Hello, I'm trying to add a user to big list of Samba groups, 74 groups to be precise. The problem is that when the user reaches around 65 to 70 groups, it starts giving errors in User Manager for Domains, and causes a panic in Samba. Is there a limit for how many groups a user may belong? I'm using Samba-3.0.10 with openldap. This is what I get in the logs. [2005/02/07 13:22:42, 0] lib/util.c:smb_panic2(1482) PANIC: internal error [2005/02/07 13:22:42, 0] lib/util.c:smb_panic2(1490) BACKTRACE: 28 stack frames: #0 smbd(smb_panic2+0x111) [0x81d8c01] #1 smbd(smb_panic+0x1a) [0x81d8aea] #2 smbd [0x81c6558] #3 /lib/tls/libc.so.6 [0x2aef48] #4 /lib/tls/libc.so.6(__libc_free+0x8b) [0x2ea72b] #5 /lib/tls/libc.so.6(initgroups+0x16f) [0x30bbdf] #6 smbd [0x8242cb4] #7 smbd(sys_getgrouplist+0x54) [0x8242e84] #8 smbd(getgroups_user+0x71) [0x8243001] #9 smbd(get_domain_user_groups+0x47) [0x8151967] #10 smbd(_samr_query_usergroups+0x18b) [0x814531b] #11 smbd [0x813d1f0] #12 smbd(api_rpcTNP+0x16c) [0x815611c] #13 smbd(api_pipe_request+0xba) [0x8155eca] #14 smbd [0x814f9d8] #15 smbd [0x814fd4f] #16 smbd [0x814ff44] #17 smbd [0x81501a3] #18 smbd(write_to_pipe+0xfb) [0x81500eb] #19 smbd [0x808c3ea] #20 smbd(reply_trans+0x54e) [0x808cdfe] #21 smbd [0x80d1ab6] #22 smbd [0x80d1d40] #23 smbd(process_smb+0x8c) [0x80d1f4c] #24 smbd(smbd_process+0x168) [0x80d2c88] #25 smbd(main+0x4ea) [0x824d08a] #26 /lib/tls/libc.so.6(__libc_start_main+0xe4) [0x29cad4] #27 smbd [0x8078961] Best regards, Bruno Guerreiro
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bruno Guerreiro wrote: | Hello, | I'm trying to add a user to big list of Samba groups, | 74 groups to be precise. | The problem is that when the user reaches around 65 to | 70 groups, it starts giving errors in User Manager | for Domains, and causes a panic in Samba. | Is there a limit for how many groups a user may belong? | I'm using Samba-3.0.10 with openldap. | | This is what I get in the logs. | | [2005/02/07 13:22:42, 0] lib/util.c:smb_panic2(1482) | PANIC: internal error .... Can you try to reproduce this against 3.0.11? Thanks. cheers, jerry ====================================================================Alleviating the pain of Windows(tm) ------- http://www.samba.org GnuPG Key ----- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCCkB2IR7qMdg1EfYRAgZ1AJ9r4KY0qSng98lyWEaZn3UoE89oJACeLQJc 2Jm6Yjy7/ZCE45SfGmdOP60=WtzL -----END PGP SIGNATURE-----
Hi Gerald, Sorry for the late answer, but only know i've got the oppportunity to test it... The problem still exists. [2005/02/18 10:37:16, 0] lib/util.c:smb_panic2(1495) PANIC: internal error [2005/02/18 10:37:16, 0] lib/util.c:smb_panic2(1503) BACKTRACE: 28 stack frames: #0 smbd(smb_panic2+0x111) [0x81de2d1] #1 smbd(smb_panic+0x1a) [0x81de1ba] #2 smbd [0x81cb9b8] #3 /lib/tls/libc.so.6 [0x2aef48] #4 /lib/tls/libc.so.6 [0x2e8e6a] #5 /lib/tls/libc.so.6(malloc+0x8d) [0x2e825d] #6 smbd(pdb_default_enum_group_memberships+0x4b) [0x81c2adb] #7 smbd [0x81b8272] #8 smbd [0x81ad464] #9 smbd(pdb_enum_group_memberships+0x4e) [0x81aec0e] #10 smbd(_samr_query_usergroups+0x1ed) [0x8149f5d] #11 smbd [0x8141b90] #12 smbd(api_rpcTNP+0x16c) [0x815a8fc] #13 smbd(api_pipe_request+0xba) [0x815a6aa] #14 smbd [0x8155038] #15 smbd [0x81553af] #16 smbd [0x81555a4] #17 smbd [0x8155803] #18 smbd(write_to_pipe+0xfb) [0x815574b] #19 smbd [0x808ce17] #20 smbd(reply_trans+0x57c) [0x808d82c] #21 smbd [0x80d47c6] #22 