thr3ads.net - samba - [Samba] Samba 3.0.21b winbind crash [Feb 2006]

If this information is useful, please help other people find it:
Share via:

Thomas Limoncelli

2006-Feb-22 00:07 UTC

[Samba] Samba 3.0.21b winbind crash

I'm using Samba 3.0.21b on SuSE 9.3 Pro (x86) with the binary RPMs from
samba.org/suse.com (3.0.21b-1.1.2-SUSE-SL9.3) on a Domain Member Server in ADS
mode with winbind against W2K3 SP1 AD servers and idmap uids/gids stored in a
central OpenLDAP directory.

Unfortunately, winbind gives me a hard time and reproducibly dies with a PANIC
on a "wbinfo -g", although I think I've followed TOSHARG's and
S3bE's advices and have used it successfully in similar environments
(although not with 3.0.21b) in the past. Can anyone shed some light on this?
Below please find my smb.conf and level 10 log.winbindd (both slightly
obfuscated to protect the innocent, but not mangled in any other way). I can
provide Ethereal traces privately on request.

- --- smb.conf ---
[global]
        realm = YYY.DE
        workgroup = XXX
        security = ADS
        wins server = 172.16.1.1, 172.16.1.2
        interfaces = 10.23.207.11
        bind interfaces only = Yes
        ldap admin dn = cn=root,dc=yyy,dc=de
        ldap idmap suffix = ou=Idmap
        ldap suffix = dc=yyy,dc=de
        idmap backend = ldap:ldap://openldap
        idmap uid = 10500-20000
        idmap gid = 10500-20000
        winbind use default domain = Yes
        log level = 1 winbind:10

