Hi,
Since 1 month, I tried without any success to configure Samba.
My problem is that winbind crashes when I list users and groups. And I
think that it is linked to my trusted domains (wbinfo -domain=myADdomain
-u works well).
The error is the following :
[2006/07/11 14:30:29, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(757)
got principal=machine$@TRUSTEDDOMAIN.COM
[2006/07/11 14:30:29, 10]
libads/kerberos.c:kerberos_kinit_password_ext(88)
kerberos_kinit_password: using MEMORY:cliconnect as ccache
[2006/07/11 14:30:29, 2]
libsmb/cliconnect.c:cli_session_setup_kerberos(546)
Doing kerberos session setup
[2006/07/11 14:30:29, 0] lib/fault.c:fault_report(41)
==============================================================
[2006/07/11 14:30:29, 0] lib/fault.c:fault_report(42)
INTERNAL ERROR: Signal 11 in pid 7396 (3.0.23)
Please read the Trouble-Shooting section of the Samba3-HOWTO
[2006/07/11 14:30:29, 0] lib/fault.c:fault_report(44)
From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2006/07/11 14:30:29, 0] lib/fault.c:fault_report(45)
==============================================================
[2006/07/11 14:30:29, 0] lib/util.c:smb_panic(1592)
PANIC (pid 7396): internal error
[2006/07/11 14:30:29, 0] lib/util.c:log_stack_trace(1699)
BACKTRACE: 23 stack frames:
#0 winbindd(log_stack_trace+0x2d) [0x50081d]
#1 winbindd(smb_panic+0x5d) [0x50094d]
#2 winbindd [0x4ec30a]
#3 [0x297420]
#4 /lib/libc.so.6(memcpy+0x1c) [0x18464c]
#5 /usr/lib/libkrb5.so.3(krb5_copy_principal+0x115) [0xb90ea5]
#6 /usr/lib/libkrb5.so.3(krb5_copy_creds+0x64) [0xb90a04]
#7 /usr/lib/libkrb5.so.3 [0xb86feb]
#8 /usr/lib/libkrb5.so.3(krb5_cc_store_cred+0x20) [0xb87b90]
#9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1c3) [0xb94463]
#10 winbindd(cli_krb5_get_ticket+0x4b9) [0x529ed9]
#11 winbindd(spnego_gen_negTokenTarg+0x62) [0x52aef2]
#12 winbindd(cli_session_setup_spnego+0x6b6) [0x5220b6]
#13 winbindd [0x492d1d]
#14 winbindd(set_dc_type_and_flags+0x9c) [0x49425c]
#15 winbindd [0x481fb8]
#16 winbindd [0x4849ac]
#17 winbindd(winbindd_list_users+0x130) [0x476e90]
#18 winbindd [0x4755d7]
#19 winbindd [0x476ca8]
#20 winbindd(main+0x8e9) [0x476129]
#21 /lib/libc.so.6(__libc_start_main+0xdc) [0x12e724]
#22 winbindd [0x4747b1]
[2006/07/11 14:30:30, 0] lib/fault.c:dump_core(173)
dumping core in /var/log/samba/cores/winbindd
When, winbind is not launched, I get this error :
smbd/sesssetup.c:reply_spnego_kerberos(310)
Username myADdomain\MACHINE$ is invalid on this system
It works well, but operations on clients are very slow. For ex. a copy
hangs 500ms at every file access.
My configuration files are :
* smb.conf
[global]
workgroup = myADdomain
realm = myADdomain.COM
security = ADS
password server = myDC
log level = 2 passdb:2 winbind:10 auth:2
log file = /var/log/samba/log.smbd
max log size = 50000
server signing = auto
printcap name = /etc/printcap
preferred master = No
local master = No
domain master = No
dns proxy = No
wins server = myIPWinsServer
ldap ssl = no
idmap uid = 10000-20000
idmap gid = 10000-20000
template homedir = /home/%U
winbind trusted domains only = Yes
[homes]
comment = Home Directories
read only = No
browseable = No
* krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
[libdefaults]
ticket_lifetime = 24000
clockskew = 300
default_realm = MYADDOMAIN.COM
[realms]
MYADDOMAIN.COM = {
kdc = myDC:88
admin_server = myDC:464
default_domain = MYADDOMAIN.COM
}
[domain_realm]
.mydomain.com = MYDOMAIN.COM
mydomain.com = MYDOMAIN.COM
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
I run samba 3.023 on a Fedora Core 5 server. My AD domain is in a large
forest. My AD domain controller is running Windows 2003 sp1. Other
trusted domains are not in the same subnet. Several questions. Is
winbind needed in my configuration ? How to limit the usage of Samba to
my domain (how to remove trusted domains scans)?
