samba - Feb 2004 - Cannot change password on HP-UX: PANIC: failed to set gid, INTERNAL ERROR

Hello.

I'm having some difficulties with Samba 3.0.2a on a HP-UX 11.00 machine.
I compiled Samba with gcc:

vz6tml_tc51:/u/vz6tml/tmp/tc51-misc/Source/Samba/samba-3.0.2a/source/ >
/usr/local/bin/gcc --version
gcc (GCC) 3.3.1
Copyright (C) 2003 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
vz6tml_tc51:/u/vz6tml/tmp/tc51-misc/Source/Samba/samba-3.0.2a/source/ > uname
-a
HP-UX tc51 B.11.00 A 9000/785 2003669075 two-user license

When I run smbpasswd as a user to change the password, I'm getting the
following messages in log.smbd:

################################################################################
[...]
[2004/02/24 10:07:01.907161, 10, pid=7813, effective(0, 0), real(0, 0)]
passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)
  pdb_set_group_sid_from_rid:
        setting group sid S-1-5-21-2073086230-3380733499-3392870098-514 from rid
514
[2004/02/24 10:07:01.907312, 11, pid=7813, effective(0, 0), real(0, 0)]
passdb/pdb_get_set.c:pdb_get_init_flags(199)
  element 20: DEFAULT
[2004/02/24 10:07:01.907514, 3, pid=7813, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/02/24 10:07:01.908197, 10, pid=7813, effective(0, 0), real(0, 0)]
lib/system_smbd.c:sys_getgrouplist(113)
  sys_getgrouplist: user [nobody]
[2004/02/24 10:07:01.908372, 10, pid=7813, effective(0, 0), real(0, 0)]
lib/system_smbd.c:sys_getgrouplist(122)
  sys_getgrouplist(): disabled winbindd for group lookup [user == nobody]
[2004/02/24 10:07:01.908483, 3, pid=7813, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2004/02/24 10:07:01.908588, 3, pid=7813, effective(0, 0), real(0, 0)]
smbd/uid.c:push_conn_ctx(287)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2004/02/24 10:07:01.908689, 3, pid=7813, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/02/24 10:07:01.908791, 5, pid=7813, effective(0, 0), real(0, 0)]
auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2004/02/24 10:07:01.908888, 5, pid=7813, effective(0, 0), real(0, 0)]
auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2004/02/24 10:07:01.944528, 0, pid=7813, effective(0, 0), real(0, 0)]
lib/util_sec.c:assert_gid(113)
  Failed to set gid privileges to (-1,-2) now set to (0,0) uid=(0,0)
[2004/02/24 10:07:01.944717, 0, pid=7813, effective(0, 0), real(0, 0)]
lib/util.c:smb_panic(1400)
  PANIC: failed to set gid

[2004/02/24 10:07:01.945014, 0, pid=7813, effective(0, 0), real(0, 0)]
lib/fault.c:fault_report(36)
  ==============================================================[2004/02/24
10:07:01.945129, 0, pid=7813, effective(0, 0), real(0, 0)]
lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 6 in pid 7813 (3.0.2a)
  Please read the appendix Bugs of the Samba HOWTO collection
[2004/02/24 10:07:01.945260, 0, pid=7813, effective(0, 0), real(0, 0)]
lib/fault.c:fault_report(39)
  ==============================================================[2004/02/24
10:07:01.945370, 0, pid=7813, effective(0, 0), real(0, 0)]
lib/util.c:smb_panic(1400)
  PANIC: internal error
################################################################################

As root, I can change/set passwords just fine.

There's no core file created - I did a 'find /opt/samba3.0.2a/. -type f
-name "core*"'.

I'm getting this error on multiple machines, not just the "tc51"
host.

What can I do?

