Hi Samba team!
I tried with 3.0.22 and now with 2.0.24 and I got the same error.
When I try to connect to my file server using a user from a trusted domain
(DOMAIN2) my winbindd dies:
[2007/02/12 15:14:26, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(328)
[ 0]: getpwnam domain2+asspw
[2007/02/12 15:14:26, 3] libsmb/namequery.c:resolve_lmhosts(962)
resolve_lmhosts: Attempting lmhosts lookup for name
server02.domain2.biz<0x20>
[2007/02/12 15:14:26, 3] libsmb/namequery.c:resolve_wins(859)
resolve_wins: Attempting wins lookup for name server02.domain2.biz<0x20>
[2007/02/12 15:14:26, 3] libsmb/namequery.c:resolve_wins(862)
resolve_wins: WINS server resolution selected and no WINS servers listed.
[2007/02/12 15:14:26, 3] libsmb/namequery.c:resolve_hosts(1025)
resolve_hosts: Attempting host lookup for name
server02.domain2.biz<0x20>
[2007/02/12 15:14:26, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(508)
cm_get_ipc_userpass: Retrieved auth-user from secrets.tdb [DOMAIN1\myuser]
[2007/02/12 15:14:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(722)
Doing spnego session setup (blob length=114)
[2007/02/12 15:14:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(747)
got OID=1 2 840 48018 1 2 2
[2007/02/12 15:14:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(747)
got OID=1 2 840 113554 1 2 2
[2007/02/12 15:14:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(747)
got OID=1 2 840 113554 1 2 2 3
[2007/02/12 15:14:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(747)
got OID=1 3 6 1 4 1 311 2 2 10
[2007/02/12 15:14:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(755)
got principal=server02$@DOMAIN2.BIZ
[2007/02/12 15:14:26, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(546)
Doing kerberos session setup
[2007/02/12 15:14:27, 0] lib/fault.c:fault_report(41)
==============================================================[2007/02/12
15:14:27, 0] lib/fault.c:fault_report(42)
INTERNAL ERROR: Signal 11 in pid 2992 (3.0.24-0.1.49-1172-SUSE-CODE10)
Please read the Trouble-Shooting section of the Samba3-HOWTO
[2007/02/12 15:14:27, 0] lib/fault.c:fault_report(44)
From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2007/02/12 15:14:27, 0] lib/fault.c:fault_report(45)
==============================================================[2007/02/12
15:14:27, 0] lib/util.c:smb_panic(1599)
PANIC (pid 2992): internal error
[2007/02/12 15:14:27, 0] lib/util.c:log_stack_trace(1706)
BACKTRACE: 22 stack frames:
#0 /usr/sbin/winbindd(log_stack_trace+0x2d) [0x800c5c5d]
#1 /usr/sbin/winbindd(smb_panic+0x5d) [0x800c5d8d]
#2 /usr/sbin/winbindd [0x800b1b6a]
#3 [0xffffe420]
#4 /usr/lib/libkrb5.so.3(krb5_free_principal+0x76) [0xb7edee46]
#5 /usr/lib/libkrb5.so.3(krb5_free_cred_contents+0x2d) [0xb7ee015d]
#6 /usr/lib/libkrb5.so.3(krb5_free_creds+0x29) [0xb7ee0249]
#7 /usr/lib/libkrb5.so.3(krb5_free_tgt_creds+0x2e) [0xb7ee028e]
#8 /usr/lib/libkrb5.so.3(krb5_get_credentials+0x1dc) [0xb7edac9c]
#9 /usr/sbin/winbindd(cli_krb5_get_ticket+0x4b9) [0x800ee7e9]
#10 /usr/sbin/winbindd(spnego_gen_negTokenTarg+0x62) [0x800ef802]
#11 /usr/sbin/winbindd(cli_session_setup_spnego+0x6c5) [0x800e7055]
#12 /usr/sbin/winbindd [0x80057cc4]
#13 /usr/sbin/winbindd [0x80057e34]
#14 /usr/sbin/winbindd(init_dc_connection+0x29) [0x80057e89]
#15 /usr/sbin/winbindd(find_domain_from_name+0x4f) [0x8004274f]
#16 /usr/sbin/winbindd(winbindd_getpwnam+0x14e) [0x8003b9ee]
#17 /usr/sbin/winbindd [0x80037ff7]
#18 /usr/sbin/winbindd [0x80039718]
#19 /usr/sbin/winbindd(main+0x94d) [0x80038bad]
#20 /lib/libc.so.6(__libc_start_main+0xdc) [0xb7d2387c]
#21 /usr/sbin/winbindd [0x80037211]
[2007/02/12 15:14:27, 0] lib/fault.c:dump_core(173)
dumping core in /var/log/samba/cores/winbindd
[2007/02/12 15:14:27, 1] smbd/sesssetup.c:reply_spnego_kerberos(310)
Username DOMAIN2+asspw is invalid on this system
My smb.conf:
[global]
workgroup = DOMAIN1
security = ads
realm = DOMAIN1
password server = x.x.x.x,x.x.x.x,x.x.x.x
enable privileges = yes
deadtime = 5
idmap uid = 1000-100000
idmap gid = 1000-100000
winbind cache time = 43200
winbind enum users = no
winbind enum groups = no
allow trusted domains = yes
winbind separator = +
printing = cups
cups options = raw
load printers = yes
show add printer wizard = no
printcap cache time = 0
guest only = yes
lpq cache time = 60
[printers]
comment = All Printers
path = /var/tmp
printable = Yes
create mask = 0600
browseable = No
guest ok = yes
My kerberos files (kinit works fine with both):
# cat /var/lib/samba/smb_krb5/krb5.conf.DOMAIN1
[libdefaults]
default_realm = DOMAIN1.BIZ
[realms]
DOMAIN1.BIZ = {
kdc = x.x.x.x
kdc = x.x.x.x
}
# cat /var/lib/samba/smb_krb5/krb5.conf.DOMAIN2
[libdefaults]
default_realm = DOMAIN2.BIZ
[realms]
DOMAIN2.BIZ = {
kdc = x.x.x.x
kdc = x.x.x.x
}
I'd appreciate any help!
Bruno Gomes Pessanha