Many tanks in advance,
--Yann
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Heyrendt, Jean-Marc wrote:> > Since 1 month, I tried without any success to > configure Samba. > > My problem is that winbind crashes when I list > users and groups. And I think that it is linked to my > trusted domains (wbinfo -domain=myADdomain -u works > well). > > BACKTRACE: 23 stack frames: > #0 winbindd(log_stack_trace+0x2d) [0x50081d] > #1 winbindd(smb_panic+0x5d) [0x50094d] > #2 winbindd [0x4ec30a] > #3 [0x297420] > #4 /lib/libc.so.6(memcpy+0x1c) [0x18464c] > #5 /usr/lib/libkrb5.so.3(krb5_copy_principal+0x115) [0xb90ea5] > #6 /usr/lib/libkrb5.so.3(krb5_copy_creds+0x64) [0xb90a04] > #7 /usr/lib/libkrb5.so.3 [0xb86feb] > #8 /usr/lib/libkrb5.so.3(krb5_cc_store_cred+0x20) [0xb87b90] > #9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1c3) [0xb94463] > #10 winbindd(cli_krb5_get_ticket+0x4b9) [0x529ed9] > #11 winbindd(spnego_gen_negTokenTarg+0x62) [0x52aef2]> I run samba 3.023 on a Fedora Core 5 server. My AD domain > is in a large forest. My AD domain controller is > running Windows 2003 sp1. Other trusted domains are > not in the same subnet.I've not seen that particular backtrace but its pretty apparent there's have a bug in your krb5 libs. Make sure to get the latest krb5-libs rpm via yum.> Several questions. Is winbind needed in my configuration ?There's no hard and fast rule but in your case I would recommend it.> How to limit the usage of Samba to my domain (how to > remove trusted domains scans)?Read smb.conf(5). You must set 'allow trusted domains = no'. cheers, jerry ====================================================================Samba ------- http://www.samba.org Centeris ----------- http://www.centeris.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFEtN+hIR7qMdg1EfYRAg3cAJ43DbXD6rav8g93Ro+Brx/ltnSeYACg3F91 FsA9FYQbkihoZ4fnK9Q3NSw=FfpN -----END PGP SIGNATURE-----
I am having the exact same problem this morning. I have the latest krb5 libs according to yum krb5-libs-1.4.3-4.1 krb5-workstation-1.4.3-4.1 krb5-devel-1.4.3-4.1 Running FC5 with samba 3.0.23 rpms off samba.org Same panic: [2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218) Not a user account? atype=0x30000000 [2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218) Not a user account? atype=0x30000000 [2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218) Not a user account? atype=0x30000000 [2006/07/12 11:04:21, 0] lib/fault.c:fault_report(41) ==============================================================[2006/07/12 11:04:21, 0] lib/fault.c:fault_report(42) INTERNAL ERROR: Signal 11 in pid 1898 (3.0.23) Please read the Trouble-Shooting section of the Samba3-HOWTO [2006/07/12 11:04:21, 0] lib/fault.c:fault_report(44) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2006/07/12 11:04:21, 0] lib/fault.c:fault_report(45) ==============================================================[2006/07/12 11:04:21, 0] lib/util.c:smb_panic(1592) PANIC (pid 1898): internal error [2006/07/12 11:04:21, 0] lib/util.c:log_stack_trace(1699) BACKTRACE: 22 stack frames: #0 winbindd(log_stack_trace+0x2d) [0x9de81d] #1 winbindd(smb_panic+0x5d) [0x9de94d] #2 winbindd [0x9ca30a] #3 [0x110420] #4 /lib/libc.so.6(__libc_free+0x3e) [0x2023b5] #5 /usr/lib/libkrb5.so.3(krb5_free_principal+0x76) [0x3f8906] #6 /usr/lib/libkrb5.so.3(krb5_free_cred_contents+0x2d) [0x3f9c1d] #7 /usr/lib/libkrb5.so.3(krb5_free_creds+0x29) [0x3f9d09] #8 /usr/lib/libkrb5.so.3(krb5_free_tgt_creds+0x2e) [0x3f9d4e] #9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1dc) [0x3f447c] #10 