samba - Aug 2003 - more problems with rc1 + ADS: smbd sigsegv

here's the tail end of the -d 10 log.host.  It seems to not like the 
encryption type.  Which should I be using, and where should I change it?

-dave


[2003/08/22 09:45:29, 3] smbd/process.c:switch_message(685)
   switch message SMBsesssetupX (pid 6310)
[2003/08/22 09:45:29, 3] smbd/sec_ctx.c:set_sec_ctx(288)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/08/22 09:45:29, 5] auth/auth_util.c:debug_nt_user_token(486)
   NT user token: (NULL)
[2003/08/22 09:45:29, 5] auth/auth_util.c:debug_unix_user_token(505)
   UNIX token of user 0
   Primary group is 0 and contains 0 supplementary groups
[2003/08/22 09:45:29, 5] smbd/uid.c:change_to_root_user(218)
   change_to_root_user: now uid=(0,0) gid=(0,0)
[2003/08/22 09:45:29, 3] smbd/sesssetup.c:reply_sesssetup_and_X(577)
   wct=12 flg2=0xc801
[2003/08/22 09:45:29, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(474)
   Doing spnego session setup
[2003/08/22 09:45:29, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(498)
   NativeOS=[Unix] NativeLanMan=[Samba]
[2003/08/22 09:45:29, 3] smbd/sesssetup.c:reply_spnego_negotiate(383)
   Got OID 1 2 840 48018 1 2 2
[2003/08/22 09:45:29, 3] smbd/sesssetup.c:reply_spnego_negotiate(383)
   Got OID 1 3 6 1 4 1 311 2 2 10
[2003/08/22 09:45:29, 3] smbd/sesssetup.c:reply_spnego_negotiate(386)
   Got secblob of size 1155
[2003/08/22 09:45:29, 10] passdb/secrets.c:secrets_named_mutex(697)
   secrets_named_mutex: got mutex for replay cache mutex
[2003/08/22 09:45:29, 10] libads/kerberos_verify.c:ads_verify_ticket(175)
   ads_verify_ticket: enc type [16] failed to decrypt with error Bad 
encryption type
[2003/08/22 09:45:29, 3] libads/kerberos_verify.c:ads_verify_ticket(175)
   ads_verify_ticket: enc type [3] failed to decrypt with error Decrypt 
integrity check failed
[2003/08/22 09:45:29, 10] libads/kerberos_verify.c:ads_verify_ticket(175)
   ads_verify_ticket: enc type [1] failed to decrypt with error Bad 
encryption type
[2003/08/22 09:45:29, 10] passdb/secrets.c:secrets_named_mutex_release(709)
   secrets_named_mutex: released mutex for replay cache mutex
[2003/08/22 09:45:29, 3] libads/kerberos_verify.c:ads_verify_ticket(182)
   ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type)
[2003/08/22 09:45:29, 0] lib/fault.c:fault_report(36)
   ==============================================================[2003/08/22
09:45:29, 0] lib/fault.c:fault_report(37)
   INTERNAL ERROR: Signal 11 in pid 6310 (3.0.0rc1)
   Please read the appendix Bugs of the Samba HOWTO collection
[2003/08/22 09:45:29, 0] lib/fault.c:fault_report(39)
   ==============================================================[2003/08/22
09:45:29, 0] lib/util.c:smb_panic(1462)
   PANIC: internal error
[2003/08/22 09:45:29, 0] lib/util.c:smb_panic(1469)
   BACKTRACE: 15 stack frames:
    #0 ../sbin/smbd(smb_panic+0xfc) [0x817f320]
    #1 ../sbin/smbd [0x8170c4f]
    #2 /lib/tls/libc.so.6 [0x420276f8]
    #3 ../sbin/smbd(ads_verify_ticket+0x23e) [0x81c910a]
    #4 ../sbin/smbd [0x809dba5]
    #5 ../sbin/smbd [0x809e3c0]
    #6 ../sbin/smbd [0x809e6d5]
    #7 ../sbin/smbd(reply_sesssetup_and_X+0xa18) [0x809f1cc]
    #8 ../sbin/smbd [0x80b8579]
    #9 ../sbin/smbd [0x80b86d9]
    #10 ../sbin/smbd(process_smb+0x76) [0x80b889e]
    #11 ../sbin/smbd(smbd_process+0x198) [0x80b93ac]
    #12 ../sbin/smbd(main+0x416) [0x81d2a7a]
    #13 /lib/tls/libc.so.6(__libc_start_main+0xe4) [0x420156a4]
    #14 ../sbin/smbd(chroot+0x31) [0x8075cdd]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 22 Aug 2003, david williams wrote:
> here's the tail end of the -d 10 log.host.  It seems to not like the 
> encryption type.  Which should I be using, and where should I change it?
Are you using Hemdal?  There were some reports of problems with Heimdal.
> [2003/08/22 09:45:29, 3] libads/kerberos_verify.c:ads_verify_ticket(182)
>    ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type)

