Created attachment 8162 [details] lspci output (This bug report is a result from this Ubuntu bug report: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1064489) Using a Ubuntu 12.04.1 LTS client, joined to a windows domain using winbind/idmap_AD (see config below) we do a multiuser mount of the DFS root share. The root share is mounted successfully. When I authenticate with a domain user account and walk down the mounted path into the DFS referral, - an ls results in an "Object is remote" - a cd to a folder known to exist on the target share succeeds; but - if I cd in a non-existent folder instead, I get a kernel oops I am using: $ cat /proc/version Linux version 3.7.0-030700rc4-generic (apw@gomeisa) (gcc version 4.6.3 (Ubuntu/Linaro 4.6.3-1ubuntu5) ) #201211041435 SMP Sun Nov 4 19:35:50 UTC 2012 samba 3.6.3-2ubuntu2.3 cifs-utils 5.1-1ubuntu1 kerberos 1.10+dfsg~beta1-2ubuntu0.3 Windows 2008 R2 as DFS root Netapp 8.0.1P4 7-mode CIFS share as DFS target ==== oops === [ 389.038999] BUG: unable to handle kernel NULL pointer dereference at (null) [ 389.039060] IP: [< (null)>] (null) [ 389.039094] PGD 100d1d067 PUD 100d1c067 PMD 0 [ 389.039130] Oops: 0010 [#1] SMP [ 389.039157] Modules linked in: arc4 nls_utf8 cifs nfsv4 autofs4 bnep rfcomm bluetooth rpcsec_gss_krb5 nfsd nfs_acl auth_rpcgss nfs fscache lockd sunrpc snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep hid_generic snd_pcm i915 coretemp snd_seq_midi snd_rawmidi usbhid gpio_ich snd_seq_midi_event snd_seq hid snd_timer snd_seq_device kvm drm_kms_helper drm snd lpc_ich soundcore i2c_algo_bit snd_page_alloc psmouse dell_wmi video sparse_keymap serio_raw mac_hid wmi microcode dcdbas ppdev parport_pc lp parport tg3 [ 389.039561] CPU 0 [ 389.039578] Pid: 2228, comm: bash Not tainted 3.7.0-030700rc4-generic #201211041435 Dell Inc. OptiPlex 380 /01TKCC [ 389.039645] RIP: 0010:[<0000000000000000>] [< (null)>] (null) [ 389.039691] RSP: 0018:ffff880102fcbd00 EFLAGS: 00010246 [ 389.039723] RAX: ffffffffa04cfbc0 RBX: ffff8800372bb480 RCX: 0000000000000000 [ 389.039763] RDX: 0000000000000003 RSI: ffff8800372bb480 RDI: ffff880037051900 [ 389.039803] RBP: ffff880102fcbd28 R08: ffff88012bc17340 R09: ffffc90000002000 [ 389.039843] R10: 0000000000000000 R11: ffff880037051900 R12: ffff880037012600 [ 389.039884] R13: ffff880037012600 R14: ffff880102fcbe98 R15: 0000000000000000 [ 389.039925] FS: 00007ff2367cb700(0000) GS:ffff88012bc00000(0000) knlGS:0000000000000000 [ 389.039971] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.040005] CR2: 0000000000000000 CR3: 0000000100d1a000 CR4: 00000000000407f0 [ 389.040045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 389.040086] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 389.040127] Process bash (pid: 2228, threadinfo ffff880102fca000, task ffff880102e02e00) [ 389.040172] Stack: [ 389.040186] ffffffff8119ce7d ffff880037012600 ffff880037012600 ffff880102fcbe98 [ 389.040239] 0000000000000003 ffff880102fcbd58 ffffffff8119d2e8 ffff880102fcbd58 [ 389.040291] 01ffffff816c809d ffff880102fcbe88 ffff880102fcbdd8 ffff880102fcbd98 [ 389.040343] Call Trace: [ 389.040365] [<ffffffff8119ce7d>] ? lookup_real+0x1d/0x60 [ 389.040399] [<ffffffff8119d2e8>] __lookup_hash+0x38/0x50 [ 389.040434] [<ffffffff816b5a0a>] lookup_slow+0x47/0xab [ 