################################################################################

root_tc51:/opt/samba3.0.2a/ > /opt/samba3.0.2a/bin/testparm
Load smb config files from /opt/samba3.0.2a/lib/smb.conf
Processing section "[caxshare]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

# Global parameters
[global]
        workgroup = EUROPE
        server string = MCAD CIFS Server on %h
        security = SERVER
        log level = 100
        max log size = 4096
        debug hires timestamp = Yes
        debug pid = Yes
        debug uid = Yes
        load printers = No

[caxshare]
        comment = CAx Shares
        path = /usr/local/samba/shares/caxshare
        write list = @sysadmin
        guest ok = Yes
        fstype = Samba

root_tc51:/opt/samba3.0.2a/ > /opt/samba3.0.2a/bin/testparm -vs
Load smb config files from /opt/samba3.0.2a/lib/smb.conf
Processing section "[caxshare]"
Loaded services file OK.
# Global parameters
[global]
        dos charset = CP850
        unix charset = UTF-8
        display charset = LOCALE
        workgroup = EUROPE
        netbios name = TC51
        netbios aliases         netbios scope         server string = MCAD CIFS
Server on %h
        interfaces         bind interfaces only = No
        security = SERVER
        auth methods         encrypt passwords = Yes
        update encrypted = No
        client schannel = Auto
        server schannel = Auto
        allow trusted domains = Yes
        hosts equiv         min passwd length = 5
        map to guest = Never
        null passwords = No
        obey pam restrictions = No
        password server = *
        smb passwd file = /opt/samba3.0.2a/private/smbpasswd
        private dir = /opt/samba3.0.2a/private
        passdb backend = smbpasswd
        algorithmic rid base = 1000
        root directory         guest account = nobody
        pam password change = No
        passwd program         passwd chat = *new*password* %n\n *new*password*
%n\n *changed*
        passwd chat debug = No
        passwd chat timeout = 2
        username map         password level = 0
        username level = 0
        unix password sync = No
        restrict anonymous = 0
        lanman auth = Yes
        ntlm auth = Yes
        client NTLMv2 auth = No
        client lanman auth = Yes
        client plaintext auth = Yes
        preload modules         log level = 100
        syslog = 1
        syslog only = No
        log file         max log size = 4096
        timestamp logs = Yes
        debug hires timestamp = Yes
        debug pid = Yes
        debug uid = Yes
        smb ports = 445 139
        protocol = NT1
        large readwrite = Yes
        max protocol = NT1
        min protocol = CORE
        unicode = Yes
        read bmpx = No
        read raw = Yes
        write raw = Yes
        disable netbios = No
        acl compatibility         nt pipe support = Yes
        nt status support = Yes
        announce version = 4.9
        announce as = NT
        max mux = 50
        max xmit = 16644
        name resolve order = lmhosts wins host bcast
        max ttl = 259200
        max wins ttl = 518400
        min wins ttl = 21600
        time server = No
        unix extensions = Yes
        use spnego = Yes
        client signing = auto
        server signing = No
        client use spnego = Yes
        change notify timeout = 60
        deadtime = 0
        getwd cache = Yes
        keepalive = 300
        kernel change notify = Yes
        lpq cache time = 10
        max smbd processes = 0
        paranoid server security = Yes
        max disk size = 0
        max open files = 10000
        socket options = TCP_NODELAY
        use mmap = No
        hostname lookups = No
        name cache timeout = 660
        load printers = No
        printcap name = /etc/printcap
        disable spoolss = No
        enumports command         addprinter command         deleteprinter
command         show add printer wizard = Yes
        os2 driver map         mangling method = hash2
        mangle prefix = 1
        stat cache = Yes
        machine password timeout = 604800
        add user script         delete user script         add group script     
delete group script         add user to group script         delete user from
group script         set primary group script         add machine script        
shutdown script         abort shutdown script         logon script         logon
path = \\%N\%U\profile
        logon drive         logon home = \\%N\%U
        domain logons = No
        os level = 20
        lm announce = Auto
        lm interval = 60
        preferred master = Auto
        local master = Yes
        domain master = Auto
        browse list = Yes
        enhanced browsing = Yes
        dns proxy = Yes
        wins proxy = No
        wins server         wins support = No
        wins hook         wins partners         kernel oplocks = Yes
        lock spin count = 3
        lock spin time = 10
        oplock break wait time = 0
        ldap suffix         ldap machine suffix         ldap user suffix        