winbindd(cli_krb5_get_ticket+0x4b9) [0xa07ed9] #11 winbindd(spnego_gen_negTokenTarg+0x62) [0xa08ef2] #12 winbindd(cli_session_setup_spnego+0x6b6) [0xa000b6] #13 winbindd [0x970d1d] #14 winbindd(set_dc_type_and_flags+0x9c) [0x97225c] #15 winbindd(find_domain_from_name+0x48) [0x95d498] #16 winbindd(winbindd_getpwent+0x397) [0x9559a7] #17 winbindd [0x9535d7] #18 winbindd [0x954ca8] #19 winbindd(main+0x8e9) [0x954129] #20 /lib/libc.so.6(__libc_start_main+0xdc) [0x1b0724] #21 winbindd [0x9527b1] [2006/07/12 11:04:22, 0] lib/fault.c:dump_core(173) dumping core in /var/log/samba/cores/winbindd Toan Gerald (Jerry) Carter wrote:> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Heyrendt, Jean-Marc wrote: > > > > Since 1 month, I tried without any success to > > configure Samba. > > > > My problem is that winbind crashes when I list > > users and groups. And I think that it is linked to my > > trusted domains (wbinfo -domain=myADdomain -u works > > well). > > > > BACKTRACE: 23 stack frames: > > #0 winbindd(log_stack_trace+0x2d) [0x50081d] > > #1 winbindd(smb_panic+0x5d) [0x50094d] > > #2 winbindd [0x4ec30a] > > #3 [0x297420] > > #4 /lib/libc.so.6(memcpy+0x1c) [0x18464c] > > #5 /usr/lib/libkrb5.so.3(krb5_copy_principal+0x115) [0xb90ea5] > > #6 /usr/lib/libkrb5.so.3(krb5_copy_creds+0x64) [0xb90a04] > > #7 /usr/lib/libkrb5.so.3 [0xb86feb] > > #8 /usr/lib/libkrb5.so.3(krb5_cc_store_cred+0x20) [0xb87b90] > > #9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1c3) [0xb94463] > > #10 winbindd(cli_krb5_get_ticket+0x4b9) [0x529ed9] > > #11 winbindd(spnego_gen_negTokenTarg+0x62) [0x52aef2] > > > I run samba 3.023 on a Fedora Core 5 server. My AD domain > > is in a large forest. My AD domain controller is > > running Windows 2003 sp1. Other trusted domains are > > not in the same subnet. > > I've not seen that particular backtrace but its pretty apparent > there's have a bug in your krb5 libs. Make sure to get the > latest krb5-libs rpm via yum. > > > Several questions. Is winbind needed in my configuration ? > > There's no hard and fast rule but in your case I would > recommend it. > > > How to limit the usage of Samba to my domain (how to > > remove trusted domains scans)? > > Read smb.conf(5). You must set 'allow trusted domains = no'. > > > > cheers, jerry > ====================================================================> Samba ------- http://www.samba.org > Centeris ----------- http://www.centeris.com > "What man is a man who does not make the world better?" --Balian > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.2 (GNU/Linux) > Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org > > iD8DBQFEtN+hIR7qMdg1EfYRAg3cAJ43DbXD6rav8g93Ro+Brx/ltnSeYACg3F91 > FsA9FYQbkihoZ4fnK9Q3NSw> =FfpN > -----END PGP SIGNATURE----- > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba
I increased the log level and got this from winbindd.log [2006/07/12 13:54:00, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine MYDOMAIN-DC1 pipe \NETLOGON fnum 0x800e bind request returned ok. [2006/07/12 13:54:00, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/07/12 13:54:00, 5] rpc_parse/parse_prs.c:prs_uint8(615) "winbindd.log" 605L, 25945C smb_vwv[12]=59479 (0xE857) smb_vwv[13]=62763 (0xF52B) smb_vwv[14]=50853 (0xC6A5) smb_vwv[15]=11265 (0x2C01) smb_vwv[16]= 1 (0x1) smb_bcc=119 [2006/07/12 13:54:04, 5] nsswitch/winbindd_cm.c:cm_prepare_connection(272) connecting to MY_OTHER_DOMAIN-DC1 from TEST-SERVER with