389.040467] [<ffffffff8119fa06>] path_lookupat+0x236/0x7a0 [ 389.040501] [<ffffffff81180681>] ? kmem_cache_alloc+0x31/0x140 [ 389.040538] [<ffffffff8119e6f0>] ? getname_flags.part.23+0x30/0x150 [ 389.040577] [<ffffffff8119ffa4>] filename_lookup+0x34/0xc0 [ 389.040610] [<ffffffff8119e876>] ? getname_flags+0x66/0x80 [ 389.040644] [<ffffffff811a2a69>] user_path_at_empty+0x59/0xa0 [ 389.040681] [<ffffffff8119821b>] ? vfs_stat+0x1b/0x20 [ 389.040712] [<ffffffff8119836a>] ? sys_newstat+0x1a/0x40 [ 389.040746] [<ffffffff811a2ac1>] user_path_at+0x11/0x20 [ 389.040780] [<ffffffff81192213>] sys_chdir+0x23/0x90 [ 389.040812] [<ffffffff816d33dd>] system_call_fastpath+0x1a/0x1f [ 389.040847] Code: Bad RIP value. [ 389.040876] RIP [< (null)>] (null) [ 389.040910] RSP <ffff880102fcbd00> [ 389.040931] CR2: 0000000000000000 [ 389.064823] ---[ end trace 85a7622fcf728fba ]--- ==== ver_linux ==== $ /usr/src/linux-headers-3.7.0-030700rc4/scripts/ver_linux If some fields are empty or look unusual you may have an old version. Compare to the current minimal requirements in Documentation/Changes. Linux U033321 3.7.0-030700rc4-generic #201211041435 SMP Sun Nov 4 19:35:50 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux Gnu C 4.6 Gnu make 3.81 binutils 2.22 util-linux 2.20.1 mount support module-init-tools 3.16 e2fsprogs 1.42 pcmciautils 018 Linux C Library 2.15 Dynamic linker (ldd) 2.15 Procps 3.2.8 Net-tools 1.60 Kbd 1.15.2 Sh-utils 8.13 wireless-tools 30 Modules Loaded arc4 nls_utf8 cifs nfsv4 autofs4 bnep rfcomm bluetooth rpcsec_gss_krb5 nfsd nfs_acl auth_rpcgss nfs fscache lockd sunrpc snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep hid_generic snd_pcm i915 coretemp snd_seq_midi snd_rawmidi usbhid gpio_ich snd_seq_midi_event snd_seq hid snd_timer snd_seq_device kvm drm_kms_helper drm snd lpc_ich soundcore i2c_algo_bit snd_page_alloc psmouse dell_wmi video sparse_keymap serio_raw mac_hid wmi microcode dcdbas ppdev parport_pc lp parport tg3 ==== cpuinfo ==== $ cat /proc/cpuinfo processor : 0 vendor_id : GenuineIntel cpu family : 6 model : 23 model name : Intel(R) Core(TM)2 Duo CPU E7500 @ 2.93GHz stepping : 10 microcode : 0xa0b cpu MHz : 1600.000 cache size : 3072 KB physical id : 0 siblings : 2 core id : 0 cpu cores : 2 apicid : 0 initial apicid : 0 fpu : yes fpu_exception : yes cpuid level : 13 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc arch_perfmon pebs bts rep_good nopl aperfmperf pni dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm sse4_1 xsave lahf_lm dtherm tpr_shadow vnmi flexpriority bogomips : 5852.24 clflush size : 64 cache_alignment : 64 address sizes : 36 bits physical, 48 bits virtual power management: processor : 1 vendor_id : GenuineIntel etc. ==== modules ==== $ cat /proc/modules arc4 12573 12 - Live 0x0000000000000000 nls_utf8 12557 3 - Live 0x0000000000000000 cifs 459627 4 - Live 0x0000000000000000 nfsv4 150145 1 - Live 0x0000000000000000 autofs4 36979 2 - Live 0x0000000000000000 bnep 18399 2 - Live 0x0000000000000000 rfcomm 47922 0 - Live 0x0000000000000000 bluetooth 219344 10 bnep,rfcomm, Live 0x0000000000000000 rpcsec_gss_krb5 31465 8 - Live 0x0000000000000000 nfsd 263389 2 - Live 0x0000000000000000 nfs_acl 12883 1 nfsd, Live 0x0000000000000000 auth_rpcgss 41008 5 nfsv4,rpcsec_gss_krb5,nfsd, Live 