- --- log.winbindd ---
2006/02/22 00:29:44, 1] nsswitch/winbindd.c:main(979)
  winbindd version 3.0.21b-1.1.2-SUSE-SL9.3 started.
  Copyright The Samba Team 2000-2004
[2006/02/22 00:29:44, 2] nsswitch/winbindd_util.c:add_trusted_domain(174)
  Added domain XXX YYY.DE S-1-5-21-1004849351-3390790938-2803357102
[2006/02/22 00:29:44, 2] nsswitch/winbindd_util.c:add_trusted_domain(174)
  Added domain BUILTIN  S-1-5-32
[2006/02/22 00:29:44, 2] nsswitch/winbindd_util.c:add_trusted_domain(174)
  Added domain MYSERVER  S-1-5-21-4017196506-4081282237-3136230588
[2006/02/22 00:29:44, 10] nsswitch/winbindd_util.c:open_winbindd_socket(911)
  open_winbindd_socket: opened socket fd 12
[2006/02/22 00:29:44, 10]
nsswitch/winbindd_util.c:open_winbindd_priv_socket(923)
  open_winbindd_priv_socket: opened socket fd 14
[2006/02/22 00:29:46, 5] nsswitch/winbindd_dual.c:async_reply_recv(192)
  Could not receive async reply
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 13
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2006/02/22 00:30:01, 3]
nsswitch/winbindd_misc.c:winbindd_interface_version(471)
  [    0]: request interface version
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(504)
  [    0]: request location of privileged pipe
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 17
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn GID_TO_SID
[2006/02/22 00:30:01, 3] nsswitch/winbindd_sid.c:winbindd_gid_to_sid(406)
  [    0]: gid to sid 65533
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 13
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2006/02/22 00:30:01, 3]
nsswitch/winbindd_misc.c:winbindd_interface_version(471)
  [    0]: request interface version
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(504)
  [    0]: request location of privileged pipe
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 17
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn UID_TO_SID
[2006/02/22 00:30:01, 3] nsswitch/winbindd_sid.c:winbindd_uid_to_sid(279)
  [    0]: uid to sid 0
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn GID_TO_SID
[2006/02/22 00:30:01, 3] nsswitch/winbindd_sid.c:winbindd_gid_to_sid(406)
  [    0]: gid to sid 0
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 13
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2006/02/22 00:30:01, 3]
nsswitch/winbindd_misc.c:winbindd_interface_version(471)
  [    0]: request interface version
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(504)
  [    0]: request location of privileged pipe
2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 18
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn GETGROUPS
[2006/02/22 00:30:01, 3] nsswitch/winbindd_group.c:winbindd_getgroups(925)
  [    0]: getgroups root
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 13
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2006/02/22 00:30:01, 3]
nsswitch/winbindd_misc.c:winbindd_interface_version(471)
  [    0]: request interface version
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(504)
  [    0]: request location of privileged pipe
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 20
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn GETGROUPS
[2006/02/22 00:30:01, 3] nsswitch/winbindd_group.c:winbindd_getgroups(925)
  [    0]: getgroups root
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 13
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2006/02/22 00:30:01, 3]
nsswitch/winbindd_misc.c:winbindd_interface_version(471)
  [    0]: request interface version
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2006/02/22 00:30:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(504)
  [    0]: request location of privileged pipe
[2006/02/22 00:30:01, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 21
[2006/02/22 00:30:01, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn GETGROUPS
[2006/02/22 00:30:01, 3] nsswitch/winbindd_group.c:winbindd_getgroups(925)
  [    0]: getgroups root
[2006/02/22 00:30:03, 5] nsswitch/winbindd_dual.c:async_reply_recv(192)
  Could not receive async reply
[2006/02/22 00:30:05, 5] nsswitch/winbindd_dual.c:async_reply_recv(192)
  Could not receive async reply
[2006/02/22 00:30:20, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 13
[2006/02/22 00:30:20, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2006/02/22 00:30:20, 3]
nsswitch/winbindd_misc.c:winbindd_interface_version(471)
  [    0]: request interface version
[2006/02/22 00:30:20, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2006/02/22 00:30:20, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(504)
  [    0]: request location of privileged pipe
[2006/02/22 00:30:20, 6] nsswitch/winbindd.c:new_connection(639)
  accepted socket 19
[2006/02/22 00:30:20, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn LIST_GROUPS
[2006/02/22 00:30:20, 3] nsswitch/winbindd_group.c:winbindd_list_groups(813)
  [    0]: list groups
[2006/02/22 00:30:20, 4] nsswitch/winbindd_group.c:get_sam_group_entries(523)
  get_sam_group_entries: BUILTIN or local domain; enumerating local groups as
well
[2006/02/22 00:30:20, 3] nsswitch/winbindd_group.c:get_sam_group_entries(528)
  get_sam_group_entries: Failed to enumerate domain local groups!
[2006/02/22 00:30:20, 4] nsswitch/winbindd_group.c:get_sam_group_entries(523)
  get_sam_group_entries: BUILTIN or local domain; enumerating local groups as
well
[2006/02/22 00:30:20, 3] nsswitch/winbindd_group.c:get_sam_group_entries(528)
  get_sam_group_entries: Failed to enumerate domain local groups!
[2006/02/22 00:30:20, 8] nsswitch/winbindd_cm.c:connection_ok(865)
  Connection to  for domain XXX has NULL cli!
[2006/02/22 00:30:20, 5] nsswitch/winbindd_cm.c:receive_getdc_response(524)
  Received packet for \MAILSLOT\NET\GETDCA7810AC
[2006/02/22 00:30:20, 10] nsswitch/winbindd_cm.c:receive_getdc_response(568)
  GetDC gave name ADSERVER1 for domain XXX
[2006/02/22 00:30:20, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(94)
  cm_get_ipc_userpass: No auth-user defined
[2006/02/22 00:30:20, 5] nsswitch/winbindd_cm.c:cm_prepare_connection(272)
  connecting to ADSERVER1 from MYSERVER with kerberos principal
[MYSERVER$@XXX.DE]
[2006/02/22 00:30:22, 10]
nsswitch/winbindd_cache.c:set_global_winbindd_state_online(2297)
  set_global_winbindd_state_online: online requested.
[2006/02/22 00:30:22, 10]
nsswitch/winbindd_cache.c:set_global_winbindd_state_online(2300)
  set_global_winbindd_state_online: rejecting.
[2006/02/22 00:30:22, 5] nsswitch/winbindd_cache.c:get_cache(123)
  get_cache: Setting ADS methods for domain XXX
[2006/02/22 00:30:22, 0] lib/fault.c:fault_report(36)
  ==============================================================[2006/02/22
00:30:22, 0] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 27549 (3.0.21b-1.1.2-SUSE-SL9.3)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2006/02/22 00:30:22, 0] lib/fault.c:fault_report(39)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2006/02/22 00:30:22, 0] lib/fault.c:fault_report(40)
  ==============================================================[2006/02/22
00:30:22, 0] lib/util.c:smb_panic2(1554)
  PANIC: internal error
[2006/02/22 00:30:22, 0] lib/util.c:smb_panic2(1562)
  BACKTRACE: 4 stack frames:
   #0 /usr/sbin/winbindd(smb_panic2+0x120) [0x80fae50]
   #1 /usr/sbin/winbindd(smb_panic+0x26) [0x80fb026]
   #2 /usr/sbin/winbindd [0x80e4c6b]
   #3 [0xffffe420]

