Segfault when trying to use ldapsam:trusted=yes option

[Arie Skliarouk]

Binary package hint: samba

On samba version 2:3.2.3-1ubuntu3 (x86_64) I am trying to use LDAP for users authentication:

   passdb backend = ldapsam:ldap://neon
   ldap suffix = dc=catchmedia,dc=com
   ldap user suffix = ou=People
   ldap group suffix = ou=Group
   ldap machine suffix = ou=Computers
   ldap admin dn = "cn=admin,dc=catchmedia,dc=com"
   ldap delete dn = no
   ldap ssl = no
# ldapsam:trusted=yes
   ldap passwd sync = no

For some reason, if I uncomment the "ldapsam:trusted=yes" option, the samba segfaults once I try to start it:

...
[2008/12/24 13:19:05, 1] lib/smbldap_util.c:add_new_domain_info(233)
  add_new_domain_info: failed to add domain dn= sambaDomainName=NEON,dc=catchmedia,dc=com with: Server is unwilling to perform
        shadow context; no update referral
[2008/12/24 13:19:05, 0] lib/smbldap_util.c:smbldap_search_domain_info(310)
  smbldap_search_domain_info: Adding domain info for NEON failed with NT_STATUS_UNSUCCESSFUL
[2008/12/24 13:19:05, 1] passdb/pdb_interface.c:pdb_default_uid_to_rid(1226)
  Could not peek rid out of sid S-1-5-21-3153401187-884309351-300090610-500
[2008/12/24 13:19:05, 1] passdb/pdb_ldap.c:ldapsam_enum_group_memberships(2850)
  User account [nobody] not found!
[2008/12/24 13:19:05, 0] lib/fault.c:fault_report(40)
  ===============================================================
[2008/12/24 13:19:05, 0] lib/fault.c:fault_report(41)
  INTERNAL ERROR: Signal 6 in pid 2122 (3.2.3)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2008/12/24 13:19:05, 0] lib/fault.c:fault_report(43)
...

I don't have user nobody in the LDAP and want to disable it everywhere, BTW. Someone suggested to use the trusted=yes option.

[Thierry Carrez (ttx)]

Someone posted on samba list the same problem and solved it by following instructions there:

Search for ldapsam (several threads) in:
http://lists.samba.org/archive/samba/2005-September/thread.html
It wasn't acknowledged as a samba bug by the upstream developers.

Hope this helps.

[Chuck Short (zulcss)]

This should be fixed in lucid. Please re-open if you still reproduce it on lucid.

Thanks
chuck