0x0000000000000000 nfs 165972 3 nfsv4, Live 0x0000000000000000 fscache 61534 2 cifs,nfs, Live 0x0000000000000000 lockd 77514 2 nfsd,nfs, Live 0x0000000000000000 sunrpc 236558 19 nfsv4,rpcsec_gss_krb5,nfsd,nfs_acl,auth_rpcgss,nfs,lockd, Live 0x0000000000000000 snd_hda_codec_realtek 79805 1 - Live 0x0000000000000000 snd_hda_intel 38521 0 - Live 0x0000000000000000 snd_hda_codec 140412 2 snd_hda_codec_realtek,snd_hda_intel, Live 0x0000000000000000 snd_hwdep 17764 1 snd_hda_codec, Live 0x0000000000000000 hid_generic 12493 0 - Live 0x0000000000000000 snd_pcm 102432 2 snd_hda_intel,snd_hda_codec, Live 0x0000000000000000 i915 588249 3 - Live 0x0000000000000000 coretemp 13554 0 - Live 0x0000000000000000 snd_seq_midi 13324 0 - Live 0x0000000000000000 snd_rawmidi 30749 1 snd_seq_midi, Live 0x0000000000000000 usbhid 47307 0 - Live 0x0000000000000000 gpio_ich 13526 0 - Live 0x0000000000000000 snd_seq_midi_event 14899 1 snd_seq_midi, Live 0x0000000000000000 snd_seq 61897 2 snd_seq_midi,snd_seq_midi_event, Live 0x0000000000000000 hid 100612 2 hid_generic,usbhid, Live 0x0000000000000000 snd_timer 29989 2 snd_pcm,snd_seq, Live 0x0000000000000000 snd_seq_device 14497 3 snd_seq_midi,snd_rawmidi,snd_seq, Live 0x0000000000000000 kvm 441558 0 - Live 0x0000000000000000 drm_kms_helper 46933 1 i915, Live 0x0000000000000000 drm 286485 4 i915,drm_kms_helper, Live 0x0000000000000000 snd 83673 9 snd_hda_codec_realtek,snd_hda_intel,snd_hda_codec,snd_hwdep,snd_pcm,snd_rawmidi,snd_seq,snd_timer,snd_seq_device, Live 0x0000000000000000 lpc_ich 17144 0 - Live 0x0000000000000000 soundcore 15091 1 snd, Live 0x0000000000000000 i2c_algo_bit 13564 1 i915, Live 0x0000000000000000 snd_page_alloc 18798 2 snd_hda_intel,snd_pcm, Live 0x0000000000000000 psmouse 92362 0 - Live 0x0000000000000000 dell_wmi 12681 0 - Live 0x0000000000000000 video 19412 1 i915, Live 0x0000000000000000 sparse_keymap 13890 1 dell_wmi, Live 0x0000000000000000 serio_raw 13215 0 - Live 0x0000000000000000 mac_hid 13253 0 - Live 0x0000000000000000 wmi 19256 1 dell_wmi, Live 0x0000000000000000 microcode 23075 0 - Live 0x0000000000000000 dcdbas 14490 0 - Live 0x0000000000000000 ppdev 17113 0 - Live 0x0000000000000000 parport_pc 32866 1 - Live 0x0000000000000000 lp 17799 0 - Live 0x0000000000000000 parport 46562 3 ppdev,parport_pc,lp, Live 0x0000000000000000 tg3 157347 0 - Live 0x0000000000000000 ==== ioports ==== $ cat /proc/ioports 0000-0cf7 : PCI Bus 0000:00 0000-001f : dma1 0020-0021 : pic1 0040-0043 : timer0 0050-0053 : timer1 0060-0060 : keyboard 0064-0064 : keyboard 0070-007f : rtc0 0080-008f : dma page reg 00a0-00a1 : pic2 00c0-00df : dma2 00f0-00ff : fpu 0170-0177 : 0000:00:1f.1 0170-0177 : ata_piix 01f0-01f7 : 0000:00:1f.1 01f0-01f7 : ata_piix 0376-0376 : 0000:00:1f.1 0376-0376 : ata_piix 0378-037a : parport0 03f6-03f6 : 0000:00:1f.1 03f6-03f6 : ata_piix 03f8-03ff : serial 0778-077a : parport0 0800-085f : pnp 00:01 0800-0803 : ACPI PM1a_EVT_BLK 0804-0805 : ACPI PM1a_CNT_BLK 0808-080b : ACPI PM_TMR 0810-0815 : ACPI CPU throttle 0828-082f : ACPI GPE0_BLK 0830-0833 : iTCO_wdt 0860-08ff : pnp 00:01 0860-087f : iTCO_wdt 0880-08bf : gpio_ich 0880-08af : gpio_ich 08b0-08bf : gpio_ich 0c00-0c7f : pnp 00:01 0cf8-0cff : PCI conf1 0d00-ffff : PCI Bus 0000:00 1000-1fff : PCI Bus 0000:01 ecd8-ecdf : 0000:00:02.0 