samba - Jul 2004 - PANIC: internal error; winbind daemon (3.0.4) crashes

Hello,

I'm using samba 3.0.4, compiled with Kerberos 1.3.1-7, in an W2k3 ADS
environment and Kerberos and the Winbind daemon are used for authentication.
While checking a winbindd.log file I saw the following PANIC internal error:

winbindd.log
========[2004/07/21 12:15:00, 1]
nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist
[2004/07/21 12:15:00, 1] libsmb/clikrb5.c:ads_krb5_mk_req(306)
  krb5_cc_get_principal failed (No credentials cache found)
[2004/07/21 12:15:03, 1] libsmb/clikrb5.c:ads_krb5_mk_req(306)
  krb5_cc_get_principal failed (No credentials cache found)
[2004/07/21 12:16:29, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist
[2004/07/21 12:25:03, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist

[cut]
 
[2004/07/21 22:01:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist
[2004/07/21 22:05:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist
[2004/07/21 22:15:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist
[2004/07/21 22:15:01, 0] lib/fault.c:fault_report(36)
  ==============================================================[2004/07/21
22:15:01, 0] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 1317 (3.0.4)
  Please read the appendix Bugs of the Samba HOWTO collection
[2004/07/21 22:15:01, 0] lib/fault.c:fault_report(39)
  ==============================================================[2004/07/21
22:15:01, 0] lib/util.c:smb_panic2(1398)
  PANIC: internal error
[2004/07/21 22:15:01, 0] lib/util.c:smb_panic2(1406)
  BACKTRACE: 24 stack frames:
   #0 winbindd(smb_panic2+0x128) [0x80c8d58]
   #1 winbindd(smb_panic+0x19) [0x80c8c29]
   #2 winbindd [0x80b6da2]
   #3 /lib/tls/libc.so.6 [0x420275c8]
   #4 winbindd [0x80e9624]
   #5 winbindd [0x80e98f0]
   #6 winbindd(cli_krb5_get_ticket+0x1da) [0x80e9cfa]
   #7 winbindd(spnego_gen_negTokenTarg+0x41) [0x80ea991]
   #8 winbindd [0x816c61f]
   #9 winbindd [0x816c909]
   #10 winbindd(ads_sasl_bind+0x132) [0x816d022]
   #11 winbindd(ads_connect+0x1ac) [0x816798c]
   #12 winbindd(ads_do_search_retry+0xd5) [0x816fc25]
   #13 winbindd(ads_search_retry+0x3f) [0x816fecf]
   #14 winbindd [0x8084ec8]
   #15 winbindd [0x807960c]
   #16 winbindd [0x8070ffe]
   #17 winbindd(winbindd_getgrgid+0x365) [0x8071ef5]
   #18 winbindd(strftime+0x13f3) [0x806e0d3]
   #19 winbindd(winbind_process_packet+0x21) [0x806e3c1]
   #20 winbindd(do_dual_daemon+0x14d) [0x8086a8d]
   #21 winbindd(main+0x468) [0x806f238]
   #22 /lib/tls/libc.so.6(__libc_start_main+0xe4) [0x42015574]
   #23 winbindd(chroot+0x31) [0x806d8f1]
[2004/07/21 22:19:03, 1] libsmb/clikrb5.c:ads_krb5_mk_req(306)
  krb5_cc_get_principal failed (No credentials cache found)
[2004/07/21 22:25:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist
[2004/07/21 22:35:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist 
 
It seems that winbind crashed at the moment that a new kerberos ticket is
needed. At 12:15h a new kerberos ticket was applied and exactly 10 hours
later (at 22:15h) a new ticket must be applied and at that moment winbind
crashed obviously.  After the PANIC message in winbindd.log everything
seemed to work properly and the samba server worked properly until today (7
days later) because it freezed the RHL9 server...
After a reboot Samba worked fine however...

Sometimes I see subjoined messages in the winbindd.log file, it seems that
sometimes winbind can't connect to the ADS server (the ADS server is on a
remote location and the connection is established via a 128 kb/s leased
line).
 
 
[2004/07/19 21:35:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist
[2004/07/19 21:45:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist
[2004/07/19 21:46:24, 0] lib/util_sock.c:write_socket_data(413)
  write_socket_data: write failure. Error = Connection reset by peer
[2004/07/19 21:46:24, 0] lib/util_sock.c:write_socket(438)
  write_socket: Error writing 262 bytes to socket 16: ERRNO = Connection
reset by peer
[2004/07/19 21:46:24, 0] libsmb/clientgen.c:cli_send_smb(155)
  Error writing 262 bytes to client. -1 (Connection reset by peer)
[2004/07/19 21:46:24, 0] rpc_client/cli_pipe.c:rpc_api_pipe(424)
  cli_pipe: return critical error. Error was Write error: Connection reset
by peer
[2004/07/19 21:46:47, 1] libads/ldap.c:ads_connect(222)
  Failed to get ldap server info
[2004/07/19 21:46:58, 1] libsmb/cliconnect.c:cli_start_connection(1408)
  failed negprot
[2004/07/19 21:47:06, 1] lib/util_sock.c:open_socket_out(757)
  timeout connecting to 10.2.20.240:445
[2004/07/19 21:47:15, 1] lib/util_sock.c:open_socket_out(757)
  timeout connecting to 10.2.20.240:139
[2004/07/19 21:47:15, 1] libsmb/cliconnect.c:cli_connect(1297)
  Error connecting to 10.2.20.240 (Operation already in progress)
[2004/07/19 21:47:15, 1] libsmb/cliconnect.c:cli_start_connection(1377)
  cli_full_connection: failed to connect to NHADM01<20> (10.2.20.240)
[2004/07/19 21:47:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(159)
  user 'prisma-fo1$' does not exist
[2004/07/19 21:47:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(159)
  user 'prisma-fo1$' does not exist
[2004/07/19 21:47:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(159)
  user 'prisma-fo1$' does not exist
[2004/07/19 21:47:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(159)
  user 'PRISMA-FO1$' does not exist
[2004/07/19 21:55:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist
[2004/07/19 22:01:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist 

My smb.conf is like this (only global section):

[global]
	workgroup = XXXX
	realm = XXXX.COM
	server string = %h server (Samba %v)
	security = ADS
	password server = adm03.XXX.com, adm01.XXX.com, *
	passwd program = /usr/bin/passwd %u
	passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
	unix password sync = Yes
	log file = /var/log/samba/%m.log
	max log size = 200
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
	add user script = /usr/sbin/useradd -d /dev/null -g 100 -s
/bin/false -M %u
	add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s
/bin/false -M %u
	domain master = No
	dns proxy = No
	idmap uid = 10000-20000
	idmap gid = 10000-20000
	template homedir = /data/hom/%U
	template shell = /bin/bash
	printer admin = root, '@XXXX.COM\Domain Admins',
@XXXX.COM\DEP_ADMIN_GERMANY
	oplocks = No
	level2 oplocks = No 

My krb5.conf file is like this:

[libdefaults]
 dns_fallback = true
 

-- 
Regards, 

Alex de Vaal. 


Visit our Web site: http://www.nh-hotels.com
This message is from NH HOTELES and it is private and confidential.
Its content may be legally protected.Reception by a non-intended person does not
waive legal protection rights.
If you receive this message by mistake, please delete it from your system and
report the sender.
Although this message has been cleared for viruses using currently available
virus definitions before sending,
it is the responsibility of the receiver to ensure it is virus-free.Thank you.