samba - May 2008 - Samba Upgrade to 3.0.25b leads to core dumps with winbind and ldap idmap

I have recently upgraded a Samba server running on a Red Hat Enterprise 4 (32
bit) server.  The version of samba upgraded to is 3.0.25b.  I noticed that a new
index had to be added to my ldap (openldap) server for the sambaSID attribute. 
So I added the index line to slapd.conf as follows:

Index sambaSID eq,sub

Afterwards I ran slapindex to recreate the indices in the openldap database. 
Everything seems to be working fine.  However, I now see a large number of Samba
core dumps in my /var/log/samba/winbindd-idmap.log file.  Here is a sample from
the log:

[2008/05/14 12:43:37, 0] lib/fault.c:fault_report(41)
  ==============================================================[2008/05/14
12:43:37, 0] lib/fault.c:fault_report(42)
  INTERNAL ERROR: Signal 6 in pid 4839 (3.0.25b-1.el4_6.4)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2008/05/14 12:43:37, 0] lib/fault.c:fault_report(44)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2008/05/14 12:43:37, 0] lib/fault.c:fault_report(45)
  ==============================================================[2008/05/14
12:43:37, 0] lib/util.c:smb_panic(1654)
  PANIC (pid 4839): internal error
[2008/05/14 12:43:37, 0] lib/util.c:log_stack_trace(1758)
  BACKTRACE: 22 stack frames:
   #0 winbindd(log_stack_trace+0x2d) [0x3d67b9]
   #1 winbindd(smb_panic+0x56) [0x3d68c0]
   #2 winbindd [0x3c2db5]
   #3 /lib/tls/libc.so.6 [0x59b908]
   #4 /lib/tls/libc.so.6(abort+0xe9) [0x59d279]
   #5 /lib/tls/libc.so.6(__assert_fail+0x101) [0x594d91]
   #6 /usr/lib/libldap-2.2.so.7(ldap_next_entry+0x6b) [0xfb8c2b]
   #7 winbindd [0x4fab15]
   #8 winbindd(idmap_unixids_to_sids+0x5e4) [0x4f3c87]
   #9 winbindd(idmap_uid_to_sid+0x6e) [0x4f714e]
   #10 winbindd(winbindd_dual_uid2sid+0x50) [0x37a896]
   #11 winbindd [0x37535d]
   #12 winbindd [0x376509]
   #13 winbindd(winbindd_sid2gid_async+0xcc) [0x37794c]
   #14 winbindd [0x362fa4]
   #15 winbindd [0x377f1b]
   #16 winbindd [0x376457]
   #17 winbindd [0x375e07]
   #18 winbindd [0x348bac]
   #19 winbindd(main+0x778) [0x34a044]
   #20 /lib/tls/libc.so.6(__libc_start_main+0xd3) [0x588de3]
   #21 winbindd [0x348661]
[2008/05/14 12:43:37, 0] lib/fault.c:dump_core(181)
  dumping core in /var/log/samba/cores/winbindd
[2008/05/14 12:43:37, 2] lib/smbldap.c:smbldap_open_connection(786)
  smbldap_open_connection: connection opened
winbindd: ../../../libraries/libldap/getentry.c:48: ldap_next_entry: Assertion
`entry != ((void *)0)' failed.

And here is the /var/log/openldap.log file output from the same time as the core
dump.

