mourik jan c heupink
2015-Oct-26 19:50 UTC
[Samba] self compiled samba domain member, jessie, pam config
Hi Rowland,
Thanks for the very quick reply. :-)
On the page you reference
(https://wiki.samba.org/index.php/Libnss_winbind_links) it says:
# smbd -B | grep LIBDIR
LIBDIR: /usr/local/samba/lib/
On my install, I need to use lower case b. Capitol doesn't work. Perhaps
the wiki needs to be updated?
Anyway: I created the symlinks, ldconfig, all seemed to work. Your
recipe for pam-auth-update also seems to work, I could enable winbind
authentication in pam-auth-update.
And just for the record: kinit / klist both work, I can browse to my
4.3.1 samba server from windows: \\servername and \\1.2.3.4,
smbd/nmbd/winbindd are all three running.
However...logging on using ssh doesn't work, in syslog I
get:> Oct 26 20:43:34 meet winbindd[906]: [2015/10/26 20:43:34.110597, 0]
../lib/util/fault.c:78(fault_report)
> Oct 26 20:43:34 meet winbindd[906]:
==============================================================> Oct 26
20:43:34 meet winbindd[906]: [2015/10/26 20:43:34.110635, 0]
../lib/util/fault.c:79(fault_report)
> Oct 26 20:43:34 meet winbindd[906]: INTERNAL ERROR: Signal 11 in pid 906
(4.3.1)
> Oct 26 20:43:34 meet winbindd[906]: Please read the Trouble-Shooting
section of the Samba HOWTO
> Oct 26 20:43:34 meet winbindd[906]: [2015/10/26 20:43:34.110653, 0]
../lib/util/fault.c:81(fault_report)
> Oct 26 20:43:34 meet winbindd[906]:
==============================================================> Oct 26
20:43:34 meet winbindd[906]: [2015/10/26 20:43:34.110664, 0]
../source3/lib/util.c:789(smb_panic_s3)
> Oct 26 20:43:34 meet winbindd[906]: PANIC (pid 906): internal error
> Oct 26 20:43:34 meet winbindd[906]: [2015/10/26 20:43:34.111075, 0]
../source3/lib/util.c:900(log_stack_trace)
> Oct 26 20:43:34 meet winbindd[906]: BACKTRACE: 35 stack frames:
> Oct 26 20:43:34 meet winbindd[906]: #0
/usr/local/samba/lib/libsmbconf.so.0(log_stack_trace+0x1f) [0x7f290628b61f]
> Oct 26 20:43:34 meet winbindd[906]: #1
/usr/local/samba/lib/libsmbconf.so.0(smb_panic_s3+0x6f) [0x7f290628b46a]
> Oct 26 20:43:34 meet winbindd[906]: #2
/usr/local/samba/lib/libsamba-util.so.0(smb_panic+0x28) [0x7f2909e83a16]
> Oct 26 20:43:34 meet winbindd[906]: #3
/usr/local/samba/lib/libsamba-util.so.0(+0x236ee) [0x7f2909e836ee]
> Oct 26 20:43:34 meet winbindd[906]: #4
/usr/local/samba/lib/libsamba-util.so.0(+0x23703) [0x7f2909e83703]
> Oct 26 20:43:34 meet winbindd[906]: #5
/lib/x86_64-linux-gnu/libpthread.so.0(+0xf8d0) [0x7f290ba3e8d0]
> Oct 26 20:43:34 meet winbindd[906]: #6
/usr/local/samba/lib/private/libkrb5-samba4.so.26(krb5_storage_free+0x10)
[0x7f2908273ccc]
> Oct 26 20:43:34 meet winbindd[906]: #7
/usr/local/samba/lib/private/libkrb5-samba4.so.26(+0x47708) [0x7f2908259708]
> Oct 26 20:43:34 meet winbindd[906]: #8
/usr/local/samba/lib/private/libkrb5-samba4.so.26(krb5_kt_end_seq_get+0x68)
[0x7f2908257c87]
> Oct 26 20:43:34 meet winbindd[906]: #9
/usr/local/samba/lib/private/libgse-samba4.so(+0x98cf) [0x7f29049878cf]
> Oct 26 20:43:34 meet winbindd[906]: #10