ece0-ecff : 0000:00:1f.3 fe00-fe07 : 0000:00:1f.2 fe00-fe07 : ata_piix fe10-fe13 : 0000:00:1f.2 fe10-fe13 : ata_piix fe20-fe27 : 0000:00:1f.2 fe20-fe27 : ata_piix fe30-fe33 : 0000:00:1f.2 fe30-fe33 : ata_piix fec0-fecf : 0000:00:1f.2 fec0-fecf : ata_piix ff20-ff3f : 0000:00:1d.3 ff20-ff3f : uhci_hcd ff40-ff5f : 0000:00:1d.2 ff40-ff5f : uhci_hcd ff60-ff7f : 0000:00:1d.1 ff60-ff7f : uhci_hcd ff80-ff9f : 0000:00:1d.0 ff80-ff9f : uhci_hcd ffa0-ffaf : 0000:00:1f.1 ffa0-ffaf : ata_piix ==== iomem ==== $ cat /proc/iomem 00000000-0000ffff : reserved 00010000-0009fbff : System RAM 0009fc00-0009ffff : RAM buffer 000a0000-000bffff : PCI Bus 0000:00 000c0000-000effff : PCI Bus 0000:00 000c0000-000c7fff : Video ROM 000ce800-000d07ff : Adapter ROM 000d0800-000d3fff : Adapter ROM 000f0000-000fffff : PCI Bus 0000:00 000f0000-000fffff : reserved 000f0000-000fffff : System ROM 00100000-cdc08bff : System RAM 01000000-016d73c0 : Kernel code 016d73c1-01ce6abf : Kernel data 01de7000-01f46fff : Kernel bss cdc08c00-cdc5cbff : ACPI Non-volatile Storage cdc5cc00-cdc5ebff : ACPI Tables cdc5ec00-dfffffff : reserved cdd00000-dfffffff : PCI Bus 0000:00 d0000000-dfffffff : 0000:00:02.0 e0000000-efffffff : PCI MMCONFIG 0000 [bus 00-ff] e0000000-efffffff : reserved f0000000-fed003ff : reserved f0000000-fec00000 : PCI Bus 0000:00 f0000000-f01fffff : PCI Bus 0000:01 f0200000-f0200fff : Intel Flush Page fe500000-fe5fffff : PCI Bus 0000:01 fe5f0000-fe5fffff : 0000:01:00.0 fe5f0000-fe5fffff : tg3 fe6fc000-fe6fffff : 0000:00:1b.0 fe6fc000-fe6fffff : ICH HD audio fe700000-fe7fffff : 0000:00:02.1 fe800000-febfffff : 0000:00:02.0 fed00000-fed003ff : HPET 0 fed20000-fed9ffff : reserved fed20000-fed9ffff : PCI Bus 0000:00 fedab410-fedab414 : iTCO_wdt fee00000-feefffff : reserved fee00000-fee00fff : Local APIC ff97c000-ff97ffff : PCI Bus 0000:00 ff980000-ff980fff : PCI Bus 0000:00 ff980000-ff9803ff : 0000:00:1d.7 ff980000-ff9803ff : ehci_hcd ffb00000-ffffffff : reserved 100000000-12bffffff : System RAM ==== lspci ==== see attachment ==== scsi ==== cat /proc/scsi/scsi Attached devices: Host: scsi2 Channel: 00 Id: 00 Lun: 00 Vendor: ATA Model: ST3160318AS Rev: CC45 Type: Direct-Access ANSI SCSI revision: 05 Host: scsi3 Channel: 00 Id: 00 Lun: 00 Vendor: HL-DT-ST Model: DVD+-RW GT10N Rev: A109 Type: CD-ROM ==== proc ==== $ ls /proc 1 1807 2112 2325 34 624 870 driver partitions 10 1859 2113 2331 35 658 871 execdomains sched_debug 1006 19 2118 2342 3597 661 873 fb schedstat 11 1922 2127 2391 3696 677 879 filesystems scsi 12 1945 2133 2396 3697 680 885 fs self 1226 1987 2134 24 3704 7 887 interrupts slabinfo 1240 2 2139 2425 3857 713 889 iomem softirqs 1243 20 2143 2435 3859 714 892 ioports stat 1244 2002 2153 2436 3867 717 9 irq swaps 1245 2037 2158 2499 3980 719 906 kallsyms sys 1263 2040 2160 25 4002 720 916 kcore sysrq-trigger 13 2041 2162 2521 415 74 918 key-users sysvipc 1391 2054 2173 2552 416 740 946 kmsg timer_list 14 2063 2174 26 46 75 acpi kpagecount timer_stats 1413 2074 2187 29 49 752 asound kpageflags tty 1589 2077 2190 3 5 76 buddyinfo latency_stats uptime 16 2079 22 30 50 764 bus loadavg version 1626 2087 226 3049 51 772 cgroups locks vmallocinfo 1648 2091 227 3070 513 773 cmdline mdstat vmstat 17 2095 2284 31 52 776 consoles meminfo zoneinfo 1762 2096 2293 