May 14 12:43:37 s10 slapd[4091]: conn=40 op=284 SRCH
base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0
filter="(&(objectClass=sambaIdmapEntry)(uidNumber=10020))"
May 14 12:43:37 s10 slapd[4091]: conn=40 op=284 SRCH attr=sambaSID uidNumber
gidNumber objectClass
May 14 12:43:37 s10 slapd[4091]: conn=40 op=284 SEARCH RESULT tag=101 err=0
nentries=2 textMay 14 12:43:37 s10 slapd[4091]: conn=40 fd=11 closed
May 14 12:43:37 s10 slapd[4091]: conn=41 op=7 UNBIND
May 14 12:43:37 s10 slapd[4091]: conn=41 fd=15 closed
May 14 12:43:37 s10 slapd[4091]: conn=42 fd=11 ACCEPT from IP=192.168.10.8:32899
(IP=0.0.0.0:389)
May 14 12:43:37 s10 slapd[4091]: conn=42 op=0 BIND
dn="cn=Manager,dc=rbrooks,dc=com" method=128
May 14 12:43:37 s10 slapd[4091]: conn=42 op=0 BIND
dn="cn=Manager,dc=rbrooks,dc=com" mech=SIMPLE ssf=0
May 14 12:43:37 s10 slapd[4091]: conn=42 op=0 RESULT tag=97 err=0 textMay 14
12:43:37 s10 slapd[4091]: conn=42 op=1 SRCH base="" scope=0 deref=0
filter="(objectClass=*)"
May 14 12:43:37 s10 slapd[4091]: conn=42 op=1 SRCH attr=supportedControl
May 14 12:43:37 s10 slapd[4091]: conn=42 op=1 SEARCH RESULT tag=101 err=0
nentries=1 textMay 14 12:43:37 s10 slapd[4091]: conn=42 op=2 SRCH
base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0
filter="(&(objectClass=sambaIdmapEntry)(uidNumber=10020))"
May 14 12:43:37 s10 slapd[4091]: conn=42 op=2 SRCH attr=sambaSID uidNumber
gidNumber objectClass
May 14 12:43:37 s10 slapd[4091]: conn=42 op=2 SEARCH RESULT tag=101 err=0
nentries=2 textMay 14 12:43:37 s10 slapd[4091]: conn=42 fd=11 closed
May 14 12:43:37 s10 slapd[4091]: conn=43 fd=11 ACCEPT from IP=192.168.10.8:32901
(IP=0.0.0.0:389)
May 14 12:43:37 s10 slapd[4091]: conn=43 op=0 BIND
dn="cn=Manager,dc=rbrooks,dc=com" method=128
May 14 12:43:37 s10 slapd[4091]: conn=43 op=0 BIND
dn="cn=Manager,dc=rbrooks,dc=com" mech=SIMPLE ssf=0
May 14 12:43:37 s10 slapd[4091]: conn=43 op=0 RESULT tag=97 err=0 textMay 14
12:43:37 s10 slapd[4091]: connection_input: conn=43 deferring operation: binding
May 14 12:43:37 s10 slapd[4091]: conn=43 op=1 SRCH base="" scope=0
deref=0 filter="(objectClass=*)"
May 14 12:43:37 s10 slapd[4091]: conn=43 op=1 SRCH attr=supportedControl
May 14 12:43:37 s10 slapd[4091]: conn=43 op=1 SEARCH RESULT tag=101 err=0
nentries=1 textMay 14 12:43:37 s10 slapd[4091]: conn=43 op=2 SRCH
base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0
filter="(&(objectClass=sambaIdmapEntry)(uidNumber=10020))"
May 14 12:43:37 s10 slapd[4091]: conn=43 op=2 SRCH attr=sambaSID uidNumber
gidNumber objectClass
May 14 12:43:37 s10 slapd[4091]: conn=43 op=2 SEARCH RESULT tag=101 err=0
nentries=2 textMay 14 12:43:37 s10 slapd[4091]: conn=43 fd=11 closed
May 14 12:43:37 s10 slapd[4091]: conn=44 fd=11 ACCEPT from IP=192.168.10.8:32902
(IP=0.0.0.0:389)
May 14 12:43:37 s10 slapd[4091]: conn=44 op=0 BIND
dn="cn=Manager,dc=rbrooks,dc=com" method=128
May 14 12:43:37 s10 slapd[4091]: conn=44 op=0 BIND
dn="cn=Manager,dc=rbrooks,dc=com" mech=SIMPLE ssf=0
May 14 12:43:37 s10 slapd[4091]: conn=44 op=0 RESULT tag=97 err=0 textMay 14
12:43:37 s10 slapd[4091]: connection_input: conn=44 deferring operation: binding
May 14 12:43:37 s10 slapd[4091]: conn=44 op=1 SRCH base="" scope=0
deref=0 filter="(objectClass=*)"
May 14 12:43:37 s10 slapd[4091]: conn=44 op=1 SRCH attr=supportedControl
May 14 12:43:37 s10 slapd[4091]: conn=44 op=1 SEARCH RESULT tag=101 err=0
nentries=1 textMay 14 12:43:37 s10 slapd[4091]: conn=44 op=2 SRCH
base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0
filter="(&(objectClass=sambaIdmapEntry)(uidNumber=10020))"
May 14 12:43:37 s10 slapd[4091]: conn=44 op=2 SRCH attr=sambaSID uidNumber
gidNumber objectClass
May 14 12:43:37 s10 slapd[4091]: conn=44 op=2 SEARCH RESULT tag=101 err=0
nentries=2 textMay 14 12:43:37 s10 slapd[4091]: conn=44 fd=11 closed
