Bug 6732 - OpenBSD 4.6-current nmbd panic INTERNAL ERROR: Signal 6
OpenBSD 4.6-current nmbd panic INTERNAL ERROR: Signal 6
Product: Samba 3.4
Classification: Unclassified
Component: Nmbd
Other OpenBSD
: P3 normal
: ---
Assigned To: Jeremy Allison
Samba QA Contact
Depends on:
  Show dependency treegraph
Reported: 2009-09-15 21:47 UTC by Ian McWilliam
Modified: 2009-09-24 08:24 UTC (History)
0 users

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Ian McWilliam 2009-09-15 21:47:25 UTC
While attempting to port Samba 3.4 series to OpenBSD to replace the old 3.0 series samba's nmbd panics.

Sep 16 12:19:16 kallasjarvi nmbd[17569]: [2009/09/16 12:19:16,  0] /usr/ports/obj/samba-3.4.1/samba-3.4.1/source3/lib/fault.c:41(fault_report) 
Sep 16 12:19:16 kallasjarvi nmbd[17569]:   =============================================================== 
Sep 16 12:19:16 kallasjarvi nmbd[17569]: [2009/09/16 12:19:16,  0] /usr/ports/obj/samba-3.4.1/samba-3.4.1/source3/lib/fault.c:42(fault_report) 
Sep 16 12:19:16 kallasjarvi nmbd[17569]:   INTERNAL ERROR: Signal 6 in pid 17569 (3.4.1) 
Sep 16 12:19:16 kallasjarvi nmbd[17569]:   Please read the Trouble-Shooting section of the Samba3-HOWTO 
Sep 16 12:19:16 kallasjarvi nmbd[17569]: [2009/09/16 12:19:16,  0] /usr/ports/obj/samba-3.4.1/samba-3.4.1/source3/lib/fault.c:44(fault_report) 
Sep 16 12:19:16 kallasjarvi nmbd[17569]:    
Sep 16 12:19:16 kallasjarvi nmbd[17569]:   From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf 
Sep 16 12:19:16 kallasjarvi nmbd[17569]: [2009/09/16 12:19:16,  0] /usr/ports/obj/samba-3.4.1/samba-3.4.1/source3/lib/fault.c:45(fault_report) 
Sep 16 12:19:16 kallasjarvi nmbd[17569]:   =============================================================== 
Sep 16 12:19:16 kallasjarvi nmbd[17569]: [2009/09/16 12:19:16,  0] /usr/ports/obj/samba-3.4.1/samba-3.4.1/source3/lib/util.c:1480(smb_panic) 
Sep 16 12:19:16 kallasjarvi nmbd[17569]:   PANIC (pid 17569): internal error

#0  0x0000065f54b15c47 in getframeaddr ()
   from /usr/local/lib/libexecinfo.so.0.0
#1  0x0000065f54b0ee20 in backtrace () from /usr/local/lib/libexecinfo.so.0.0
#2  0x0000065d52a614ea in log_stack_trace ()
    at /usr/ports/obj/samba-3.4.1/samba-3.4.1/source3/lib/util.c:1580
#3  0x0000065d52a6138d in smb_panic (why=0x65d52c55ab0 "internal error")
    at /usr/ports/obj/samba-3.4.1/samba-3.4.1/source3/lib/util.c:1481
#4  0x0000065d52a52c0c in fault_report (sig=6)
    at /usr/ports/obj/samba-3.4.1/samba-3.4.1/source3/lib/fault.c:47
#5  <signal handler called>
#6  0x0000065f576f037a in kill () from /usr/lib/libc.so.51.0
#7  0x0000065f5773c765 in abort () at /usr/src/lib/libc/stdlib/abort.c:68
#8  0x0000065f57c043ac in talloc_abort (reason=0x44a1 "")
    at /usr/ports/obj/samba-3.4.1/samba-3.4.1/lib/talloc/talloc.c:151
#9  0x0000065f57c04a6a in _talloc_free (ptr=0x65f5a2ae250)
    at /usr/ports/obj/samba-3.4.1/samba-3.4.1/lib/talloc/talloc.c:176
#10 0x0000065f57c04895 in _talloc_free (ptr=0x65f5aa6a450)
    at /usr/ports/obj/samba-3.4.1/samba-3.4.1/lib/talloc/talloc.c:562
#11 0x0000065d5295105c in main (argc=2, argv=0x7f7ffffdbde0)
    at /usr/ports/obj/samba-3.4.1/samba-3.4.1/source3/nmbd/nmbd.c:993


#======================= Global Settings =====================================
panic action = /bin/sleep 999999

# workgroup = NT-Domain-Name or Workgroup-Name, eg: MIDEARTH
   workgroup = MCW

# server string is the equivalent of the NT Description field
   server string = Kalasjarvi Samba Server

# Security mode. Defines in which mode Samba will operate. Possible 
# values are share, user, server, domain and ads. Most people will want 
# user level security. See the Samba-HOWTO-Collection for details.
   security = user

# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the "loopback" interface. For more examples of the syntax see
# the smb.conf man page
hosts allow = 192.168.1.

# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
   load printers = yes

# you may wish to override the location of the printcap file
;   printcap name = /etc/printcap

# on SystemV system setting printcap name to lpstat should allow
# you to automatically obtain a printer list from the SystemV spool
# system
;   printcap name = lpstat

# It should not be necessary to specify the print system type unless
# it is non-standard. Currently supported print systems include:
# bsd, cups, sysv, plp, lprng, aix, hpux, qnx
;   printing = cups

# Uncomment this if you want a guest account, you must add this to /etc/passwd
# otherwise the user "nobody" is used
;  guest account = pcguest

# this tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/smbd.%m

# Put a capping on the size of the log files (in Kb).
   max log size = 50

# Use password server option only with security = server
# The argument list may include:
#   password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
# or to auto-locate the domain controller/s
#   password server = *
;   password server = <NT-Server-Name>

# Use the realm option only with security = ads
# Specifies the Active Directory realm the host is part of
;   realm = MY_REALM

# Backend to store user information in. New installations should 
# use either tdbsam or ldapsam. smbpasswd is available for backwards 
# compatibility. tdbsam requires no further configuration.
;   passdb backend = tdbsam

# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting.
# Note: Consider carefully the location in the configuration file of
#       this line.  The included file is read at that point.
;   include = /usr/local/samba/lib/smb.conf.%m

# Configure Samba to use multiple interfaces
# If you have multiple network interfaces then you must list them
# here. See the man page for details.
;   interfaces = 
;interfaces = nfe0

# Browser Control Options:
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
   local master = no

# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
;   os level = 33

# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
   domain master = no

# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
   preferred master = no

# Enable this if you want Samba to be a domain logon server for 
# Windows95 workstations. 
;   domain logons = yes

# if you enable domain logons then you may want a per-machine or
# per user logon script
# run a specific logon batch file per workstation (machine)
;   logon script = %m.bat
# run a specific logon batch file per username
;   logon script = %U.bat

# Where to store roving profiles (only for Win95 and WinNT)
#        %L substitutes for this servers netbios name, %U is username
#        You must uncomment the [Profiles] share below
;   logon path = \\%L\Profiles\%U

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
   wins support = yes

# WINS Server - Tells the NMBD components of Samba to be a WINS Client
#       Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
;   wins server = w.x.y.z

# WINS Proxy - Tells Samba to answer name resolution queries on
# behalf of a non WINS capable client, for this to work there must be
# at least one  WINS Server on the network. The default is NO.
;   wins proxy = yes

# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
# via DNS nslookups. The default is NO.
   dns proxy = no 

# These scripts are used on a domain controller or stand-alone 
# machine to add or delete corresponding unix accounts
;  add user script = /usr/sbin/useradd %u
;  add group script = /usr/sbin/groupadd %g
;  add machine script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %u
;  delete user script = /usr/sbin/userdel %u
;  delete user from group script = /usr/sbin/deluser %u %g
;  delete group script = /usr/sbin/groupdel %g

#============================ Share Definitions ==============================
   comment = Home Directories
   browseable = no
   writable = yes
   veto files = /:2eFBCLockFolder/.FBCLockFolder/:2eFBCIndex/.FBCIndex/:2eDS_Store/.DS_Store/TheVolumeSettingsFolder?/TheFindByContentFolder?/Temporary Items/Network Trash Folder/.AppleDB/:2eVolumeIcon.icns/.VolumeIcon?.icns/Icon?/.AppleDouble?/.AppleDesktop?/desktop.ini/RECYCLER/
   delete veto files = Yes


Commenting out the following TALLOC stuff stops the panic but produces the following error.

no talloc stackframe around, leaking memory

--- nmbd/nmbd.c.orig    Mon Aug 10 20:28:21 2009
+++ nmbd/nmbd.c Mon Aug 10 20:29:52 2009
@@ -770,7 +770,7 @@ static bool open_sockets(bool isdaemon, int port)
        { NULL }
-       TALLOC_CTX *frame = talloc_stackframe(); /* Setup tos. */
+/*     TALLOC_CTX *frame = talloc_stackframe(); /* Setup tos. */
@@ -990,7 +990,7 @@ static bool open_sockets(bool isdaemon, int port)
-       TALLOC_FREE(frame);
+/*     TALLOC_FREE(frame); */
        if (dbf)
Comment 1 Jeremy Allison 2009-09-16 12:06:02 UTC
Can you get us a good stack backtrace (with symbols) please.
Add the line:

panic action = /bin/sleep 9999999

to the [global] section of your smb.conf, build nmbd with symbols and crash it, then attach to the parent of the sleep process with gdb and get a "bt".


Comment 2 Ian McWilliam 2009-09-23 21:22:10 UTC
I have been trying for days to reproduce this crash, which happened quite a lot. Since reporting the bug, I have built a new kernel + userland for OpenBSD 4.6-current which may have resolved whatever the issue was. For now we should close this bug off.
Comment 3 Karolin Seeger 2009-09-24 08:24:07 UTC
Closing out bug report as requested by the reporter.
Please reopen if it's still an issue.