313 53 777 cpuinfo misc 1766 2099 23 317 538 783 crypto modules 1791 21 2301 32 54 8 devices mounts 18 2104 2306 33 558 803 diskstats mtrr 1805 2106 2316 3300 6 844 dma net 1806 2107 2317 3368 606 850 dri pagetypeinfo ==== /etc/requestkey.conf ==== create dns_resolver * * /sbin/key.dns_resolver %k create user debug:* negate /bin/keyctl negate %k 30 %S create user debug:* rejected /bin/keyctl reject %k 30 %c %S create user debug:* expired /bin/keyctl reject %k 30 %c %S create user debug:* revoked /bin/keyctl reject %k 30 %c %S create user debug:loop:* * |/bin/cat create user debug:* * /usr/share/keyutils/request-key-debug.sh %k %d %c %S create dns_resolver * * /usr/sbin/cifs.upcall %k negate * * * /bin/keyctl negate %k 30 %S create cifs.spnego * * /usr/sbin/cifs.upcall -l -t -c %k ==== smb.conf ==== [global] workgroup = WINDOM realm = WINDOM.LEIDENUNIV.NL server string = %h ISSC Workstation (Ubuntu) security = ADS allow trusted domains = No map to guest = Bad User obey pam restrictions = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab syslog = 0 log file = /var/log/samba/log.%m max log size = 1000 smb ports = 445 name resolve order = wins lmhosts host bcast client ldap sasl wrapping = sign deadtime = 15 socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 printcap name = cups local master = No domain master = No panic action = /usr/share/samba/panic-action %d winbind use default domain = Yes winbind nss info = rfc2307 winbind refresh tickets = Yes winbind offline logon = Yes create krb5 conf = No winbind max domain connections = 3 idmap config WINDOM : backend = ad idmap config WINDOM : schema-mode = rfc2307 idmap config WINDOM : readonly = yes idmap config WINDOM : range = 1000000-6999999 idmap config WINDOM : cache time = 3600 idmap config WINDOM : negative cache time = 300 idmap config WINDOM : uid = 1000000-6999999 idmap config WINDOM : gid = 1000000-6999999 idmap config * : uid = 1000-999999 idmap config * : gid = 1000-999999 idmap config * : range = 1000-999999 idmap config * : cache time = 3600 idmap config * : negative cache time = 300 idmap config * : backend = tdb ea support = Yes cups options = raw case sensitive = Yes delete readonly = Yes ==== krb5.conf ==== [libdefaults] default_realm = WINDOM.LEIDENUNIV.NL fcc-mit-ticketflags = true kdc_timesync = 1 ccache_type = 4 forwardable = true proxiable = true allow_weak_crypto = true default_tgs_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC default_tkt_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC preferred_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC dns_lookup_kdc = true dns_lookup_realm = true [domain_realm] .windom.leidenuniv.nl = WINDOM.LEIDENUNIV.NL windom.leidenuniv.nl = WINDOM.LEIDENUNIV.NL [realms] WINDOM.LEIDENUNIV.NL = { auth_to_local = RULE:[1:$0\$1](^WINDOM\.LEIDENUNIV\.NL\\.*)s/^WINDOM\.LEIDENUNIV\.NL\\// auth_to_local = DEFAULT } [appdefaults] pam = { mappings = WINDOM\\(.*) $1@WINDOM.LEIDENUNIV.NL forwardable = true validate = true } httpd = { mappings = WINDOM\\(.*) $1@WINDOM.LEIDENUNIV.NL reverse_mappings = (.*)@WINDOM\.LEIDENUNIV\.NL WINDOM\$1 } [logging] kdc = SYSLOG:INFO:DAEMON admin_server = SYSLOG:INFO:DAEMON default = SYSLOG:INFO:DAEMON =====
Hello Steve - I assume this 8 year old bug is probably fixed by now?