Panic or segfault in Samba

[Sergiy Matrunchyk]

I receive time by time on the my sysadmin's mail these messages:

The Samba 'panic action' script, /usr/share/samba/panic-action,
was called for PID 947 (/usr/sbin/winbindd).

This means there was a problem with the program, such as a segfault.
Below is a backtrace for this process generated with gdb, which shows
the state of the program at the time the error occurred. The Samba log
files may contain additional information about the problem.

If the problem persists, you are encouraged to first install the
samba-dbg package, which contains the debugging symbols for the Samba
binaries. Then submit the provided information as a bug report to
Ubuntu by visiting this link:
https://launchpad.net/ubuntu/+source/samba/+filebug

[Thread debugging using libthread_db enabled]
0x00007fede24d6dee in waitpid () from /lib/libc.so.6
#0 0x00007fede24d6dee in waitpid () from /lib/libc.so.6
#1 0x00007fede246ea79 in ?? () from /lib/libc.so.6
#2 0x00007fede496db94 in smb_panic ()
#3 0x00007fede2be52af in _talloc_steal_loc () from /usr/lib/libtalloc.so.2
#4 0x00007fede2be52f3 in _talloc_move () from /usr/lib/libtalloc.so.2
#5 0x00007fede4a6c3da in cli_rpc_pipe_open_schannel_with_key ()
#6 0x00007fede48bcd62 in cm_connect_lsa_tcp ()
#7 0x00007fede48bfc2f in winbindd_lookup_names ()
#8 0x00007fede48bfe0e in ?? ()
#9 0x00007fede48c16c0 in ?? ()
#10 0x00007fede48c1897 in ?? ()
#11 0x00007fede48ae40c in ?? ()
#12 0x00007fede48cbb27 in _wbint_LookupName ()
#13 0x00007fede48d53e1 in ?? ()
#14 0x00007fede48cb70c in winbindd_dual_ndrcmd ()
#15 0x00007fede48ca8cb in ?? ()
#16 0x00007fede48caf3b in ?? ()
#17 0x00007fede497ece7 in tevent_common_loop_immediate ()
#18 0x00007fede497d49b in run_events ()
#19 0x00007fede497d807 in ?? ()
#20 0x00007fede497dca0 in _tevent_loop_once ()
#21 0x00007fede48a1903 in main ()
A debugging session is active.

        Inferior 1 [process 947] will be detached.

Quit anyway? (y or n) [answered Y; input not from terminal]

---------
SQUID3 Cache log:
2011/09/12 12:49:25| helperOpenServers: Starting 50/50 'ntlm_auth' processes
2011/09/12 12:49:26| helperOpenServers: Starting 40/40 'wbinfo_group_bsd.pl' processes
2011/09/12 12:49:26| Accepting HTTP connections at [::]:3128, FD 605.
2011/09/12 12:49:26| Accepting ICP messages at [::]:3130, FD 606.
2011/09/12 12:49:26| HTCP Disabled.
2011/09/12 12:49:26| Configuring Sibling 192.168.48.5/3128/3130
2011/09/12 12:49:26| Configuring Parent 127.0.0.1/8080/0
2011/09/12 12:49:26| Loaded Icons.
2011/09/12 12:49:26| Ready to serve requests.
2011/09/12 12:55:44| AuthNTLMUserRequest::authenticate: need to ask helper
2011/09/12 12:55:44| AuthNTLMUserRequest::authenticate: need to ask helper
2011/09/12 12:58:28| fqdncacheParse: No PTR record for '212.8.163.76'
2011/09/12 12:58:28| fqdncacheParse: No PTR record for '212.8.163.76'
2011/09/12 13:43:25| AuthNTLMUserRequest::authenticate: need to ask helper
2011/09/12 13:43:25| AuthNTLMUserRequest::authenticate: need to ask helper
2011/09/12 13:45:38| TunnelStateData::Connection::error: FD 364: read/write failure: (32) Broken pipe
2011/09/12 13:47:38| TunnelStateData::Connection::error: FD 283: read/write failure: (32) Broken pipe
2011/09/12 13:55:11| TunnelStateData::Connection::error: FD 311: read/write failure: (32) Broken pipe
2011/09/12 13:55:11| TunnelStateData::Connection::error: FD 145: read/write failure: (32) Broken pipe
2011/09/12 13:55:11| TunnelStateData::Connection::error: FD 355: read/write failure: (32) Broken pipe
2011/09/12 13:55:11| TunnelStateData::Connection::error: FD 316: read/write failure: (32) Broken pipe
2011/09/12 13:55:11| TunnelStateData::Connection::error: FD 187: read/write failure: (32) Broken pipe