> [2003/08/22 09:45:29, 0] lib/fault.c:fault_report(36)
>    ==============================================================>
[2003/08/22 09:45:29, 0] lib/fault.c:fault_report(37)
>    INTERNAL ERROR: Signal 11 in pid 6310 (3.0.0rc1)
>    Please read the appendix Bugs of the Samba HOWTO collection
> [2003/08/22 09:45:29, 0] lib/fault.c:fault_report(39)
>    ==============================================================>
[2003/08/22 09:45:29, 0] lib/util.c:smb_panic(1462)
>    PANIC: internal error
> [2003/08/22 09:45:29, 0] lib/util.c:smb_panic(1469)
>    BACKTRACE: 15 stack frames:
>     #0 ../sbin/smbd(smb_panic+0xfc) [0x817f320]
>     #1 ../sbin/smbd [0x8170c4f]
>     #2 /lib/tls/libc.so.6 [0x420276f8]
>     #3 ../sbin/smbd(ads_verify_ticket+0x23e) [0x81c910a]
This should happen obviously.  Mind opening a bugzilla ticket for us?
(https://bugzilla.samba.org/).  Thanks.





cheers, jerry

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE/RlKsIR7qMdg1EfYRAoj1AKDHBxEWdkCI0WSFA1VX/ncKgDwC0wCZASwX
0+vYkjy+Cm2pxJe7jNBINWQ=GU1r
-----END PGP SIGNATURE-----

I don't think so.  The admin passwords been changed.  I turned Client 
and server signing off, it didn't make a difference.

Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Fri, 22 Aug 2003, david williams wrote:
> 
> 
>>nope, it's mit 1.2.7 from the redhat rpm.
> 
> 
> Does this apply to you?  (from the WHATSNEW)
> 
> 
>   2) Inclusion of new 'security = ads' option for integration
>      with an Active Directory domain using the native Windows
>      Kerberos 5 and LDAP protocols.
> 
>      MIT kerberos 1.3.1 supports the ARCFOUR-HMAC-MD5 encryption
>      type which is neccessary for servers on which the
>      administrator password has not been changed, or kerberos-enabled
>      SMB connections to servers that require Kerberos SMB signing.
>      Besides this one difference, either MIT or Heimdal Kerberos
>      distributions are usable by Samba 3.0.
> 
> 
> 
> 
> cheers, jerry
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.0 (GNU/Linux)
> Comment: For info see http://quantumlab.net/pine_privacy_guard/
> 
> iD8DBQE/RlqaIR7qMdg1EfYRAh3UAKDJGl+vLs8nWmVe8bqUhzQU8r+ujQCg1UOk
> 2xoNtcS6HLIxHe8pJQjzeAE> =kwO/
> -----END PGP SIGNATURE-----
>

On Fri, Aug 22, 2003 at 09:57:40AM -0700, david williams
wrote:
> here's the tail end of the -d 10 log.host.  It seems to not like the 
> encryption type.  Which should I be using, and where should I change it?
Can you please recompile with -g so we can get the symbols from
the stack backtrace. That will tell us exactly where it's dying.

Thanks,

	Jeremy.