Bug 5766 - winbind dumps core
winbind dumps core
Status: RESOLVED WORKSFORME
Product: Samba 3.2
Classification: Unclassified
Component: Winbind
3.2.2
x86 Solaris
: P3 normal
: ---
Assigned To: Gerald (Jerry) Carter
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2008-09-15 14:34 UTC by mchugh19@yahoo.com
Modified: 2008-09-18 07:31 UTC (History)
0 users

See Also:


Attachments
smb.conf used (913 bytes, application/octet-stream)
2008-09-15 14:35 UTC, mchugh19@yahoo.com
no flags Details
log file (120.61 KB, application/x-gzip)
2008-09-15 14:37 UTC, mchugh19@yahoo.com
no flags Details
Don't dereference NULL ADS pointers (3.51 KB, patch)
2008-09-16 12:15 UTC, Gerald (Jerry) Carter
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description mchugh19@yahoo.com 2008-09-15 14:34:28 UTC
Just compiled samba 3.2.3 on solaris 10. Attempting to lookup a user with wbinfo -i causes winbind to die and dump core.
Comment 1 mchugh19@yahoo.com 2008-09-15 14:35:27 UTC
Created attachment 3581 [details]
smb.conf used
Comment 2 mchugh19@yahoo.com 2008-09-15 14:37:02 UTC
Created attachment 3582 [details]
log file

Log ends with 

[2008/09/16 02:31:22,  5] libads/ldap_utils.c:ads_do_search_retry_internal(64)
  Search for (|(attributeId=1.3.6.1.1.1.1.0)(attributeId=1.3.6.1.1.1.1.1)(attributeId=1.3.6.1.1.1.1.3)(attributeId=1.3.6.1.1.1.1.4)(attributeId=1.3.6.1.1.1.1.2)) in <CN=Schema,CN=Configuration,DC=froot,DC=nau,DC=edu> gave 5 replies
        OID 1.3.6.1.1.1.1.2 has name: gecos
        OID 1.3.6.1.1.1.1.4 has name: loginShell
        OID 1.3.6.1.1.1.1.3 has name: unixHomeDirectory
        OID 1.3.6.1.1.1.1.1 has name: gidNumber
        OID 1.3.6.1.1.1.1.0 has name: uidNumber
[2008/09/16 02:31:22,  0] lib/fault.c:fault_report(40)
  ===============================================================
[2008/09/16 02:31:22,  0] lib/fault.c:fault_report(41)
  INTERNAL ERROR: Signal 11 in pid 717 (3.2.3)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2008/09/16 02:31:22,  0] lib/fault.c:fault_report(43)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2008/09/16 02:31:22,  0] lib/fault.c:fault_report(44)
  ===============================================================
[2008/09/16 02:31:22,  0] lib/util.c:smb_panic(1663)
  PANIC (pid 717): internal error
[2008/09/16 02:31:22,  0] lib/util.c:log_stack_trace(1817)
  unable to produce a stack trace on this platform
[2008/09/16 02:31:22,  0] lib/fault.c:dump_core(201)
  dumping core in /usr/local/samba/var/cores/winbindd
Comment 3 Gerald (Jerry) Carter 2008-09-15 16:11:36 UTC
I think I just finished a fix for this.  I'll post the patch I'm pushing upstream.
Comment 4 Gerald (Jerry) Carter 2008-09-16 12:15:18 UTC
Created attachment 3591 [details]
Don't dereference NULL ADS pointers

Can you try this patch?
Comment 5 mchugh19@yahoo.com 2008-09-16 18:29:18 UTC
Neat. So far no crashes, but it looks like it might interfere with the patch from bug 3661. 
Comment 6 mchugh19@yahoo.com 2008-09-16 18:34:01 UTC
Ok got another crash after a few minutes and trying to lookup another user.


[2008/09/17 06:32:37,  3] libads/sasl.c:ads_sasl_spnego_bind(789)
  ads_sasl_spnego_bind: got server principal name = not_defined_in_RFC4178@please_ignore
[2008/09/17 06:32:37,  3] libsmb/clikrb5.c:ads_krb5_mk_req(671)
  ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)
[2008/09/17 06:32:37, 10] libads/sasl.c:ads_sasl_spnego_bind(810)
  ads_sasl_spnego_krb5_bind failed with: No credentials cache found, calling kinit
[2008/09/17 06:32:37, 10] libads/kerberos.c:kerberos_kinit_password_ext(217)
  kerberos_kinit_password: as EGR214-01$@STUDENTS.FROOT.NAU.EDU using [MEMORY:winbind_ccache] as ccache and config [(NULL)]
[2008/09/17 06:32:37,  3] libsmb/clikrb5.c:ads_cleanup_expired_creds(604)
  ads_cleanup_expired_creds: Ticket in ccache[MEMORY:winbind_ccache] expiration Wed, 17 Sep 2008 16:32:35 GMT-7
[2008/09/17 06:32:37, 10] libsmb/clikrb5.c:ads_krb5_mk_req(702)
  ads_krb5_mk_req: Ticket (ldap/ash.nau.froot.nau.edu@NAU.FROOT.NAU.EDU) in ccache (MEMORY:winbind_ccache) is valid until: (Wed, 17 Sep 2008 16:32:35 GMT-7 - 1221643955)
[2008/09/17 06:32:37,  3] libsmb/clikrb5.c:ads_krb5_mk_req(713)
  ads_krb5_mk_req: server marked as OK to delegate to, building forwardable TGT
[2008/09/17 06:32:37, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(868)
  Got KRB5 session key of length 16
[2008/09/17 06:32:37,  0] lib/fault.c:fault_report(40)
  ===============================================================
[2008/09/17 06:32:37,  0] lib/fault.c:fault_report(41)
  INTERNAL ERROR: Signal 11 in pid 4121 (3.2.3)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2008/09/17 06:32:37,  0] lib/fault.c:fault_report(43)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2008/09/17 06:32:37,  0] lib/fault.c:fault_report(44)
  ===============================================================
[2008/09/17 06:32:37,  0] lib/util.c:smb_panic(1663)
  PANIC (pid 4121): internal error
[2008/09/17 06:32:37,  0] lib/util.c:log_stack_trace(1817)
  unable to produce a stack trace on this platform
[2008/09/17 06:32:37,  0] lib/fault.c:dump_core(201)
  dumping core in /usr/local/samba/var/cores/winbindd
Comment 7 Gerald (Jerry) Carter 2008-09-17 09:45:10 UTC
I'll be rewriting the patch in BUG 3661.  Can you test without that patch?
Otherwise, it is too difficult to know if the crash is from that patch or the
pristine code.
Comment 8 mchugh19@yahoo.com 2008-09-17 12:56:55 UTC
So far I've been unable to make winbind crash with samba source and just this patch. Excellent. 
Comment 9 mchugh19@yahoo.com 2008-09-17 13:48:09 UTC
Managed to make it crash again. I attempted to lookup a user on another domain. 
getent passwd 'NAU\jsb53'

