Just compiled samba 3.2.3 on solaris 10. Attempting to lookup a user with wbinfo -i causes winbind to die and dump core.
Created attachment 3581 [details] smb.conf used
Created attachment 3582 [details] log file Log ends with [2008/09/16 02:31:22, 5] libads/ldap_utils.c:ads_do_search_retry_internal(64) Search for (|(attributeId=1.3.6.1.1.1.1.0)(attributeId=1.3.6.1.1.1.1.1)(attributeId=1.3.6.1.1.1.1.3)(attributeId=1.3.6.1.1.1.1.4)(attributeId=1.3.6.1.1.1.1.2)) in <CN=Schema,CN=Configuration,DC=froot,DC=nau,DC=edu> gave 5 replies OID 1.3.6.1.1.1.1.2 has name: gecos OID 1.3.6.1.1.1.1.4 has name: loginShell OID 1.3.6.1.1.1.1.3 has name: unixHomeDirectory OID 1.3.6.1.1.1.1.1 has name: gidNumber OID 1.3.6.1.1.1.1.0 has name: uidNumber [2008/09/16 02:31:22, 0] lib/fault.c:fault_report(40) =============================================================== [2008/09/16 02:31:22, 0] lib/fault.c:fault_report(41) INTERNAL ERROR: Signal 11 in pid 717 (3.2.3) Please read the Trouble-Shooting section of the Samba3-HOWTO [2008/09/16 02:31:22, 0] lib/fault.c:fault_report(43) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2008/09/16 02:31:22, 0] lib/fault.c:fault_report(44) =============================================================== [2008/09/16 02:31:22, 0] lib/util.c:smb_panic(1663) PANIC (pid 717): internal error [2008/09/16 02:31:22, 0] lib/util.c:log_stack_trace(1817) unable to produce a stack trace on this platform [2008/09/16 02:31:22, 0] lib/fault.c:dump_core(201) dumping core in /usr/local/samba/var/cores/winbindd
I think I just finished a fix for this. I'll post the patch I'm pushing upstream.
Created attachment 3591 [details] Don't dereference NULL ADS pointers Can you try this patch?
Neat. So far no crashes, but it looks like it might interfere with the patch from bug 3661.
Ok got another crash after a few minutes and trying to lookup another user. [2008/09/17 06:32:37, 3] libads/sasl.c:ads_sasl_spnego_bind(789) ads_sasl_spnego_bind: got server principal name = not_defined_in_RFC4178@please_ignore [2008/09/17 06:32:37, 3] libsmb/clikrb5.c:ads_krb5_mk_req(671) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found) [2008/09/17 06:32:37, 10] libads/sasl.c:ads_sasl_spnego_bind(810) ads_sasl_spnego_krb5_bind failed with: No credentials cache found, calling kinit [2008/09/17 06:32:37, 10] libads/kerberos.c:kerberos_kinit_password_ext(217) kerberos_kinit_password: as EGR214-01$@STUDENTS.FROOT.NAU.EDU using [MEMORY:winbind_ccache] as ccache and config [(NULL)] [2008/09/17 06:32:37, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(604) ads_cleanup_expired_creds: Ticket in ccache[MEMORY:winbind_ccache] expiration Wed, 17 Sep 2008 16:32:35 GMT-7 [2008/09/17 06:32:37, 10] libsmb/clikrb5.c:ads_krb5_mk_req(702) ads_krb5_mk_req: Ticket (ldap/ash.nau.froot.nau.edu@NAU.FROOT.NAU.EDU) in ccache (MEMORY:winbind_ccache) is valid until: (Wed, 17 Sep 2008 16:32:35 GMT-7 - 1221643955) [2008/09/17 06:32:37, 3] libsmb/clikrb5.c:ads_krb5_mk_req(713) ads_krb5_mk_req: server marked as OK to delegate to, building forwardable TGT [2008/09/17 06:32:37, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(868) Got KRB5 session key of length 16 [2008/09/17 06:32:37, 0] lib/fault.c:fault_report(40) =============================================================== [2008/09/17 06:32:37, 0] lib/fault.c:fault_report(41) INTERNAL ERROR: Signal 11 in pid 4121 (3.2.3) Please read the Trouble-Shooting section of the Samba3-HOWTO [2008/09/17 06:32:37, 0] lib/fault.c:fault_report(43) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2008/09/17 06:32:37, 0] lib/fault.c:fault_report(44) =============================================================== [2008/09/17 06:32:37, 0] lib/util.c:smb_panic(1663) PANIC (pid 4121): internal error [2008/09/17 06:32:37, 0] lib/util.c:log_stack_trace(1817) unable to produce a stack trace on this platform [2008/09/17 06:32:37, 0] lib/fault.c:dump_core(201) dumping core in /usr/local/samba/var/cores/winbindd
I'll be rewriting the patch in BUG 3661. Can you test without that patch? Otherwise, it is too difficult to know if the crash is from that patch or the pristine code.
