samba - Oct 2006 - Subject: Samba 3.0.23c + Win2K AD, can't mount shares (PANIC: internal error)

Hi,

I've got a big problem since my new samba servers are in 3.0.23c  
version, no problems before.
The server is only a file server and domain member in a Win2K Active  
Directory domain (4 replicated DC, 1 domain, no forest).

My problem:

Anytime I try to connect a share through any kind of client (MacOS  
cifs client, smbclient, windows win2K pro, ...) the client can't  
mount the share and I've got this in my user log on the samba server :

[2006/10/31 13:04:00, 0] auth/ 
auth_util.c:create_builtin_administrators(785)
   create_builtin_administrators: Failed to create Administrators
[2006/10/31 13:04:00, 0] auth/auth_util.c:create_builtin_users(751)
   create_builtin_users: Failed to create Users
[2006/10/31 13:04:00, 0] lib/fault.c:fault_report(41)
   ==============================================================[2006/10/31
13:04:00, 0] lib/fault.c:fault_report(42)
   INTERNAL ERROR: Signal 11 in pid 9402 (3.0.23c-2)
   Please read the Trouble-Shooting section of the Samba3-HOWTO
[2006/10/31 13:04:00, 0] lib/fault.c:fault_report(44)
   From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2006/10/31 13:04:00, 0] lib/fault.c:fault_report(45)
   ==============================================================[2006/10/31
13:04:00, 0] lib/util.c:smb_panic(1614)
   PANIC (pid 9402): internal error
[2006/10/31 13:04:00, 0] lib/util.c:log_stack_trace(1721)
   BACKTRACE: 20 stack frames:
    #0 smbd(log_stack_trace+0x1c) [0x5555557586cc]
    #1 smbd(smb_panic+0x43) [0x5555557587b3]
    #2 smbd [0x555555746b82]
    #3 /lib64/libpthread.so.0 [0x2aaaac259de0]
    #4 /lib64/libc.so.6(strlen+0x30) [0x2aaaad3c9510]
    #5 /lib64/libc.so.6(__strdup+0x16) [0x2aaaad3c9246]
    #6 /lib64/libnsl.so.1(nis_list+0x563) [0x2aaaacf3efa3]
    #7 /lib64/libnss_nisplus.so.2(_nss_nisplus_setnetgrent+0x8a)  
[0x2aaaaf380e2a]
    #8 /lib64/libc.so.6(innetgr+0xcf) [0x2aaaad43dfff]
    #9 smbd(user_in_netgroup+0x6a) [0x5555555c679a]
    #10 smbd(token_contains_name_in_list+0x205) [0x5555555c8d05]
    #11 smbd(change_to_user+0x476) [0x555555601c56]
    #12 smbd [0x55555561c8eb]
    #13 smbd(make_connection+0x168) [0x55555561d8d8]
    #14 smbd(reply_tcon_and_X+0x1fe) [0x5555555e95fe]
    #15 smbd [0x5555556195d2]
    #16 smbd(smbd_process+0x720) [0x55555561a5e0]
    #17 smbd(main+0xa0b) [0x5555557ed24b]
    #18 /lib64/libc.so.6(__libc_start_main+0xf4) [0x2aaaad371a44]
    #19 smbd [0x5555555b2409]
[2006/10/31 13:04:00, 0] lib/fault.c:dump_core(173)
   dumping core in /var/log/samba/cores/smbd

Nothing strange in the other log files except this message in  
the .log file :

[2006/10/31 13:03:46, 0] auth/ 
auth_util.c:create_builtin_administrators(785)
   create_builtin_administrators: Failed to create Administrators
[2006/10/31 13:03:46, 0] auth/auth_util.c:create_builtin_users(751)
   create_builtin_users: Failed to create Users

With a smbclient 3.0.23c-1.fc5 I've got this message :
Domain=[myworkgroup] OS=[Unix] Server=[Samba 3.0.23c-2]
tree connect failed: Call returned zero bytes (EOF)

My configuration:

Testted on Linux FC6 or FC5, x86_64 or i386

On the server:
kinit OK
klist OK
net ads join -> OK
net ads testjoin -> OK
wbinfo --domain-users -> OK
getent passwd -> OK
wbinfo --domain-groups -> OK
getent group -> OK
net groupmap list -> empty
DNS entries (direct & reverse) -> OK
hosts file only make localhost declaration
fixed IP server

SMB.conf:

[global]

    netbios name = NAME
    server string = comment

    workgroup    = myworkgroup
    realm        = my.realm.com
    security     = ADS
    local master = no
    lanman auth  = no

    admin users        = @"myworkgroup\Admins du domaine"
    restrict anonymous = yes

    load printers = no

    log file     = /var/log/samba/%U.log
    max log size = 2048

    socket options     = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
    dns proxy          = yes
    name resolve order = host
    deadtime           = 20

    template shell        = /bin/bash
    template homedir      = /home/%U
    idmap uid             = 10000-500000
    idmap gid             = 10000-500000
    idmap backend         = rid:"myworkgroup=10000-500000"
    allow trusted domains = no

    winbind enum users            = yes
    winbind enum groups           = yes
    winbind nested groups         = yes
    winbind use default domain    = yes

    unix charset    = UTF-8
    dos charset     = CP850
    display charset = UTF-8

    getwd cache     = yes

[homes]
comment          = Repertoire personnel
writable         = yes
browseable       = no
read only        = no
create mask      = 0700
directory mask   = 0700
force user       = %U
force group      = "Utilisa. du domaine"

[test]
comment = test
path = /tmp
browseable = no
writable = yes
read only = no

I tried to add/change these parameters and still got the same error:

    auth methods = winbind
    algorithmic rid base = 9000
    username map = /etc/samba/smbusers
    idmap uid             = 9000-500000
    idmap gid             = 9000-500000
    idmap backend         =  
rid:"BUILTIN=9000-9999,myworkgroup=10000-500000"

nsswitch.conf file:

passwd:     files winbind
group:      files winbind

krb5.conf file:

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
ticket_lifetime = 24000
default_realm = MY.REALM.COM
dns_lookup_realm = false
dns_lookup_kdc = true

[realms]
MY.REALM.COM = {
   default_domain = my.realm.com
}

[domain_realm]
.my.realm.com = MY.REALM.COM
my.realm.com = MY.REALM.COM

[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
pam = {
    debug = false
    ticket_lifetime = 36000
    renew_lifetime = 36000
    forwardable = true
    krb4_convert = false
}

testparm:

Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[test]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER

Sounds like the groupmap change "problem" in 3.0.23 but I can't
find
anything on the web that can help me solving that problem.
I'm not even sure that my problem come from the groupmap changes in  
the 3.0.23 samba version.

Best regards,

Sebastien.