/usr/local/samba/lib/private/libgse-samba4.so(gse_krb5_get_server_keytab+0x18d)
[0x7f2904987ccb]
> Oct 26 20:43:34 meet winbindd[906]: #11
/usr/local/samba/lib/private/libgse-samba4.so(+0xa781) [0x7f2904988781]
> Oct 26 20:43:34 meet winbindd[906]: #12
/usr/local/samba/lib/private/libgse-samba4.so(+0xafe5) [0x7f2904988fe5]
> Oct 26 20:43:34 meet winbindd[906]: #13
/usr/local/samba/lib/libgensec.so.0(gensec_start_mech+0x27e) [0x7f2904bc599f]
> Oct 26 20:43:34 meet winbindd[906]: #14
/usr/local/samba/lib/libgensec.so.0(gensec_start_mech_by_oid+0x11a)
[0x7f2904bc5d91]
> Oct 26 20:43:34 meet winbindd[906]: #15
winbindd(kerberos_return_pac+0x7fb) [0x7f290be945d8]
> Oct 26 20:43:34 meet winbindd[906]: #16 winbindd(+0x4e738)
[0x7f290bebd738]
> Oct 26 20:43:34 meet winbindd[906]: #17 winbindd(+0x501d4)
[0x7f290bebf1d4]
> Oct 26 20:43:34 meet winbindd[906]: #18
winbindd(winbindd_dual_pam_auth+0x394) [0x7f290bec072c]
> Oct 26 20:43:34 meet winbindd[906]: #19 winbindd(+0x6dd0a)
[0x7f290bedcd0a]
> Oct 26 20:43:34 meet winbindd[906]: #20 winbindd(+0x706f8)
[0x7f290bedf6f8]
> Oct 26 20:43:34 meet winbindd[906]: #21
/usr/local/samba/lib/private/libtevent.so.0(+0xcebd) [0x7f29093d7ebd]
> Oct 26 20:43:34 meet winbindd[906]: #22
/usr/local/samba/lib/private/libtevent.so.0(+0xd4da) [0x7f29093d84da]
> Oct 26 20:43:34 meet winbindd[906]: #23
/usr/local/samba/lib/private/libtevent.so.0(+0xa3c6) [0x7f29093d53c6]
> Oct 26 20:43:34 meet winbindd[906]: #24
/usr/local/samba/lib/private/libtevent.so.0(_tevent_loop_once+0xf4)
[0x7f29093cf589]
> Oct 26 20:43:34 meet winbindd[906]: #25 winbindd(+0x71243)
[0x7f290bee0243]
> Oct 26 20:43:34 meet winbindd[906]: #26 winbindd(+0x6ccf8)
[0x7f290bedbcf8]
> Oct 26 20:43:34 meet winbindd[906]: #27
/usr/local/samba/lib/private/libtevent.so.0(+0x57c0) [0x7f29093d07c0]
> Oct 26 20:43:34 meet winbindd[906]: #28
/usr/local/samba/lib/private/libtevent.so.0(tevent_common_loop_immediate+0x1f5)
[0x7f29093d0442]
> Oct 26 20:43:34 meet winbindd[906]: #29
/usr/local/samba/lib/private/libtevent.so.0(+0xd440) [0x7f29093d8440]
> Oct 26 20:43:34 meet winbindd[906]: #30
/usr/local/samba/lib/private/libtevent.so.0(+0xa3c6) [0x7f29093d53c6]
> Oct 26 20:43:34 meet winbindd[906]: #31
/usr/local/samba/lib/private/libtevent.so.0(_tevent_loop_once+0xf4)
[0x7f29093cf589]
> Oct 26 20:43:34 meet winbindd[906]: #32 winbindd(main+0xd18)
[0x7f290bea8862]
> Oct 26 20:43:34 meet winbindd[906]: #33
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f2903100b45]
> Oct 26 20:43:34 meet winbindd[906]: #34 winbindd(+0x24ae9)
[0x7f290be93ae9]
> Oct 26 20:43:34 meet winbindd[906]: [2015/10/26 20:43:34.113711, 0]
../source3/lib/dumpcore.c:313(dump_core)
> Oct 26 20:43:34 meet winbindd[906]: unable to change to
/usr/local/samba/var/cores/winbindd
> Oct 26 20:43:34 meet winbindd[906]: refusing to dump core
(the above log appears after I press <enter> after the password prompt)
I could only find this rather old bugreport, that seems to be irrelevant
now: https://bugzilla.samba.org/show_bug.cgi?id=11081
(note: unable to change to /usr/local/samba/var/cores/winbindd, however
the directory exists...)
Ideas?
