic

This is the level 10 log showing the panic occuring.
Comment 2 Tom Dickson 2003-08-27 10:56:49 UTC
Created attachment 108 [details]
Comment 3 Tom Dickson 2003-08-27 10:58:29 UTC
Created attachment 109 [details]
Full logs for all connections made

This is a tgz containing all of the log files. log.ws161 shows a connection
working for user "HAENGINEERS+_testme", log.ws162 shows a similar connection
for "HAENGINEERS+kmr" causing smb_panic.
Comment 4 Tom Dickson 2003-08-27 11:00:54 UTC
The last thing before the panic is sys_getgrouplist, so I tried a wbinfo -r
HAENGINEERS+kmr, and that seemed to work correctly. getent group/passwd also works.

Is it possible that one of the groups has too many members? If more information
is needed, I can add it.

Note: my email account is being slow, so I may not be able to respond quickly.
Comment 5 Tom Dickson 2003-08-28 16:09:38 UTC
The user HAENGINEERS+KMR is a member of 42 groups, as reported by:

wbinfo -r HAENGINEERS+kmr | wc -l

I'm trying to reproduce this on another system (and then I'll try rc1/2).
Comment 6 Tom Dickson 2003-08-28 17:12:53 UTC
I've verified that on my local network, with membership in 34 groups, smbd panics.

When I'm only a member of 33 groups, it works correctly.

I have 300k of level 100 logs, if you're really interested in them. 

Also: The user HAENGINEERS+KMR was able to prevent this by removing a single
group: "Information Technology".

Adding this group to a user would make that user cause a panic.
Comment 7 Tom Dickson 2003-09-02 12:48:47 UTC
This seems to work correctly in Samba-3.0.0rc2. Tested up to 42 groups.
Comment 8 Gerald (Jerry) Carter (dead mail address) 2003-09-02 14:01:09 UTC
Thanks fort the feedback (and for letting us know 
it has been fixed).
Comment 9 Gerald (Jerry) Carter (dead mail address) 2005-02-07 08:41:26 UTC
originally reported against 3.0.0beta3.  CLeaning out 
non-production release versions.
Comment 10 Gerald (Jerry) Carter (dead mail address) 2005-08-24 10:17:27 UTC
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.
Comment 11 Gerald (Jerry) Carter (dead mail address) 2005-11-14 09:27:35 UTC
database cleanup