ldap group suffix         ldap idmap suffix         ldap filter = (uid=%u)
        ldap admin dn         ldap ssl         ldap passwd sync = no
        ldap delete dn = No
        ldap replication sleep = 1000
        add share command         change share command         delete share
command         config file         preload         lock directory =
/opt/samba3.0.2a/var/locks
        pid directory = /opt/samba3.0.2a/var/locks
        utmp directory         wtmp directory         utmp = No
        default service         message command         dfree command        
get quota command         set quota command         remote announce        
remote browse sync         socket address = 0.0.0.0
        homedir map         afs username map         time offset = 0
        NIS homedir = No
        panic action         host msdfs = No
        enable rid algorithm = Yes
        idmap backend         idmap uid         idmap gid         template
primary group = nobody
        template homedir = /home/%D/%U
        template shell = /bin/false
        winbind separator = \
        winbind cache time = 300
        winbind enable local accounts = Yes
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = No
        winbind trusted domains only = No
        comment         path         username         invalid users        
valid users         admin users         read list         write list        
printer admin         force user         force group         read only = Yes
        create mask = 0744
        force create mode = 00
        security mask = 0777
        force security mode = 00
        directory mask = 0755
        force directory mode = 00
        directory security mask = 0777
        force directory security mode = 00
        inherit permissions = No
        inherit acls = No
        guest only = No
        guest ok = No
        only user = No
        hosts allow         hosts deny         nt acl support = Yes
        profile acls = No
        map acl inherit = No
        afs share = No
        block size = 1024
        max connections = 0
        min print space = 0
        strict allocate = No
        strict sync = No
        sync always = No
        use sendfile = No
        write cache size = 0
        max reported print jobs = 0
        max print jobs = 1000
        printable = No
        printing = hpux
        print command = lp -c -d%p %s; rm %s
        lpq command = lpstat -o%p
        lprm command = cancel %p-%j
        lppause command         lpresume command         queuepause command =
disable %p
        queueresume command = enable %p
        printer name         use client driver = No
        default devmode = No
        default case = lower
        case sensitive = No
        preserve case = Yes
        short preserve case = Yes
        mangle case = No
        mangling char = ~
        hide dot files = Yes
        hide special files = No
        hide unreadable = No
        hide unwriteable files = No
        delete veto files = No
        veto files         hide files         veto oplock files         map
system = No
        map hidden = No
        map archive = Yes
        mangled names = Yes
        mangled map         browseable = Yes
        blocking locks = Yes
        csc policy = manual
        fake oplocks = No
        locking = Yes
        oplocks = Yes
        level2 oplocks = Yes
        oplock contention limit = 2
        posix locking = Yes
        strict locking = Yes
        share modes = Yes
        copy         include         exec         preexec close = No
        postexec         root preexec         root preexec close = No
        root postexec         available = Yes
        volume         fstype = NTFS
        set directory = No
        wide links = Yes
        follow symlinks = Yes
        dont descend         magic script         magic output         delete
readonly = No
        dos filemode = No
        dos filetimes = No
        dos filetime resolution = No
        fake directory create times = No
        vfs objects         msdfs root = No
        msdfs proxy 
[caxshare]
        comment = CAx Shares
        path = /usr/local/samba/shares/caxshare
        write list = @sysadmin
        guest ok = Yes
        fstype = Samba

Thanks a lot,

Alexander Skwar
-- 
Sind Sch?fchens Locken schwarz und braun,
dann lehnt es am Elektrozaun.
Und wenn es mit den ?uglein rollt,
dann will es sagen: "Zuviel Volt!"

Am Tue, 24 Feb 2004 10:34:16 +0100 schrieb Alexander Skwar:
> [2004/02/24 10:07:01.944528, 0, pid=7813, effective(0, 0), real(0, 0)]
lib/util_sec.c:assert_gid(113)
>   Failed to set gid privileges to (-1,-2) now set to (0,0) uid=(0,0)
I searched some more, and found that this is the "core error message".
The cause of this error is, that my nobody user has the UID -2 (minus 2)
and its group is nogroup with -2.

I now set the guest account to an account with non-negative UID/GID and
this error seems to be fixed now.

Alexander Skwar
-- 
Wusstest Du schon, das "slrn" das Gerauesch ist, das Hamster macht,
wenn er einen Frottee Agent auswuergt?
  [Joachim Kromm in tot]