Sébastien STOLZ
2006-Nov-01 21:35 UTC
[Samba] Samba 3.0.23c + Win2K AD, can't mount shares (PANIC: internal error)
Hi, I've got a big problem since my new samba servers are in 3.0.23c version, no problems before. The server is only a file server and domain member in a Win2K Active Directory domain (4 replicated DC, 1 domain, no forest). My problem: Anytime I try to connect a share through any kind of client (MacOS cifs client, smbclient, windows win2K pro, ...) the client can't mount the share and I've got this in my user log on the samba server : [2006/10/31 13:04:00, 0] auth/ auth_util.c:create_builtin_administrators(785) create_builtin_administrators: Failed to create Administrators [2006/10/31 13:04:00, 0] auth/auth_util.c:create_builtin_users(751) create_builtin_users: Failed to create Users [2006/10/31 13:04:00, 0] lib/fault.c:fault_report(41) ==============================================================[2006/10/31 13:04:00, 0] lib/fault.c:fault_report(42) INTERNAL ERROR: Signal 11 in pid 9402 (3.0.23c-2) Please read the Trouble-Shooting section of the Samba3-HOWTO [2006/10/31 13:04:00, 0] lib/fault.c:fault_report(44) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2006/10/31 13:04:00, 0] lib/fault.c:fault_report(45) ==============================================================[2006/10/31 13:04:00, 0] lib/util.c:smb_panic(1614) PANIC (pid 9402): internal error [2006/10/31 13:04:00, 0] lib/util.c:log_stack_trace(1721) BACKTRACE: 20 stack frames: #0 smbd(log_stack_trace+0x1c) [0x5555557586cc] #1 smbd(smb_panic+0x43) [0x5555557587b3] #2 smbd [0x555555746b82] #3 /lib64/libpthread.so.0 [0x2aaaac259de0] #4 /lib64/libc.so.6(strlen+0x30) [0x2aaaad3c9510] #5 /lib64/libc.so.6(__strdup+0x16) [0x2aaaad3c9246] #6 /lib64/libnsl.so.1(nis_list+0x563) [0x2aaaacf3efa3] #7 /lib64/libnss_nisplus.so.2(_nss_nisplus_setnetgrent+0x8a) [0x2aaaaf380e2a] #8 /lib64/libc.so.6(innetgr+0xcf) [0x2aaaad43dfff] #9 smbd(user_in_netgroup+0x6a) [0x5555555c679a] #10 smbd(token_contains_name_in_list+0x205) [0x5555555c8d05] #11 smbd(change_to_user+0x476) [0x555555601c56] #12 smbd [0x55555561c8eb] #13 smbd(make_connection+0x168) [0x55555561d8d8] #14 smbd(reply_tcon_and_X+0x1fe) [0x5555555e95fe] #15 smbd [0x5555556195d2] #16 smbd(smbd_process+0x720) [0x55555561a5e0] #17 smbd(main+0xa0b) [0x5555557ed24b] #18 /lib64/libc.so.6(__libc_start_main+0xf4) [0x2aaaad371a44] #19 smbd [0x5555555b2409] [2006/10/31 13:04:00, 0] lib/fault.c:dump_core(173) dumping core in /var/log/samba/cores/smbd Nothing strange in the other log files except this message in the .log file : [2006/10/31 13:03:46, 0] auth/ auth_util.c:create_builtin_administrators(785) create_builtin_administrators: Failed to create Administrators [2006/10/31 13:03:46, 0] auth/auth_util.c:create_builtin_users(751) create_builtin_users: Failed to create Users With a smbclient 3.0.23c-1.fc5 I've got this message : Domain=[myworkgroup] OS=[Unix] Server=[Samba 3.0.23c-2] tree connect failed: Call returned zero bytes (EOF) My configuration: Testted on Linux FC6 or FC5, x86_64 or i386 On the server: kinit OK klist OK net ads join -> OK net ads testjoin -> OK wbinfo --domain-users -> OK getent passwd -> OK wbinfo --domain-groups -> OK getent group -> OK net groupmap list -> empty DNS entries (direct & reverse) -> OK hosts file only make localhost declaration fixed IP server SMB.conf: [global] netbios name = NAME server string = comment workgroup = myworkgroup realm = my.realm.com security = ADS local master = no lanman auth = no admin users = @"myworkgroup\Admins du domaine" restrict anonymous = yes load printers = no log file = /var/log/samba/%U.log max log size = 2048 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = yes name resolve order = host deadtime = 20 template shell = /bin/bash template homedir = /home/%U idmap uid = 10000-500000 idmap gid = 10000-500000 idmap backend = rid:"myworkgroup=10000-500000" allow trusted domains = no winbind enum users = yes winbind enum groups = yes winbind nested groups = yes winbind use default domain = yes unix charset = UTF-8 dos charset = CP850 display charset = UTF-8 getwd cache = yes [homes] comment = Repertoire personnel writable = yes browseable = no read only = no create mask = 0700 directory mask = 0700 force user = %U force group = "Utilisa. du domaine" [test] comment = test path = /tmp browseable = no writable = yes read only = no I tried to add/change these parameters and still got the same error: auth methods = winbind algorithmic rid base = 9000 username map = /etc/samba/smbusers idmap uid = 9000-500000 idmap gid = 9000-500000 idmap backend = rid:"BUILTIN=9000-9999,myworkgroup=10000-500000" nsswitch.conf file: passwd: files winbind group: files winbind krb5.conf file: [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] ticket_lifetime = 24000 default_realm = MY.REALM.COM dns_lookup_realm = false dns_lookup_kdc = true [realms] MY.REALM.COM = { default_domain = my.realm.com } [domain_realm] .my.realm.com = MY.REALM.COM my.realm.com = MY.REALM.COM [kdc] profile = /var/kerberos/krb5kdc/kdc.conf [appdefaults] pam = { debug = false ticket_lifetime = 36000 renew_lifetime = 36000 forwardable = true krb4_convert = false } testparm: Load smb config files from /etc/samba/smb.conf Processing section "[homes]" Processing section "[test]" Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Sounds like the groupmap change "problem" in 3.0.23 but I can't find anything on the web that can help me solving that problem. I'm not even sure that my problem come from the groupmap changes in the 3.0.23 samba version. Best regards, Sebastien.