kerberos principal [TEST-SERVER$@MYDOMAIN.COM] [2006/07/12 13:54:04, 3] libsmb/cliconnect.c:cli_session_setup_spnego(723) Doing spnego session setup (blob length=119) [2006/07/12 13:54:04, 3] libsmb/cliconnect.c:cli_session_setup_spnego(748) got OID=1 2 840 48018 1 2 2 [2006/07/12 13:54:04, 3] libsmb/cliconnect.c:cli_session_setup_spnego(748) got OID=1 2 840 113554 1 2 2 [2006/07/12 13:54:04, 3] libsmb/cliconnect.c:cli_session_setup_spnego(748) got OID=1 2 840 113554 1 2 2 3 [2006/07/12 13:54:04, 3] libsmb/cliconnect.c:cli_session_setup_spnego(748) got OID=1 3 6 1 4 1 311 2 2 10 [2006/07/12 13:54:04, 3] libsmb/cliconnect.c:cli_session_setup_spnego(757) got principal=my_other_domain-dc1$@MY_OTHER_DOMAIN.COM [2006/07/12 13:54:04, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(546) Doing kerberos session setup [2006/07/12 13:54:04, 0] lib/fault.c:fault_report(41) ==============================================================[2006/07/12 13:54:04, 0] lib/fault.c:fault_report(42) INTERNAL ERROR: Signal 11 in pid 1963 (3.0.23) Please read the Trouble-Shooting section of the Samba3-HOWTO [2006/07/12 13:54:04, 0] lib/fault.c:fault_report(44) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2006/07/12 13:54:04, 0] lib/fault.c:fault_report(45) I have several different domain so it's trying to query them to get a list of users and faults. Any ideas? Toan -----Original Message----- From: samba-bounces+tngo=midway.com@lists.samba.org [mailto:samba-bounces+tngo=midway.com@lists.samba.org] On Behalf Of Ngo, Toan Sent: Wednesday, July 12, 2006 11:33 AM To: samba@lists.samba.org Subject: [Samba] RE: problem with winbind I am having the exact same problem this morning. I have the latest krb5 libs according to yum krb5-libs-1.4.3-4.1 krb5-workstation-1.4.3-4.1 krb5-devel-1.4.3-4.1 Running FC5 with samba 3.0.23 rpms off samba.org Same panic: [2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218) Not a user account? atype=0x30000000 [2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218) Not a user account? atype=0x30000000 [2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218) Not a user account? atype=0x30000000 [2006/07/12 11:04:21, 0] lib/fault.c:fault_report(41) ==============================================================[2006/07/12 11:04:21, 0] lib/fault.c:fault_report(42) INTERNAL ERROR: Signal 11 in pid 1898 (3.0.23) Please read the Trouble-Shooting section of the Samba3-HOWTO [2006/07/12 11:04:21, 0] lib/fault.c:fault_report(44) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2006/07/12 11:04:21, 0] lib/fault.c:fault_report(45) ==============================================================[2006/07/12 11:04:21, 0] lib/util.c:smb_panic(1592) PANIC (pid 1898): internal error [2006/07/12 11:04:21, 0] lib/util.c:log_stack_trace(1699) BACKTRACE: 22 stack frames: #0 winbindd(log_stack_trace+0x2d) [0x9de81d] #1 winbindd(smb_panic+0x5d) [0x9de94d] #2 winbindd [0x9ca30a] #3 [0x110420] #4 /lib/libc.so.6(__libc_free+0x3e) [0x2023b5] #5 /usr/lib/libkrb5.so.3(krb5_free_principal+0x76) [0x3f8906] #6 /usr/lib/libkrb5.so.3(krb5_free_cred_contents+0x2d) [0x3f9c1d] #7 /usr/lib/libkrb5.so.3(krb5_free_creds+0x29) [0x3f9d09] #8 /usr/lib/libkrb5.so.3(krb5_free_tgt_creds+0x2e) [0x3f9d4e] #9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1dc) [0x3f447c] #10 winbindd(cli_krb5_get_ticket+0x4b9) [0xa07ed9] #11 winbindd(spnego_gen_negTokenTarg+0x62) [0xa08ef2] #12 winbindd(cli_session_setup_spnego+0x6b6) [0xa000b6] #13 winbindd [0x970d1d] #14 