Somehow it did it successfully, but got this crash report in the logs.


[2008/09/18 01:45:46, 10] winbindd/idmap_cache.c:idmap_cache_map_sid(369)
  Returning valid cache entry: key = IDMAP/SID/S-1-5-21-20713206-1263413069-421607344-22841, value = IDMAP/UID/100700, timeout = Thu Sep 18 01:51:54 2008
[2008/09/18 01:45:46, 10] winbindd/winbindd_cache.c:cache_store_response(2402)
  Storing response for pid 1918, len 3496
[2008/09/18 01:45:46, 10] lib/events.c:get_timed_events_timeout(318)
  timed_events_timeout: 269/592192
[2008/09/18 01:45:46,  4] winbindd/winbindd_dual.c:fork_domain_child(1207)
  child daemon request 49
[2008/09/18 01:45:46, 10] winbindd/winbindd_dual.c:child_process_request(433)
  child_process_request: request fn DUAL_SID2GID
[2008/09/18 01:45:46,  3] winbindd/winbindd_idmap.c:winbindd_dual_sid2gid(376)
  [ 1916]: sid to gid S-1-5-21-20713206-1263413069-421607344-513
[2008/09/18 01:45:46, 10] winbindd/idmap_util.c:idmap_sid_to_gid(144)
  idmap_sid_to_gid: sid = [S-1-5-21-20713206-1263413069-421607344-513]
[2008/09/18 01:45:46, 10] winbindd/idmap.c:idmap_backends_sids_to_unixids(1199)
  Query backends to map sids->ids
[2008/09/18 01:45:46, 10] winbindd/idmap.c:idmap_backends_sids_to_unixids(1224)
  SID S-1-5-21-20713206-1263413069-421607344-513 is being handled by NAU-STUDENTS
[2008/09/18 01:45:46, 10] winbindd/idmap.c:idmap_backends_sids_to_unixids(1245)
  Query ids from domain NAU-STUDENTS
[2008/09/18 01:45:46,  1] winbindd/idmap_ad.c:ad_idmap_cached_connection(248)
  Tried to find connection to unknown domain [S-1-5-21-20713206-1263413069-421607344-513]
[2008/09/18 01:45:46, 10] winbindd/idmap_ad.c:idmap_ad_sids_to_unixids(664)
  Filter: [(&(|(sAMAccountType=805306368)(sAMAccountType=805306369)(sAMAccountType=805306370)(sAMAccountType=268435456)(sAMAccountType=536870912))(|(objectSid=\01\05\00\00\00\00\00\05\15\00\00\00\F6\0E\3C\01\4D\27\4E\4B\B0\37\21\19\01\02\00\00)))]
[2008/09/18 01:45:46,  0] lib/fault.c:fault_report(40)
  ===============================================================
[2008/09/18 01:45:46,  0] lib/fault.c:fault_report(41)
  INTERNAL ERROR: Signal 11 in pid 1918 (3.2.3)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2008/09/18 01:45:46,  0] lib/fault.c:fault_report(43)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2008/09/18 01:45:46,  0] lib/fault.c:fault_report(44)
  ===============================================================
[2008/09/18 01:45:46,  0] lib/util.c:smb_panic(1663)
  PANIC (pid 1918): internal error
[2008/09/18 01:45:46,  0] lib/util.c:log_stack_trace(1817)
  unable to produce a stack trace on this platform
[2008/09/18 01:45:46,  0] lib/fault.c:dump_core(201)
  dumping core in /usr/local/samba/var/cores/winbindd
Comment 10 mchugh19@yahoo.com 2008-09-17 14:52:20 UTC
Sorry for all the noise. Looks like I had some old files or something cached before. I deleted out all the old builds, and since then have been unable to crash winbind. I'd feel comfortable calling this closed.
Comment 11 Gerald (Jerry) Carter 2008-09-18 07:31:55 UTC
ok.  Thanks for the update.