samba - Sep 2009 - Security context stack overflow on Debian5+LDAP

Hi 

I'm setting up a Samba PDC, with auth over Zimbra's LDAP, with this
howto:
http://wiki.zimbra.com/index.php?title=UNIX_and_Windows_Accounts_in_Zimbra_LDAP_and_Zimbra_Admin_UI_6.0

System is a fully updated Debian 5. All packages from distro. Samba is
3.2.5-4lenny6.
Now everything is almost ok, but I'm getting an error when trying to mount
the samba share:
[2009/09/10 09:44:07, 2] passdb/pdb_ldap.c:init_group_from_ldap(2344) 
init_group_from_ldap: Entry found for group: 10001 
[2009/09/10 09:44:07, 0] smbd/sec_ctx.c:push_sec_ctx(210) 
Security context stack overflow! 
[2009/09/10 09:44:07, 0] lib/util.c:smb_panic(1663) 
PANIC (pid 17363): Security context stack overflow! 
[2009/09/10 09:44:07, 0] lib/util.c:log_stack_trace(1767) 
BACKTRACE: 58 stack frames: 
#0 /usr/sbin/smbd(log_stack_trace+0x2d) [0x8201d24] 
#1 /usr/sbin/smbd(smb_panic+0x80) [0x8201e81] 
#2 /usr/sbin/smbd(push_sec_ctx+0x7b) [0x80ce8f1] 
#3 /usr/sbin/smbd(become_root+0x17) [0x80c152a] 
#4 /usr/sbin/smbd(lookup_sids+0x845) [0x81b841f] 
#5 /usr/sbin/smbd(lookup_sid+0x12a) [0x81b8c20] 
#6 /usr/sbin/smbd(pdb_get_group_sid+0x169) [0x81b1d40] 
#7 /usr/sbin/smbd(pdb_get_group_rid+0x26) [0x84a9f64] 
#8 /usr/sbin/smbd(init_buffer_from_sam_v3+0xe5) [0x84a6e90] 
#9 /usr/sbin/smbd(pdb_copy_sam_account+0x3e) [0x84a8329] 
#10 /usr/sbin/smbd(pdb_getsampwsid+0x131) [0x81b4d28] 
#11 /usr/sbin/smbd [0x81b4e4d] 
#12 /usr/sbin/smbd [0x81b559a] 
#13 /usr/sbin/smbd(pdb_lookup_rids+0x3f) [0x81b39b4] 
#14 /usr/sbin/smbd(lookup_sids+0x882) [0x81b845c] 
#15 /usr/sbin/smbd(lookup_sid+0x12a) [0x81b8c20] 
#16 /usr/sbin/smbd(pdb_get_group_sid+0x169) [0x81b1d40] 
#17 /usr/sbin/smbd(pdb_get_group_rid+0x26) [0x84a9f64] 
#18 /usr/sbin/smbd(init_buffer_from_sam_v3+0xe5) [0x84a6e90] 
#19 /usr/sbin/smbd(pdb_copy_sam_account+0x3e) [0x84a8329] 
#20 /usr/sbin/smbd(pdb_getsampwsid+0x131) [0x81b4d28] 
#21 /usr/sbin/smbd [0x81b4e4d] 
#22 /usr/sbin/smbd [0x81b559a] 
#23 /usr/sbin/smbd(pdb_lookup_rids+0x3f) [0x81b39b4] 
#24 /usr/sbin/smbd(lookup_sids+0x882) [0x81b845c] 
#25 /usr/sbin/smbd(lookup_sid+0x12a) [0x81b8c20] 
#26 /usr/sbin/smbd(pdb_get_group_sid+0x169) [0x81b1d40] 
#27 /usr/sbin/smbd(pdb_get_group_rid+0x26) [0x84a9f64] 
#28 /usr/sbin/smbd(init_buffer_from_sam_v3+0xe5) [0x84a6e90] 
#29 /usr/sbin/smbd(pdb_copy_sam_account+0x3e) [0x84a8329] 
#30 /usr/sbin/smbd(pdb_getsampwsid+0x131) [0x81b4d28] 
#31 /usr/sbin/smbd [0x81b4e4d] 
#32 /usr/sbin/smbd [0x81b559a] 
#33 /usr/sbin/smbd(pdb_lookup_rids+0x3f) [0x81b39b4] 
#34 /usr/sbin/smbd(lookup_sids+0x882) [0x81b845c] 
#35 /usr/sbin/smbd(lookup_sid+0x12a) [0x81b8c20] 
#36 /usr/sbin/smbd(pdb_get_group_sid+0x169) [0x81b1d40] 
#37 /usr/sbin/smbd(pdb_get_group_rid+0x26) [0x84a9f64] 
#38 /usr/sbin/smbd(init_buffer_from_sam_v3+0xe5) [0x84a6e90] 
#39 /usr/sbin/smbd(pdb_copy_sam_account+0x3e) [0x84a8329] 
#40 /usr/sbin/smbd(pdb_getsampwsid+0x131) [0x81b4d28] 
#41 /usr/sbin/smbd [0x81b4e4d] 
#42 /usr/sbin/smbd [0x81b5130] 
#43 /usr/sbin/smbd(pdb_sid_to_id+0x29) [0x81b3823] 
#44 /usr/sbin/smbd [0x81b6bca] 
#45 /usr/sbin/smbd(sid_to_gid+0x109) [0x81b6ea4] 
#46 /usr/sbin/smbd(create_local_token+0x1ee) [0x82467b6] 
#47 /usr/sbin/smbd [0x824993d] 
#48 /usr/sbin/smbd [0x8102427] 
#49 /usr/sbin/smbd(ntlmssp_update+0x297) [0x8101c16] 
#50 /usr/sbin/smbd(auth_ntlmssp_update+0x48) [0x82495e1] 
#51 /usr/sbin/smbd [0x843a57c] 
#52 /usr/sbin/smbd(reply_sesssetup_and_X+0x1c4) [0x843a9bd] 
#53 /usr/sbin/smbd [0x80de096] 
#54 /usr/sbin/smbd(smbd_process+0x429) [0x80dfbe1] 
#55 /usr/sbin/smbd(main+0xfa2) [0x80a747f] 
#56 /lib/i686/cmov/libc.so.6(__libc_start_main+0xe5) [0xb7b03455] 
#57 /usr/sbin/smbd [0x80a4511] 
[2009/09/10 09:44:07, 0] lib/util.c:smb_panic(1668) 
smb_panic(): calling panic action [/usr/share/samba/panic-action 17363] 
[2009/09/10 09:44:07, 0] lib/util.c:smb_panic(1676) 
smb_panic(): action returned status 0 
[2009/09/10 09:44:07, 0] lib/fault.c:dump_core(201) 
dumping core in /var/log/samba/cores/smbd 

