samba - Mar 2006 - nsswitch segfaults with Samba 3.0.21 on Solaris 9

I've built Samba 3.0.21 with Kerb ADS, NSS, Winbind and PAM support  on
Solaris 9 using gcc 3.3.2.

  I'm able to compile and install and authentication works fine - I can
query and authenticate with AD, but when I su, passwd or some other local
auth Solaris command the command segfaults. This even happens if a valid
user is in any of the databases previous in the search pattern to winbind.


[root@smb01:/export/build/smb321/lib]#  su - bob
Segmentation Fault


nsswitch.conf:
passwd:     files winbind ldap
group:      files winbind ldap

-rwxr-xr-x   1 root     other      87004 Dec 16 13:38
/usr/lib/libnss_winbind.so
lrwxrwxrwx   1 root     other         26 Nov 30 15:46 libnss_winbind.so.1 ->
/usr/lib/libnss_winbind.so
lrwxrwxrwx   1 root     other         26 Nov 30 15:46 libnss_winbind.so.2 ->
/usr/lib/libnss_winbind.so
lrwxrwxrwx   1 root     other         26 Nov 30 15:46 nss_winbind.so.1 ->
/usr/lib/libnss_winbind.so
lrwxrwxrwx   1 root     other         26 Nov 30 15:46 nss_winbind.so.2 ->
/usr/lib/libnss_winbind.so


I tried to get clever with nsswitch, and still got the same errors. :

#passwd:     files ldap winbind [NOTFOUND=return]
#passwd:     files ldap [SUCCESS=return] winbind
#group:      files ldap [SUCCESS=return] winbind

Compiling with the --enable-developer and --enable-debug options, the
compiler complains about calling malloc directly on solaris during nsswitch
then fails.  This is gcc 3.3.2 on Solaris 9.

Here are the configure flags:

./configure CPPFLAGS="-I/export/build/ldap/include -I/usr/local/include
-I/usr/local/BerkeleyDB.4.2/include -I/usr/local/ssl/include
-I/export/build/krb5/include"
LD_LIBRARY_PATH="-L/export/build/ldap/lib
-L/usr/local/lib -L/usr/local/BerkeleyDB.4.2/lib -L/usr/local/ssl/lib
-L/export/build/krb5/lib" LDFLAGS="-L/export/build/ldap/lib
-L/usr/local/lib
-L/usr/local/BerkeleyDB.4.2/lib -L/usr/local/ssl/lib
-L/export/build/krb5/lib -R/export/build/ldap/lib -R/usr/local/lib
-R/usr/local/BerkeleyDB.4.2/lib -R/usr/local/ssl/lib
-R/export/build/krb5/lib" --prefix=/export/build/smb321 --enable-debug
CC=gcc --with-ads --enable-debug --with-winbind --enable-developer

And here's the warning.

Compiling nsswitch/winbind_nss_solaris.c with -fPIC
In file included from include/includes.h:454,
                 from nsswitch/winbind_nss_solaris.c:33:
/export/build/krb5/include/krb5.h:2860: warning: function declaration isn't
a prototype
/export/build/krb5/include/krb5.h:2911: warning: function declaration isn't
a prototype
/export/build/krb5/include/krb5.h:2990: warning: function declaration isn't
a prototype
/export/build/krb5/include/krb5.h:3021: warning: function declaration isn't
a prototype
/export/build/krb5/include/krb5.h:3056: warning: function declaration isn't
a prototype
nsswitch/winbind_nss_solaris.c: In function `_nss_winbind_passwd_constr':
nsswitch/winbind_nss_solaris.c:186: error:
`__ERROR_DONT_USE_MALLOC_DIRECTLY' undeclared (first use in this function)
nsswitch/winbind_nss_solaris.c:186: error: (Each undeclared identifier is
reported only once
nsswitch/winbind_nss_solaris.c:186: error: for each function it appears in.)
nsswitch/winbind_nss_solaris.c: In function
`_nss_winbind_getgroupsbymember_solwrap':
nsswitch/winbind_nss_solaris.c:286: warning: implicit declaration of
function `_nss_winbind_initgroups_dyn'
nsswitch/winbind_nss_solaris.c: In function `_nss_winbind_group_constr':
nsswitch/winbind_nss_solaris.c:330: error:
`__ERROR_DONT_USE_MALLOC_DIRECTLY' undeclared (first use in this function)
nsswitch/winbind_nss_solaris.c: In function `parse_response':
nsswitch/winbind_nss_solaris.c:442: warning: cast increases required
alignment of target type
nsswitch/winbind_nss_solaris.c: In function `_nss_winbind_common_constr':
nsswitch/winbind_nss_solaris.c:581: error:
`__ERROR_DONT_USE_MALLOC_DIRECTLY' undeclared (first use in this function)
nsswitch/winbind_nss_solaris.c: At top level:
nsswitch/winbind_nss_solaris.c:608: warning: function declaration isn't a
prototype
nsswitch/winbind_nss_solaris.c:625: warning: function declaration isn't a
prototype
make: *** [nsswitch/winbind_nss_solaris.po] Error 1