smbd [0x80d4a50] #23 smbd(process_smb+0x8c) [0x80d4c5c] #24 smbd(smbd_process+0x168) [0x80d59a8] #25 smbd(main+0x505) [0x8254c15] #26 /lib/tls/libc.so.6(__libc_start_main+0xe4) [0x29cad4] #27 smbd [0x8079291] In addition, this messages started do appear in the logs. [2005/02/18 10:37:17, 3] lib/smbldap.c:smbldap_connect_system(866) ldap_connect_system: succesful connection to the LDAP server ldap_connect_system: LDAP server does not support paged results Any ideas? Wrong LDAP Server configuration? Best regards, Bruno Guerreiro -----Original Message----- From: Gerald (Jerry) Carter [mailto:jerry@samba.org] Sent: quarta-feira, 9 de Fevereiro de 2005 16:55 To: Bruno Guerreiro Cc: samba@lists.samba.org Subject: Re: [Samba] Limit user groups -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bruno Guerreiro wrote: | Hello, | I'm trying to add a user to big list of Samba groups, | 74 groups to be precise. | The problem is that when the user reaches around 65 to | 70 groups, it starts giving errors in User Manager | for Domains, and causes a panic in Samba. | Is there a limit for how many groups a user may belong? | I'm using Samba-3.0.10 with openldap. | | This is what I get in the logs. | | [2005/02/07 13:22:42, 0] lib/util.c:smb_panic2(1482) | PANIC: internal error .... Can you try to reproduce this against 3.0.11? Thanks. cheers, jerry ====================================================================Alleviating the pain of Windows(tm) ------- http://www.samba.org GnuPG Key ----- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCCkB2IR7qMdg1EfYRAgZ1AJ9r4KY0qSng98lyWEaZn3UoE89oJACeLQJc 2Jm6Yjy7/ZCE45SfGmdOP60=WtzL -----END PGP SIGNATURE-----
Jerry, I'll be going on parental leave for the next two weeks (Vacations!!! YES!!! :-) ), so if no new samba-many-groups-fixed-version is released, I'll enable debug, ok? A little bit OT, is there anyway to enable pagged search on OpenLDAP-2.1.29-1? Best Regards, Bruno Guerreiro -----Original Message----- From: Gerald (Jerry) Carter [mailto:jerry@samba.org] Sent: sexta-feira, 18 de Fevereiro de 2005 14:23 To: Bruno Guerreiro Cc: samba@lists.samba.org Subject: Re: [Samba] Limit user groups -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bruno Guerreiro wrote: | Hi Gerald, | Sorry for the late answer, but only know i've | got the oppportunity to test it... | The problem still exists. | | [2005/02/18 10:37:16, 0] lib/util.c:smb_panic2(1495) | PANIC: internal error | [2005/02/18 10:37:16, 0] lib/util.c:smb_panic2(1503) | BACKTRACE: 28 stack frames: Can you include --enable-debug in the options to ./configure and try again? This should give us a better stack trace to work with. Thanks. | In addition, this messages started do appear in the logs. | | [2005/02/18 10:37:17, 3] lib/smbldap.c:smbldap_connect_system(866) | ldap_connect_system: succesful connection to the LDAP server | ldap_connect_system: LDAP server does not support paged results Pretty much emans what is says. The server doesn't support the page search result LDAP control. So we can't use it to enumerate large search results. cheers,jerry ====================================================================Alleviating the pain of Windows(tm) ------- http://www.samba.org GnuPG Key ----- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCFfoyIR7qMdg1EfYRAs4bAKC3/9zeO8QTntKjbVE8/f0jrU3zkQCggvah sqDbRe1USp+19O0/HLJJ5pg=IxTb -----END PGP SIGNATURE-----