winbindd(set_dc_type_and_flags+0x9c) [0x97225c] #15 winbindd(find_domain_from_name+0x48) [0x95d498] #16 winbindd(winbindd_getpwent+0x397) [0x9559a7] #17 winbindd [0x9535d7] #18 winbindd [0x954ca8] #19 winbindd(main+0x8e9) [0x954129] #20 /lib/libc.so.6(__libc_start_main+0xdc) [0x1b0724] #21 winbindd [0x9527b1] [2006/07/12 11:04:22, 0] lib/fault.c:dump_core(173) dumping core in /var/log/samba/cores/winbindd Toan Gerald (Jerry) Carter wrote:> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Heyrendt, Jean-Marc wrote: > > > > Since 1 month, I tried without any success to > > configure Samba. > > > > My problem is that winbind crashes when I list > > users and groups. And I think that it is linked to my > > trusted domains (wbinfo -domain=myADdomain -u works > > well). > > > > BACKTRACE: 23 stack frames: > > #0 winbindd(log_stack_trace+0x2d) [0x50081d] > > #1 winbindd(smb_panic+0x5d) [0x50094d] > > #2 winbindd [0x4ec30a] > > #3 [0x297420] > > #4 /lib/libc.so.6(memcpy+0x1c) [0x18464c] > > #5 /usr/lib/libkrb5.so.3(krb5_copy_principal+0x115) [0xb90ea5] > > #6 /usr/lib/libkrb5.so.3(krb5_copy_creds+0x64) [0xb90a04] > > #7 /usr/lib/libkrb5.so.3 [0xb86feb] > > #8 /usr/lib/libkrb5.so.3(krb5_cc_store_cred+0x20) [0xb87b90] > > #9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1c3) [0xb94463] > > #10 winbindd(cli_krb5_get_ticket+0x4b9) [0x529ed9] > > #11 winbindd(spnego_gen_negTokenTarg+0x62) [0x52aef2] > > > I run samba 3.023 on a Fedora Core 5 server. My AD domain > > is in a large forest. My AD domain controller is > > running Windows 2003 sp1. Other trusted domains are > > not in the same subnet. > > I've not seen that particular backtrace but its pretty apparent > there's have a bug in your krb5 libs. Make sure to get the > latest krb5-libs rpm via yum. > > > Several questions. Is winbind needed in my configuration ? > > There's no hard and fast rule but in your case I would > recommend it. > > > How to limit the usage of Samba to my domain (how to > > remove trusted domains scans)? > > Read smb.conf(5). You must set 'allow trusted domains = no'. > > > > cheers, jerry > ====================================================================> Samba ------- http://www.samba.org > Centeris ----------- http://www.centeris.com > "What man is a man who does not make the world better?" --Balian > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.2 (GNU/Linux) > Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org > > iD8DBQFEtN+hIR7qMdg1EfYRAg3cAJ43DbXD6rav8g93Ro+Brx/ltnSeYACg3F91 > FsA9FYQbkihoZ4fnK9Q3NSw> =FfpN > -----END PGP SIGNATURE----- > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Upgrading krb5 seems to solve the problem. No more errors and wbinfo does not seg fault winbind. krb-1.5.1 Toan -----Original Message----- From: samba-bounces+tngo=midway.com@lists.samba.org [mailto:samba-bounces+tngo=midway.com@lists.samba.org] On Behalf Of Ngo, Toan Sent: Wednesday, July 12, 2006 1:58 PM To: samba@lists.samba.org Subject: RE: [Samba] RE: problem with winbind I increased the log level and got this from winbindd.log [2006/07/12 13:54:00, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine MYDOMAIN-DC1 pipe \NETLOGON fnum 0x800e bind request returned ok. [2006/07/12 13:54:00, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/07/12 13:54:00, 5] rpc_parse/parse_prs.c:prs_uint8(615) "winbindd.log" 605L, 25945C smb_vwv[12]=59479 (0xE857) smb_vwv[13]=62763 (0xF52B) smb_vwv[14]=50853 (0xC6A5) smb_vwv[15]=11265 (0x2C01) smb_vwv[16]= 1 (0x1) smb_bcc=119 [2006/07/12 13:54:04, 