Rowland Penny
2015-Oct-26 20:03 UTC
[Samba] self compiled samba domain member, jessie, pam config
On 26/10/15 19:50, mourik jan c heupink wrote:> Hi Rowland, > > Thanks for the very quick reply. :-) > > On the page you reference > (https://wiki.samba.org/index.php/Libnss_winbind_links) it says: > > # smbd -B | grep LIBDIR > LIBDIR: /usr/local/samba/lib/ > > On my install, I need to use lower case b. Capitol doesn't work. > Perhaps the wiki needs to be updated?Updated, thanks for the heads-up :-)> > Anyway: I created the symlinks, ldconfig, all seemed to work. Your > recipe for pam-auth-update also seems to work, I could enable winbind > authentication in pam-auth-update.Ah, it is not mine, I stole it from the debian package :-D> > And just for the record: kinit / klist both work, I can browse to my > 4.3.1 samba server from windows: \\servername and \\1.2.3.4, > smbd/nmbd/winbindd are all three running. > > However...logging on using ssh doesn't work, in syslog I get: >> Oct 26 20:43:34 meet winbindd[906]: [2015/10/26 20:43:34.110597, 0] >> ../lib/util/fault.c:78(fault_report) >> Oct 26 20:43:34 meet winbindd[906]: >> ==============================================================>> Oct 26 20:43:34 meet winbindd[906]: [2015/10/26 20:43:34.110635, 0] >> ../lib/util/fault.c:79(fault_report) >> Oct 26 20:43:34 meet winbindd[906]: INTERNAL ERROR: Signal 11 in >> pid 906 (4.3.1) >> Oct 26 20:43:34 meet winbindd[906]: Please read the >> Trouble-Shooting section of the Samba HOWTO >> Oct 26 20:43:34 meet winbindd[906]: [2015/10/26 20:43:34.110653, 0] >> ../lib/util/fault.c:81(fault_report) >> Oct 26 20:43:34 meet winbindd[906]: >> ==============================================================>> Oct 26 20:43:34 meet winbindd[906]: [2015/10/26 20:43:34.110664, 0] >> ../source3/lib/util.c:789(smb_panic_s3) >> Oct 26 20:43:34 meet winbindd[906]: PANIC (pid 906): internal error >> Oct 26 20:43:34 meet winbindd[906]: [2015/10/26 20:43:34.111075, 0] >> ../source3/lib/util.c:900(log_stack_trace) >> Oct 26 20:43:34 meet winbindd[906]: BACKTRACE: 35 stack frames: >> Oct 26 20:43:34 meet winbindd[906]: #0 >> /usr/local/samba/lib/libsmbconf.so.0(log_stack_trace+0x1f) >> [0x7f290628b61f] >> Oct 26 20:43:34 meet winbindd[906]: #1 >> /usr/local/samba/lib/libsmbconf.so.0(smb_panic_s3+0x6f) [0x7f290628b46a] >> Oct 26 20:43:34 meet winbindd[906]: #2 >> /usr/local/samba/lib/libsamba-util.so.0(smb_panic+0x28) [0x7f2909e83a16] >> Oct 26 20:43:34 meet winbindd[906]: #3 >> /usr/local/samba/lib/libsamba-util.so.0(+0x236ee) [0x7f2909e836ee] >> Oct 26 20:43:34 meet winbindd[906]: #4 >> /usr/local/samba/lib/libsamba-util.so.0(+0x23703) [0x7f2909e83703] >> Oct 26 20:43:34 meet winbindd[906]: #5 >> /lib/x86_64-linux-gnu/libpthread.so.0(+0xf8d0) [0x7f290ba3e8d0] >> Oct 26 20:43:34 meet winbindd[906]: #6 >> /usr/local/samba/lib/private/libkrb5-samba4.so.26(krb5_storage_free+0x10) >> [0x7f2908273ccc] >> Oct 26 20:43:34 meet winbindd[906]: #7 >> /usr/local/samba/lib/private/libkrb5-samba4.so.26(+0x47708) >> [0x7f2908259708] >> Oct 26 20:43:34 meet winbindd[906]: #8 >> /usr/local/samba/lib/private/libkrb5-samba4.so.26(krb5_kt_end_seq_get+0x68) >> [0x7f2908257c87] >> Oct 26 20:43:34 meet winbindd[906]: #9 >> /usr/local/samba/lib/private/libgse-samba4.so(+0x98cf) [0x7f29049878cf] >> Oct 26 20:43:34 meet winbindd[906]: #10 >> /usr/local/samba/lib/private/libgse-samba4.so(gse_krb5_get_server_keytab+0x18d) >> [0x7f2904987ccb] >> Oct 26 20:43:34 meet winbindd[906]: #11 >> /usr/local/samba/lib/private/libgse-samba4.so(+0xa781) [0x7f2904988781] >> Oct 26 20:43:34 meet winbindd[906]: #12 >> /usr/local/samba/lib/private/libgse-samba4.so(+0xafe5) [0x7f2904988fe5] >> Oct 26 20:43:34 meet winbindd[906]: #13 >> /usr/local/samba/lib/libgensec.so.0(gensec_start_mech+0x27e) >> [0x7f2904bc599f] >> Oct 26 20:43:34 meet winbindd[906]: #14 >> /usr/local/samba/lib/libgensec.so.0(gensec_start_mech_by_oid+0x11a) >> [0x7f2904bc5d91] >> Oct 