I did several searches but with no luck... 
Does anyone have an idea on how can I solve this? 
thanks 

-- 
Lorenzo Milesi - lorenzo.milesi at yetopen.it 

YetOpen S.r.l. - http://www.yetopen.it/ 
Via Previati 72 - 23900 Lecco - ITALY - 
Tel 0341 220 205 - Fax 178 607 8199 

GPG/PGP Key-Id: 0xE704E230 - http://keyserver.linux.it 

-------- D.Lgs. 196/2003 -------- 

Si avverte che tutte le informazioni contenute in questo messaggio sono 
riservate ed a uso esclusivo del destinatario. Nel caso in cui questo 
messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo 
senza copiarlo, a non inoltrarlo a terzi e ad avvertirci non appena 
possibile. 
Grazie.

On Thu, Sep 10, 2009 at 09:57:39AM +0200, Lorenzo Milesi
wrote:
> Hi 
> 
> I'm setting up a Samba PDC, with auth over Zimbra's LDAP, with this
howto:
>
http://wiki.zimbra.com/index.php?title=UNIX_and_Windows_Accounts_in_Zimbra_LDAP_and_Zimbra_Admin_UI_6.0
> 
> System is a fully updated Debian 5. All packages from distro. Samba is
3.2.5-4lenny6.
> Now everything is almost ok, but I'm getting an error when trying to
mount the samba share:
> [2009/09/10 09:44:07, 2] passdb/pdb_ldap.c:init_group_from_ldap(2344) 
> init_group_from_ldap: Entry found for group: 10001 
> [2009/09/10 09:44:07, 0] smbd/sec_ctx.c:push_sec_ctx(210) 
> Security context stack overflow! 
> [2009/09/10 09:44:07, 0] lib/util.c:smb_panic(1663) 
> PANIC (pid 17363): Security context stack overflow! 
> [2009/09/10 09:44:07, 0] lib/util.c:log_stack_trace(1767) 
> BACKTRACE: 58 stack frames: 
> #0 /usr/sbin/smbd(log_stack_trace+0x2d) [0x8201d24] 
> #1 /usr/sbin/smbd(smb_panic+0x80) [0x8201e81] 
> #2 /usr/sbin/smbd(push_sec_ctx+0x7b) [0x80ce8f1] 
> #3 /usr/sbin/smbd(become_root+0x17) [0x80c152a] 
> #4 /usr/sbin/smbd(lookup_sids+0x845) [0x81b841f] 
> #5 /usr/sbin/smbd(lookup_sid+0x12a) [0x81b8c20] 
...

Hmmm. 3.2.5-4lenny6, is that an up-to-date package? I'm
pretty certain I have seen that ages ago and it was fixed.
Is it possible for you to retry with 3.4.1? If not, the
least we need is a debug level 10 log leading up to this,
and if possible also a network trace of the LDAP traffic.

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20090910/2b7c78c0/attachment.pgp>