May 14 12:43:37 s10 slapd[4091]: conn=45 fd=11 ACCEPT from IP=192.168.10.8:32903
(IP=0.0.0.0:389)
May 14 12:43:37 s10 slapd[4091]: conn=45 op=0 BIND
dn="cn=Manager,dc=rbrooks,dc=com" method=128
May 14 12:43:37 s10 slapd[4091]: conn=45 op=0 BIND
dn="cn=Manager,dc=rbrooks,dc=com" mech=SIMPLE ssf=0
May 14 12:43:37 s10 slapd[4091]: conn=45 op=0 RESULT tag=97 err=0 textMay 14
12:43:37 s10 slapd[4091]: conn=45 op=1 SRCH base="" scope=0 deref=0
filter="(objectClass=*)"
May 14 12:43:37 s10 slapd[4091]: conn=45 op=1 SRCH attr=supportedControl
May 14 12:43:37 s10 slapd[4091]: conn=45 op=1 SEARCH RESULT tag=101 err=0
nentries=1 textMay 14 12:43:37 s10 slapd[4091]: conn=45 op=2 SRCH
base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0
filter="(&(objectClass=sambaIdmapEntry)(sambaSID=s-1-0-0))"
May 14 12:43:37 s10 slapd[4091]: conn=45 op=2 SRCH attr=sambaSID uidNumber
gidNumber objectClass
May 14 12:43:37 s10 slapd[4091]: conn=45 op=2 SEARCH RESULT tag=101 err=0
nentries=1 textMay 14 12:43:37 s10 slapd[4091]: conn=45 op=3 SRCH
base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0
filter="(&(objectClass=sambaIdmapEntry)(uidNumber=10020))"
May 14 12:43:37 s10 slapd[4091]: conn=45 op=3 SRCH attr=sambaSID uidNumber
gidNumber objectClass
May 14 12:43:37 s10 slapd[4091]: conn=45 op=3 SEARCH RESULT tag=101 err=0
nentries=2 textMay 14 12:43:38 s10 slapd[4091]: conn=45 fd=11 closed
May 14 12:43:38 s10 slapd[4091]: conn=46 fd=11 ACCEPT from IP=192.168.10.8:32904
(IP=0.0.0.0:389)
May 14 12:43:38 s10 slapd[4091]: conn=46 op=0 BIND
dn="cn=Manager,dc=rbrooks,dc=com" method=128
May 14 12:43:38 s10 slapd[4091]: conn=46 op=0 BIND
dn="cn=Manager,dc=rbrooks,dc=com" mech=SIMPLE ssf=0
May 14 12:43:38 s10 slapd[4091]: conn=46 op=0 RESULT tag=97 err=0 textMay 14
12:43:38 s10 slapd[4091]: connection_input: conn=46 deferring operation: binding
May 14 12:43:38 s10 slapd[4091]: conn=46 op=1 SRCH base="" scope=0
deref=0 filter="(objectClass=*)"
May 14 12:43:38 s10 slapd[4091]: conn=46 op=1 SRCH attr=supportedControl
May 14 12:43:38 s10 slapd[4091]: conn=46 op=1 SEARCH RESULT tag=101 err=0
nentries=1 textMay 14 12:43:38 s10 slapd[4091]: conn=46 op=2 SRCH
base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0
filter="(&(objectClass=sambaIdmapEntry)(uidNumber=10020))"
May 14 12:43:38 s10 slapd[4091]: conn=46 op=2 SRCH attr=sambaSID uidNumber
gidNumber objectClass
May 14 12:43:38 s10 slapd[4091]: conn=46 op=2 SEARCH RESULT tag=101 err=0
nentries=2 textMay 14 12:43:38 s10 slapd[4091]: conn=46 fd=11 closed


On a daily basis this Samba system is freezing.  Either I can log in to the
system and have to perform a restart or the system is non-responsive and a hard
reboot has to be performed.  Either way, all services on the system become
unavailable.

I looked into the ldap idmap backend by using an LDAP client on my local
computer and browsing the LDAP tree.  If I do a search for a specific uidNumber,
the results returned are 2 nodes.  Each node represents a SID from our windows
domain servers.  Why do I have 2 SID's for each UID?  Is this normal?  Could
this be what is causing the problems?

Any help would be appreciated.

Thanks,
Chippy


***********************************
CONFIDENTIALITY NOTICE
***********************************
All information contained in this message or in any attachment to it is the
CONFIDENTIAL AND PROPRIETARY information of R.Brooks Associates, Inc. and is
intended only for restricted use by the individual to whom it is addressed.  If
you are not the intended recipient you may not use, disclose, distribute, copy,
print or rely on this e-mail.  If you have received this information by mistake,
please notify the sender immediately by reply e-mail and delete this e-mail from
your system.  The e-mail address of the sender may not be used, copied, sold,
disclosed or incorporated into any database or mailing list.

Thank you.