- --- misc ---
myserver# grep winbind /etc/nsswitch.conf
passwd: files winbind
group:  files winbind

myserver# cat /etc/krb5.conf
[libdefaults]
        default_realm = YYY.DE

[realms]
        YYY.DE = {
                kdc = adserver1.yyy.de
                kdc = adserver2.yyy.de
        }

[logging]
    kdc = FILE:/var/log/krb5kdc.log
    admin_server = FILE:/var/log/kadmin.log
    default = FILE:/var/log/krb5lib.log

myserver# net ads testjoin
Join is OK

myserver# chkconfig nscd
nscd  off


__________________________________________________________________________
Erweitern Sie FreeMail zu einem noch leistungsstarkeren E-Mail-Postfach!		
Mehr Infos unter http://freemail.web.de/home/landingpad/?mc=021131

Jeremy Allison

2006-Feb-22 01:50 UTC

head link

[Samba] Samba 3.0.21b winbind crash

On Wed, Feb 22, 2006 at 01:07:32AM +0100, Thomas Limoncelli
wrote:> I'm using Samba 3.0.21b on SuSE 9.3 Pro (x86) with the binary RPMs from
samba.org/suse.com (3.0.21b-1.1.2-SUSE-SL9.3) on a Domain Member Server in ADS
mode with winbind against W2K3 SP1 AD servers and idmap uids/gids stored in a
central OpenLDAP directory.
> 
> Unfortunately, winbind gives me a hard time and reproducibly dies with a
PANIC on a "wbinfo -g", although I think I've followed
TOSHARG's and S3bE's advices and have used it successfully in similar
environments (although not with 3.0.21b) in the past. Can anyone shed some light
on this? Below please find my smb.conf and level 10 log.winbindd (both slightly
obfuscated to protect the innocent, but not mangled in any other way). I can
provide Ethereal traces privately on request.
Can you add the following line to the [global] section of your smb.conf.

panic action = "/bin/sleep 90000"

and then when winbindd crashes it will hang waiting
for the sleep to finish. You can then attach to it with
gdb and get a backtrace using the "bt" command.

Thanks,

	Jeremy.

Jeremy Allison

2006-Feb-24 16:50 UTC

head link

[Samba] Samba 3.0.21b winbind crash

On Fri, Feb 24, 2006 at 04:38:49PM +0100, Thomas Limoncelli
wrote:> It has crashed for me again -- this time unrelated to winbindd_cache.tdb 
> processing as it seems, since it happened at runtime (during "getent 
> group somegroup", IIRC):
> 
> [2006/02/24 14:10:39, 0] lib/util_sock.c:write_data(559)
>   write_data: write failure. Error = Connection reset by peer
> [2006/02/24 14:10:39, 0] libsmb/clientgen.c:write_socket(138)
>   write_socket: Error writing 108 bytes to socket 20: ERRNO = 
> Connection reset by peer
> [2006/02/24 14:10:39, 0] libsmb/clientgen.c:cli_send_smb(168)
>   Error writing 108 bytes to client. -1 (Connection reset by peer)
> [2006/02/24 14:10:39, 1] rpc_client/cli_pipe.c:cli_rpc_pipe_open(2197)
>   cli_rpc_pipe_open: cli_nt_create failed on pipe \NETLOGON to machine 
> ADSERVER1.  Error was Write error: Connection reset by peer
> [2006/02/24 14:10:39, 0] lib/fault.c:fault_report(36)
Jerry just tracked this bug down yesterday and we fixed it
for 3.0.21c. Thanks,

Jeremy.

Apparently Analagous Threads

Search for more maybe matching threads

samba - Feb 2006 - Samba 3.0.21b winbind crash

[Samba] Samba 3.0.21b winbind crash

[Samba] Samba 3.0.21b winbind crash

[Samba] Samba 3.0.21b winbind crash

Apparently Analagous Threads