So far I've been unable to make winbind crash with samba source and just this patch. Excellent.
Managed to make it crash again. I attempted to lookup a user on another domain. getent passwd 'NAU\jsb53' Somehow it did it successfully, but got this crash report in the logs. [2008/09/18 01:45:46, 10] winbindd/idmap_cache.c:idmap_cache_map_sid(369) Returning valid cache entry: key = IDMAP/SID/S-1-5-21-20713206-1263413069-421607344-22841, value = IDMAP/UID/100700, timeout = Thu Sep 18 01:51:54 2008 [2008/09/18 01:45:46, 10] winbindd/winbindd_cache.c:cache_store_response(2402) Storing response for pid 1918, len 3496 [2008/09/18 01:45:46, 10] lib/events.c:get_timed_events_timeout(318) timed_events_timeout: 269/592192 [2008/09/18 01:45:46, 4] winbindd/winbindd_dual.c:fork_domain_child(1207) child daemon request 49 [2008/09/18 01:45:46, 10] winbindd/winbindd_dual.c:child_process_request(433) child_process_request: request fn DUAL_SID2GID [2008/09/18 01:45:46, 3] winbindd/winbindd_idmap.c:winbindd_dual_sid2gid(376) [ 1916]: sid to gid S-1-5-21-20713206-1263413069-421607344-513 [2008/09/18 01:45:46, 10] winbindd/idmap_util.c:idmap_sid_to_gid(144) idmap_sid_to_gid: sid = [S-1-5-21-20713206-1263413069-421607344-513] [2008/09/18 01:45:46, 10] winbindd/idmap.c:idmap_backends_sids_to_unixids(1199) Query backends to map sids->ids [2008/09/18 01:45:46, 10] winbindd/idmap.c:idmap_backends_sids_to_unixids(1224) SID S-1-5-21-20713206-1263413069-421607344-513 is being handled by NAU-STUDENTS [2008/09/18 01:45:46, 10] winbindd/idmap.c:idmap_backends_sids_to_unixids(1245) Query ids from domain NAU-STUDENTS [2008/09/18 01:45:46, 1] winbindd/idmap_ad.c:ad_idmap_cached_connection(248) Tried to find connection to unknown domain [S-1-5-21-20713206-1263413069-421607344-513] [2008/09/18 01:45:46, 10] winbindd/idmap_ad.c:idmap_ad_sids_to_unixids(664) Filter: [(&(|(sAMAccountType=805306368)(sAMAccountType=805306369)(sAMAccountType=805306370)(sAMAccountType=268435456)(sAMAccountType=536870912))(|(objectSid=\01\05\00\00\00\00\00\05\15\00\00\00\F6\0E\3C\01\4D\27\4E\4B\B0\37\21\19\01\02\00\00)))] [2008/09/18 01:45:46, 0] lib/fault.c:fault_report(40) =============================================================== [2008/09/18 01:45:46, 0] lib/fault.c:fault_report(41) INTERNAL ERROR: Signal 11 in pid 1918 (3.2.3) Please read the Trouble-Shooting section of the Samba3-HOWTO [2008/09/18 01:45:46, 0] lib/fault.c:fault_report(43) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2008/09/18 01:45:46, 0] lib/fault.c:fault_report(44) =============================================================== [2008/09/18 01:45:46, 0] lib/util.c:smb_panic(1663) PANIC (pid 1918): internal error [2008/09/18 01:45:46, 0] lib/util.c:log_stack_trace(1817) unable to produce a stack trace on this platform [2008/09/18 01:45:46, 0] lib/fault.c:dump_core(201) dumping core in /usr/local/samba/var/cores/winbindd
Sorry for all the noise. Looks like I had some old files or something cached before. I deleted out all the old builds, and since then have been unable to crash winbind. I'd feel comfortable calling this closed.
ok. Thanks for the update.