26 20:43:34 meet winbindd[906]: #15 >> winbindd(kerberos_return_pac+0x7fb) [0x7f290be945d8] >> Oct 26 20:43:34 meet winbindd[906]: #16 winbindd(+0x4e738) >> [0x7f290bebd738] >> Oct 26 20:43:34 meet winbindd[906]: #17 winbindd(+0x501d4) >> [0x7f290bebf1d4] >> Oct 26 20:43:34 meet winbindd[906]: #18 >> winbindd(winbindd_dual_pam_auth+0x394) [0x7f290bec072c] >> Oct 26 20:43:34 meet winbindd[906]: #19 winbindd(+0x6dd0a) >> [0x7f290bedcd0a] >> Oct 26 20:43:34 meet winbindd[906]: #20 winbindd(+0x706f8) >> [0x7f290bedf6f8] >> Oct 26 20:43:34 meet winbindd[906]: #21 >> /usr/local/samba/lib/private/libtevent.so.0(+0xcebd) [0x7f29093d7ebd] >> Oct 26 20:43:34 meet winbindd[906]: #22 >> /usr/local/samba/lib/private/libtevent.so.0(+0xd4da) [0x7f29093d84da] >> Oct 26 20:43:34 meet winbindd[906]: #23 >> /usr/local/samba/lib/private/libtevent.so.0(+0xa3c6) [0x7f29093d53c6] >> Oct 26 20:43:34 meet winbindd[906]: #24 >> /usr/local/samba/lib/private/libtevent.so.0(_tevent_loop_once+0xf4) >> [0x7f29093cf589] >> Oct 26 20:43:34 meet winbindd[906]: #25 winbindd(+0x71243) >> [0x7f290bee0243] >> Oct 26 20:43:34 meet winbindd[906]: #26 winbindd(+0x6ccf8) >> [0x7f290bedbcf8] >> Oct 26 20:43:34 meet winbindd[906]: #27 >> /usr/local/samba/lib/private/libtevent.so.0(+0x57c0) [0x7f29093d07c0] >> Oct 26 20:43:34 meet winbindd[906]: #28 >> /usr/local/samba/lib/private/libtevent.so.0(tevent_common_loop_immediate+0x1f5) >> [0x7f29093d0442] >> Oct 26 20:43:34 meet winbindd[906]: #29 >> /usr/local/samba/lib/private/libtevent.so.0(+0xd440) [0x7f29093d8440] >> Oct 26 20:43:34 meet winbindd[906]: #30 >> /usr/local/samba/lib/private/libtevent.so.0(+0xa3c6) [0x7f29093d53c6] >> Oct 26 20:43:34 meet winbindd[906]: #31 >> /usr/local/samba/lib/private/libtevent.so.0(_tevent_loop_once+0xf4) >> [0x7f29093cf589] >> Oct 26 20:43:34 meet winbindd[906]: #32 winbindd(main+0xd18) >> [0x7f290bea8862] >> Oct 26 20:43:34 meet winbindd[906]: #33 >> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f2903100b45] >> Oct 26 20:43:34 meet winbindd[906]: #34 winbindd(+0x24ae9) >> [0x7f290be93ae9] >> Oct 26 20:43:34 meet winbindd[906]: [2015/10/26 20:43:34.113711, 0] >> ../source3/lib/dumpcore.c:313(dump_core) >> Oct 26 20:43:34 meet winbindd[906]: unable to change to >> /usr/local/samba/var/cores/winbindd >> Oct 26 20:43:34 meet winbindd[906]: refusing to dump core > (the above log appears after I press <enter> after the password prompt) > > I could only find this rather old bugreport, that seems to be > irrelevant now: https://bugzilla.samba.org/show_bug.cgi?id=11081 > > (note: unable to change to /usr/local/samba/var/cores/winbindd, > however the directory exists...) > > Ideas? >How are you trying to log in with ssh ? I use it with plain passwords to the DC all the time and don't have any problems. Rowland
mourik jan c heupink
2015-Oct-26 20:11 UTC
[Samba] self compiled samba domain member, jessie, pam config
heej... after a reboot it suddenly works.?? well.... Anyway: thanks for the pam-auth-update recipe, Rowland! MJ
mourik jan c heupink
2015-Oct-26 20:12 UTC
[Samba] self compiled samba domain member, jessie, pam config
Yep, now it works here as well :-) On 26-10-2015 21:03, Rowland Penny wrote:> How are you trying to log in with ssh ? I use it with plain passwords to > the DC all the time and don't have any problems.
mourik jan c heupink
2015-Oct-26 20:22 UTC
[Samba] self compiled samba domain member, jessie, pam config
Hi, On 26-10-2015 21:03, Rowland Penny wrote:> How are you trying to log in with ssh ? I use it with plain passwords to > the DC all the time and don't have any problems.It seems that smb.conf cannot have > kerberos method = secrets and keytab If that line is in place, I cannot logon. If I take it out, I can logon. Is this normal..? (or..are you also seeing that?) Read about it here: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784656