ignace.quaghebeur@jetair.be
2005-Feb-09 11:19 UTC
[Samba] net join ads gives segmentation fault
Hi, We have been working with samba 3.0.4 and MIT 1.3.6 on SUSE SLES 8 (SP3) for some time. We use security=ads and our samba is joined to the W2K3 domain. We use this with winbind to use the authentication from w2k3 instead of local users (telnet, squid, samba and via smbauth also apache). When preparing a new server with suse SLES 9 and heimdal 0.6.1 RC3 (suses package) we started running into trouble. With Samba 3.0.4 everything works, but with samba 3.0.9, 3.0.10, 3.0.11, i can't get the net ads join to work. It keeps on saying : segmentation fault. (i didn't find the courage to check 3.0.5, 3.0.6, 3.0.7 and 3.0.8) runnig with heimdal 0.6.3 gives the same error. Compiling samba 3.0.11 with MIT fails in the clitar.c . The configuration : krb5.conf : [libdefaults] default_realm = MY.DOMAIN # default_tkt_enctypes = DES-CBC-CRC # default_tgs_enctypes = DES-CBC-CRC clockskew = 300 [realms] JETAIR.BE = { kdc = tcp/ads.my.domain kpasswd_server = tcp/ads.my.domain } # MY.REALM = { # kdc = MY.COMPUTER # admin_server = MY.COMPUTER # kpasswd_server = MY.COMPUTER # } # OTHER.REALM = { # kdc = OTHER.COMPUTER # } [domain_realm] # .my.domain = MY.REALM .my.domain = MY.DOMAIN (changed the real domain to my.domain ) The smb.conf looks like : [global] workgroup = MY realm = MY.DOMAIN server string = samba server netbios name = SERVERNAME interfaces = ip adress security = ADS auth methods = winbindd map to guest = Bad User password server = * log level = 3 passdb:5 auth:10 winbind:2 log file = /local/var/samba/logs/log.%m name resolve order = host wins bcast socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY os level = 2 preferred master = No local master = No domain master = No browse list = No wins server = ads ldap ssl = no idmap uid = 10000-20000 idmap gid = 10000-20000 template homedir = /home/rcl_clients template shell = /bin/sh winbind use default domain = Yes map acl inherit = Yes client use spnego = yes encrypt passwords = yes use spnego = yes Anyone has an idea of what is going wrong? The suse packages are also samba 3.0.4. I'm only affraid that someday i won't be able to use my W2K3 domain anymore for authentication..... Q ######################################################################################## Attention: The information contained in this message and or attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any system and destroy any copies. Jetair, its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments, nor responsible for any delay in receipt. This e-mail message has been scanned for viruses. ########################################################################################
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ignace.quaghebeur@jetair.be wrote: | Hi, | We have been working with samba 3.0.4 and MIT 1.3.6 | on SUSE SLES 8 (SP3) for some time. We use | security=ads and our samba is joined to the W2K3 | domain. Try the 3.0.11 SLES8 packages from sernet (see http://download/samba.org/samba/ftp/Binary_Packages/SuSE) | We use this with winbind to use the authentication from | w2k3 instead of local users (telnet, squid, samba and | via smbauth also apache). When preparing a new server | with suse SLES 9 and heimdal 0.6.1 RC3 (suses Unless SuSE has fixed this yet, that that version fo heimdal had a memory corruption bug that caused winbindd to crash. | package) we started running into trouble. With Samba | 3.0.4 everything works, but with samba 3.0.9, 3.0.10, | 3.0.11, i can't get the net ads join to work. It keeps | on saying : segmentation fault. Hmmm...so you did try Heimdal 0.6.3. Can you send me a backtrace. All of my boxes are SuSE 9.2 Prof and I'm not seeing | (i didn't find the courage to check 3.0.5, 3.0.6, 3.0.7 | and 3.0.8) runnig with heimdal 0.6.3 gives the same error. | Compiling samba 3.0.11 with MIT fails in the clitar.c . Ahh...this must be the HAVE_REGEX_H bug. I don't use MIT so no wonder I couldn't find any references to the #define. Must have been imported from the MIT headers. For now, I would recommend the Sernet SLES8 rpms. They are statically linked against the current heimdal libs. cheers, jerry ====================================================================Alleviating the pain of Windows(tm) ------- http://www.samba.org GnuPG Key ----- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCCgD6IR7qMdg1EfYRAqvWAKC6ZqQXxjdhT4nwvEPAfXkfgelYuACgyTq4 1g6rc24gKcndfC32Bf9rYKU=g9vr -----END PGP SIGNATURE-----