-------------------------

testparm:
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

[global]
 workgroup = EXAMPLE
 realm = EXAMPLE.COM
 server string = %h server (Samba, Ubuntu)
 interfaces = 127.0.0.0/8, eth1
 bind interfaces only = Yes
 security = ADS
 map to guest = Bad User
 obey pam restrictions = Yes
 password server = winpdc.example.com winpdc2.example.com winpdc3.example.com
 pam password change = Yes
 passwd program = /usr/bin/passwd %u
 passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
 unix password sync = Yes
 syslog = 0
 log file = /var/log/samba/log.%m
 max log size = 1000
 name resolve order = lmhosts host wins bcast
 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 load printers = No
 printcap name = /dev/null
 disable spoolss = Yes
 show add printer wizard = No
 local master = No
 domain master = No
 wins server = winpdc.example.com
 usershare allow guests = Yes
 panic action = /usr/share/samba/panic-action %d
 idmap uid = 10000-20000
 idmap gid = 10000-20000
 template shell = /bin/bash
 winbind enum users = Yes
 winbind enum groups = Yes
 winbind use default domain = Yes
 winbind refresh tickets = Yes
 winbind offline logon = Yes
 printing = bsd
 print command = lpr -r -P'%p' %s
 lpq command = lpq -P'%p'
 lprm command = lprm -P'%p' %j

------------------
krb5.conf:

[libdefaults]
 default_realm = EXAMPLE.COM
 krb4_config = /etc/krb.conf
 krb4_realms = /etc/krb.realms
 kdc_timesync = 1
 ccache_type = 4
 forwardable = true
 proxiable = true
 v4_instance_resolve = false
 v4_name_convert = {
  host = {
   rcmd = host
   ftp = ftp
  }
  plain = {
   something = something-else
  }
 }
 fcc-mit-ticketflags = true
[realms]
 EXAMPLE.COM = {
  kdc = pdc.example.com
  kdc = pdc1.example.com
  kdc = pdc2.example.com
  admin_server = pdc.example.com
  default_domain = example.com
 }
[domain_realm]
 .example.com = EXAMPLE.COM
 example.com = EXAMPLE.COM
[login]
 krb4_convert = true
 krb4_get_tickets = false

------------
nsswitch.conf

passwd: compat winbind
group: compat winbind
shadow: compat winbind

hosts: files mdns4_minimal dns wins [NOTFOUND=return] mdns4
networks: files wins

protocols: db files
services: db files
ethers: db files
rpc: db files

netgroup: nis

-------

part of Squid3.conf:

auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 50

auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 50
auth_param basic realm InterNet GateWay
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off

external_acl_type ads_group ttl=86400 negative_ttl=3600 children=40 concurrency=100 %LOGIN /usr/lib/squid3/wbinfo_group_bsd.pl

---------
$ uname -r
2.6.38-11-generic-pae

-----------
$ lsb_release -r
Release: 11.04

[Dave Walker (davewalker)]

Thanks for the bug report. I suspect you have exceeded the default of maximum permitted open files. Please can you try raising your ulimit, and see if you still hit this issue.

Thanks.

[Launchpad Janitor (janitor)]

[Expired for samba (Ubuntu) because there has been no activity for 60 days.]