Bug 8830 - SIGSEGV when password expire warning (Jenkins/libpam4j)
Summary: SIGSEGV when password expire warning (Jenkins/libpam4j)
Status: VERIFIED WORKSFORME
Alias: None
Product: Samba 3.4
Classification: Unclassified
Component: Winbind (show other bugs)
Version: 3.4.3
Hardware: All Linux
: P5 normal
Target Milestone: ---
Assignee: Michael Adam
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-03-28 11:47 UTC by Thomas K (dead mail address)
Modified: 2020-12-22 02:20 UTC (History)
0 users

See Also:


Attachments
Java dump file (106.08 KB, application/octet-stream)
2012-03-28 11:47 UTC, Thomas K (dead mail address)
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Thomas K (dead mail address) 2012-03-28 11:47:12 UTC
Created attachment 7409 [details]
Java dump file

We are facing SIGSEGV in Jenkins when authentication users via pam_winbind and one user is getting close to pwd expiration time (12 days in this case). No problem with other users. We changed warn_password_expire to 1 pam_winbind.conf and well, now this user (now 11 days to expire) works fine. So it seems to be related to pwd expiration.

I will add Java dump file including stack information.

System info:
OS:SUSE Linux Enterprise Server 10 (x86_64)
VERSION = 10
PATCHLEVEL = 4

uname:Linux 2.6.16.60-0.85.1-smp #1 SMP Thu Mar 17 11:45:06 UTC 2011 x86_64
libc:glibc 2.4 NPTL 2.4 

rpm -qa | grep samba
samba-winbind-3.4.3-1.17.2
yast2-samba-server-2.17.11-0.2.72
samba-client-32bit-3.4.3-1.17.2
samba-client-3.4.3-1.17.2
samba-winbind-32bit-3.4.3-1.17.2
yast2-samba-client-2.17.17-0.2.23
Comment 1 Volker Lendecke 2012-03-30 08:25:28 UTC
That java dump file is not really very useful. It does not show where in pam_winbind the crash happens. Is it possible to reproduce that issue without java around and with debug symbols enabled?
Comment 2 Thomas K (dead mail address) 2012-03-30 09:09:40 UTC
Dear Volker,

thx for your comment. I don't have symbols here for pam_winbind.so. Building version samba-winbind-3.4.3-1.17.2 from repository is not possible (controlled environment, huge German government organization).I could image to build a Java repro based on libpam4j (by look-aside in jenkins source code) and deliver this repro, but testing agains AD is pretty difficult here in this environment.

I can understand if this is too much work at your side.

Best,

Thomas
Comment 3 Thomas Hood 2012-06-26 19:22:52 UTC
Running samba4 4.0.0~alpha18.dfsg1-4ubuntu2 as domain controller under Ubuntu 12.04, every time a user tries to log in when her password has expired a segfault occurs.  Here's a backtrace.  Please let me know if this has been fixed in later releases --- I didn't see anything relevant in release notes --- or let me know what additional information you might need to help find the bug.


  sam_account_ok: Account for user 'foo@BAR' password must change!.
*** glibc detected *** samba: free(): invalid pointer: 0x00000000011432d0 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x7e626)[0x7fe3f0a24626]
/usr/lib/x86_64-linux-gnu/libasn1.so.8(der_free_octet_string+0xd)[0x7fe3eb621e7d]
/usr/lib/x86_64-linux-gnu/libasn1.so.8(free_METHOD_DATA+0x24)[0x7fe3eb5e6d04]
/usr/lib/x86_64-linux-gnu/libkdc.so.2(+0x10e3d)[0x7fe3e6ea5e3d]
/usr/lib/x86_64-linux-gnu/libkdc.so.2(+0x1c233)[0x7fe3e6eb1233]
/usr/lib/x86_64-linux-gnu/libkdc.so.2(krb5_kdc_process_krb5_request+0x88)[0x7fe3e6eb1428]
/usr/lib/x86_64-linux-gnu/samba//service/kdc.so(+0x4c5e)[0x7fe3e76e7c5e]
/usr/lib/x86_64-linux-gnu/samba//service/kdc.so(+0x5aa8)[0x7fe3e76e8aa8]
/usr/lib/x86_64-linux-gnu/samba/libsamba-sockets.so(+0xa982)[0x7fe3ee516982]
/usr/lib/x86_64-linux-gnu/samba/libsamba-sockets.so(+0xde60)[0x7fe3ee519e60]
/usr/lib/x86_64-linux-gnu/samba/libsamba-sockets.so(+0xd567)[0x7fe3ee519567]
/usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x64d8)[0x7fe3f0d694d8]
/usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x90)[0x7fe3f0d66620]
/usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_wait+0x1b)[0x7fe3f0d667ab]
/usr/lib/x86_64-linux-gnu/samba//process_model/standard.so(+0x14f4)[0x7fe3e8eae4f4]
/usr/lib/x86_64-linux-gnu/samba/libservice.so(task_server_startup+0x8e)[0x7fe3f3bdf72b]
/usr/lib/x86_64-linux-gnu/samba/libservice.so(+0x2c2a)[0x7fe3f3bddc2a]
/usr/lib/x86_64-linux-gnu/samba/libservice.so(server_service_startup+0x11f)[0x7fe3f3bddd64]
samba[0x40b436]
samba(main+0x24)[0x40b505]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed)[0x7fe3f09c776d]
samba[0x405689]
Comment 4 Björn Jacke 2020-12-22 02:20:55 UTC
pam_winbind is known to work in recent verions