5] nsswitch/winbindd_cm.c:cm_prepare_connection(272) connecting to MY_OTHER_DOMAIN-DC1 from TEST-SERVER with kerberos principal [TEST-SERVER$@MYDOMAIN.COM] [2006/07/12 13:54:04, 3] libsmb/cliconnect.c:cli_session_setup_spnego(723) Doing spnego session setup (blob length=119) [2006/07/12 13:54:04, 3] libsmb/cliconnect.c:cli_session_setup_spnego(748) got OID=1 2 840 48018 1 2 2 [2006/07/12 13:54:04, 3] libsmb/cliconnect.c:cli_session_setup_spnego(748) got OID=1 2 840 113554 1 2 2 [2006/07/12 13:54:04, 3] libsmb/cliconnect.c:cli_session_setup_spnego(748) got OID=1 2 840 113554 1 2 2 3 [2006/07/12 13:54:04, 3] libsmb/cliconnect.c:cli_session_setup_spnego(748) got OID=1 3 6 1 4 1 311 2 2 10 [2006/07/12 13:54:04, 3] libsmb/cliconnect.c:cli_session_setup_spnego(757) got principal=my_other_domain-dc1$@MY_OTHER_DOMAIN.COM [2006/07/12 13:54:04, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(546) Doing kerberos session setup [2006/07/12 13:54:04, 0] lib/fault.c:fault_report(41) ==============================================================[2006/07/12 13:54:04, 0] lib/fault.c:fault_report(42) INTERNAL ERROR: Signal 11 in pid 1963 (3.0.23) Please read the Trouble-Shooting section of the Samba3-HOWTO [2006/07/12 13:54:04, 0] lib/fault.c:fault_report(44) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2006/07/12 13:54:04, 0] lib/fault.c:fault_report(45) I have several different domain so it's trying to query them to get a list of users and faults. Any ideas? Toan -----Original Message----- From: samba-bounces+tngo=midway.com@lists.samba.org [mailto:samba-bounces+tngo=midway.com@lists.samba.org] On Behalf Of Ngo, Toan Sent: Wednesday, July 12, 2006 11:33 AM To: samba@lists.samba.org Subject: [Samba] RE: problem with winbind I am having the exact same problem this morning. I have the latest krb5 libs according to yum krb5-libs-1.4.3-4.1 krb5-workstation-1.4.3-4.1 krb5-devel-1.4.3-4.1 Running FC5 with samba 3.0.23 rpms off samba.org Same panic: [2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218) Not a user account? atype=0x30000000 [2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218) Not a user account? atype=0x30000000 [2006/07/12 11:04:17, 1] nsswitch/winbindd_ads.c:query_user_list(218) Not a user account? atype=0x30000000 [2006/07/12 11:04:21, 0] lib/fault.c:fault_report(41) ==============================================================[2006/07/12 11:04:21, 0] lib/fault.c:fault_report(42) INTERNAL ERROR: Signal 11 in pid 1898 (3.0.23) Please read the Trouble-Shooting section of the Samba3-HOWTO [2006/07/12 11:04:21, 0] lib/fault.c:fault_report(44) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2006/07/12 11:04:21, 0] lib/fault.c:fault_report(45) ==============================================================[2006/07/12 11:04:21, 0] lib/util.c:smb_panic(1592) PANIC (pid 1898): internal error [2006/07/12 11:04:21, 0] lib/util.c:log_stack_trace(1699) BACKTRACE: 22 stack frames: #0 winbindd(log_stack_trace+0x2d) [0x9de81d] #1 winbindd(smb_panic+0x5d) [0x9de94d] #2 winbindd [0x9ca30a] #3 [0x110420] #4 /lib/libc.so.6(__libc_free+0x3e) [0x2023b5] #5 /usr/lib/libkrb5.so.3(krb5_free_principal+0x76) [0x3f8906] #6 /usr/lib/libkrb5.so.3(krb5_free_cred_contents+0x2d) [0x3f9c1d] #7 /usr/lib/libkrb5.so.3(krb5_free_creds+0x29) [0x3f9d09] #8 /usr/lib/libkrb5.so.3(krb5_free_tgt_creds+0x2e) [0x3f9d4e] #9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1dc) [0x3f447c] #10 winbindd(cli_krb5_get_ticket+0x4b9) [0xa07ed9] #11 winbindd(spnego_gen_negTokenTarg+0x62) [0xa08ef2] #12 