here's the tail end of the -d 10 log.host. It seems to not like the
encryption type. Which should I be using, and where should I change it?
-dave
[2003/08/22 09:45:29, 3] smbd/process.c:switch_message(685)
switch message SMBsesssetupX (pid 6310)
[2003/08/22 09:45:29, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/08/22 09:45:29, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2003/08/22 09:45:29, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2003/08/22 09:45:29, 5] smbd/uid.c:change_to_root_user(218)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2003/08/22 09:45:29, 3] smbd/sesssetup.c:reply_sesssetup_and_X(577)
wct=12 flg2=0xc801
[2003/08/22 09:45:29, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(474)
Doing spnego session setup
[2003/08/22 09:45:29, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(498)
NativeOS=[Unix] NativeLanMan=[Samba]
[2003/08/22 09:45:29, 3] smbd/sesssetup.c:reply_spnego_negotiate(383)
Got OID 1 2 840 48018 1 2 2
[2003/08/22 09:45:29, 3] smbd/sesssetup.c:reply_spnego_negotiate(383)
Got OID 1 3 6 1 4 1 311 2 2 10
[2003/08/22 09:45:29, 3] smbd/sesssetup.c:reply_spnego_negotiate(386)
Got secblob of size 1155
[2003/08/22 09:45:29, 10] passdb/secrets.c:secrets_named_mutex(697)
secrets_named_mutex: got mutex for replay cache mutex
[2003/08/22 09:45:29, 10] libads/kerberos_verify.c:ads_verify_ticket(175)
ads_verify_ticket: enc type [16] failed to decrypt with error Bad
encryption type
[2003/08/22 09:45:29, 3] libads/kerberos_verify.c:ads_verify_ticket(175)
ads_verify_ticket: enc type [3] failed to decrypt with error Decrypt
integrity check failed
[2003/08/22 09:45:29, 10] libads/kerberos_verify.c:ads_verify_ticket(175)
ads_verify_ticket: enc type [1] failed to decrypt with error Bad
encryption type
[2003/08/22 09:45:29, 10] passdb/secrets.c:secrets_named_mutex_release(709)
secrets_named_mutex: released mutex for replay cache mutex
[2003/08/22 09:45:29, 3] libads/kerberos_verify.c:ads_verify_ticket(182)
ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type)
[2003/08/22 09:45:29, 0] lib/fault.c:fault_report(36)
==============================================================[2003/08/22
09:45:29, 0] lib/fault.c:fault_report(37)
INTERNAL ERROR: Signal 11 in pid 6310 (3.0.0rc1)
Please read the appendix Bugs of the Samba HOWTO collection
[2003/08/22 09:45:29, 0] lib/fault.c:fault_report(39)
==============================================================[2003/08/22
09:45:29, 0] lib/util.c:smb_panic(1462)
PANIC: internal error
[2003/08/22 09:45:29, 0] lib/util.c:smb_panic(1469)
BACKTRACE: 15 stack frames:
#0 ../sbin/smbd(smb_panic+0xfc) [0x817f320]
#1 ../sbin/smbd [0x8170c4f]
#2 /lib/tls/libc.so.6 [0x420276f8]
#3 ../sbin/smbd(ads_verify_ticket+0x23e) [0x81c910a]
#4 ../sbin/smbd [0x809dba5]
#5 ../sbin/smbd [0x809e3c0]
#6 ../sbin/smbd [0x809e6d5]
#7 ../sbin/smbd(reply_sesssetup_and_X+0xa18) [0x809f1cc]
#8 ../sbin/smbd [0x80b8579]
#9 ../sbin/smbd [0x80b86d9]
#10 ../sbin/smbd(process_smb+0x76) [0x80b889e]
#11 ../sbin/smbd(smbd_process+0x198) [0x80b93ac]
#12 ../sbin/smbd(main+0x416) [0x81d2a7a]
#13 /lib/tls/libc.so.6(__libc_start_main+0xe4) [0x420156a4]
#14 ../sbin/smbd(chroot+0x31) [0x8075cdd]
Gerald (Jerry) Carter
2003-Aug-22 17:28 UTC
[Samba] more problems with rc1 + ADS: smbd sigsegv
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, 22 Aug 2003, david williams wrote:> here's the tail end of the -d 10 log.host. It seems to not like the > encryption type. Which should I be using, and where should I change it?Are you using Hemdal? There were some reports of problems with Heimdal.> [2003/08/22 09:45:29, 3] libads/kerberos_verify.c:ads_verify_ticket(182) > ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type)> [2003/08/22 09:45:29, 0] lib/fault.c:fault_report(36) > ==============================================================> [2003/08/22 09:45:29, 0] lib/fault.c:fault_report(37) > INTERNAL ERROR: Signal 11 in pid 6310 (3.0.0rc1) > Please read the appendix Bugs of the Samba HOWTO collection > [2003/08/22 09:45:29, 0] lib/fault.c:fault_report(39) > ==============================================================> [2003/08/22 09:45:29, 0] lib/util.c:smb_panic(1462) > PANIC: internal error > [2003/08/22 09:45:29, 0] lib/util.c:smb_panic(1469) > BACKTRACE: 15 stack frames: > #0 ../sbin/smbd(smb_panic+0xfc) [0x817f320] > #1 ../sbin/smbd [0x8170c4f] > #2 /lib/tls/libc.so.6 [0x420276f8] > #3 ../sbin/smbd(ads_verify_ticket+0x23e) [0x81c910a]This should happen obviously. Mind opening a bugzilla ticket for us? (https://bugzilla.samba.org/). Thanks. cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE/RlKsIR7qMdg1EfYRAoj1AKDHBxEWdkCI0WSFA1VX/ncKgDwC0wCZASwX 0+vYkjy+Cm2pxJe7jNBINWQ=GU1r -----END PGP SIGNATURE-----
I don't think so. The admin passwords been changed. I turned Client and server signing off, it didn't make a difference. Gerald (Jerry) Carter wrote:> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Fri, 22 Aug 2003, david williams wrote: > > >>nope, it's mit 1.2.7 from the redhat rpm. > > > Does this apply to you? (from the WHATSNEW) > > > 2) Inclusion of new 'security = ads' option for integration > with an Active Directory domain using the native Windows > Kerberos 5 and LDAP protocols. > > MIT kerberos 1.3.1 supports the ARCFOUR-HMAC-MD5 encryption > type which is neccessary for servers on which the > administrator password has not been changed, or kerberos-enabled > SMB connections to servers that require Kerberos SMB signing. > Besides this one difference, either MIT or Heimdal Kerberos > distributions are usable by Samba 3.0. > > > > > cheers, jerry > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.0 (GNU/Linux) > Comment: For info see http://quantumlab.net/pine_privacy_guard/ > > iD8DBQE/RlqaIR7qMdg1EfYRAh3UAKDJGl+vLs8nWmVe8bqUhzQU8r+ujQCg1UOk > 2xoNtcS6HLIxHe8pJQjzeAE> =kwO/ > -----END PGP SIGNATURE----- >
On Fri, Aug 22, 2003 at 09:57:40AM -0700, david williams wrote:> here's the tail end of the -d 10 log.host. It seems to not like the > encryption type. Which should I be using, and where should I change it?Can you please recompile with -g so we can get the symbols from the stack backtrace. That will tell us exactly where it's dying. Thanks, Jeremy.