winbindd(cli_session_setup_spnego+0x6b6) [0xa000b6] #13 winbindd [0x970d1d] #14 winbindd(set_dc_type_and_flags+0x9c) [0x97225c] #15 winbindd(find_domain_from_name+0x48) [0x95d498] #16 winbindd(winbindd_getpwent+0x397) [0x9559a7] #17 winbindd [0x9535d7] #18 winbindd [0x954ca8] #19 winbindd(main+0x8e9) [0x954129] #20 /lib/libc.so.6(__libc_start_main+0xdc) [0x1b0724] #21 winbindd [0x9527b1] [2006/07/12 11:04:22, 0] lib/fault.c:dump_core(173) dumping core in /var/log/samba/cores/winbindd Toan Gerald (Jerry) Carter wrote:> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Heyrendt, Jean-Marc wrote: > > > > Since 1 month, I tried without any success to > > configure Samba. > > > > My problem is that winbind crashes when I list > > users and groups. And I think that it is linked to my > > trusted domains (wbinfo -domain=myADdomain -u works > > well). > > > > BACKTRACE: 23 stack frames: > > #0 winbindd(log_stack_trace+0x2d) [0x50081d] > > #1 winbindd(smb_panic+0x5d) [0x50094d] > > #2 winbindd [0x4ec30a] > > #3 [0x297420] > > #4 /lib/libc.so.6(memcpy+0x1c) [0x18464c] > > #5 /usr/lib/libkrb5.so.3(krb5_copy_principal+0x115) [0xb90ea5] > > #6 /usr/lib/libkrb5.so.3(krb5_copy_creds+0x64) [0xb90a04] > > #7 /usr/lib/libkrb5.so.3 [0xb86feb] > > #8 /usr/lib/libkrb5.so.3(krb5_cc_store_cred+0x20) [0xb87b90] > > #9 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1c3) [0xb94463] > > #10 winbindd(cli_krb5_get_ticket+0x4b9) [0x529ed9] > > #11 winbindd(spnego_gen_negTokenTarg+0x62) [0x52aef2] > > > I run samba 3.023 on a Fedora Core 5 server. My AD domain > > is in a large forest. My AD domain controller is > > running Windows 2003 sp1. Other trusted domains are > > not in the same subnet. > > I've not seen that particular backtrace but its pretty apparent > there's have a bug in your krb5 libs. Make sure to get the > latest krb5-libs rpm via yum. > > > Several questions. Is winbind needed in my configuration ? > > There's no hard and fast rule but in your case I would > recommend it. > > > How to limit the usage of Samba to my domain (how to > > remove trusted domains scans)? > > Read smb.conf(5). You must set 'allow trusted domains = no'. > > > > cheers, jerry > ====================================================================> Samba ------- http://www.samba.org > Centeris ----------- http://www.centeris.com > "What man is a man who does not make the world better?" --Balian > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.2 (GNU/Linux) > Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org > > iD8DBQFEtN+hIR7qMdg1EfYRAg3cAJ43DbXD6rav8g93Ro+Brx/ltnSeYACg3F91 > FsA9FYQbkihoZ4fnK9Q3NSw> =FfpN > -----END PGP SIGNATURE----- > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Hello everyone! I have samba-3.0.10-1.4E.6 under CentOS 4.3 and have such a kind of problem with winbind: when i am adding one of the Windows users to group those changes are not visible on Linux box. For example, i've add user 'vic' to group Webmasters under Windows. I wait for 24 hours and after it i've entered command: # id vic uid=10124(vic) gid=10004(Domain Users) groups=10004(Domain Users) but when i've made: # getent group | grep Webmasters Webmasters:x:10047:user1,user2,user3,user4,vic,user5 As we can see user vic and other users are in group Webmasters. #id user5 uid=10068(user5) gid=10004(Domain Users) groups=10004(Domain Users),10047(Webmasters),10048(Power Users) i've reboted my PDC, restarted samba and winbind, but it didn't help me. What is the problem? Nikolay Krasko