[SRU] winbind coredumps when encountering a group with over 1000 members
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
samba |
Fix Released
|
High
|
|||
samba (Ubuntu) |
Fix Released
|
High
|
James Page | ||
Precise |
Fix Released
|
High
|
James Page | ||
Quantal |
Fix Released
|
High
|
James Page |
Bug Description
Impact:
winbind coredumps when encountering a group with more that 1000 members - this renders winbind unusable in deployments with > 1000 users in a single group.
Development Fix:
Cherry picked patch from upstream VCS - this fix should be included in 3.6.6.
Fix ensures that hunks of 1000 entries processed in winbind line up with talloc memory handling preventing the crash.
Stable Fix:
Cherry picked patch from upstream VCS - see comments in Development fix.
Test Case:
NOTE - hard to reproduce as requires deployment with large number of users/groups.
Configure winbind to communicate with a Domain Controller with more that 1000 users
getent group groupWithLessTh
getent group groupWithMoreTh
Regression Potential:
Minimal - patch has been committed upstream and should be released in Samba 3.6.6.
Original Bug Report:
Samba 3.6.3 precise
winbind works as expected with groups with < 1000 members, core dumps when encountering groups with > 1000 members.
e.g. getent group groupWithLessTh
getent group groupWithMoreTh
Apr 1 02:00:56 fs1 winbindd[1506]: [2012/04/01 02:00:56.252483, 0] ../lib/
Apr 1 02:00:56 fs1 winbindd[1506]: Bad talloc magic value - unknown value
Apr 1 02:00:56 fs1 winbindd[1506]: [2012/04/01 02:00:56.255072, 0] lib/util.
Apr 1 02:00:56 fs1 winbindd[1506]: PANIC (pid 1506): Bad talloc magic value - unknown value
Apr 1 02:00:56 fs1 winbindd[1506]: [2012/04/01 02:00:56.282138, 0] lib/util.
Apr 1 02:00:56 fs1 winbindd[1506]: BACKTRACE: 20 stack frames:
Apr 1 02:00:56 fs1 winbindd[1506]: #0 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #1 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #2 /usr/lib/
Apr 1 02:00:56 fs1 winbindd[1506]: #3 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #4 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #5 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #6 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #7 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #8 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #9 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #10 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #11 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #12 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #13 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #14 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #15 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #16 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #17 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: #18 /lib/x86_
Apr 1 02:00:56 fs1 winbindd[1506]: #19 /usr/sbin/
Apr 1 02:00:56 fs1 winbindd[1506]: [2012/04/01 02:00:56.282756, 0] lib/fault.
Apr 1 02:00:56 fs1 winbindd[1506]: dumping core in /var/log/
Apr 1 02:00:56 fs1 winbindd[1506]:
Apr 1 02:03:57 fs1 winbindd[1163]: [2012/04/01 02:03:57.387585, 0] winbindd/
Apr 1 02:03:57 fs1 winbindd[1163]: Got invalid trustdom response
Fix submitted here: https:/
Changed in samba (Ubuntu): | |
importance: | Undecided → High |
status: | New → Triaged |
Changed in samba (Ubuntu Precise): | |
status: | New → Triaged |
importance: | Undecided → High |
Changed in samba (Ubuntu Quantal): | |
assignee: | nobody → James Page (james-page) |
status: | Triaged → In Progress |
description: | updated |
summary: |
- winbind coredumps when encountering a group with over 1000 members + [SRU] winbind coredumps when encountering a group with over 1000 members |
description: | updated |
description: | updated |
description: | updated |
tags: |
added: verification-done removed: verification-needed |
Changed in samba (Ubuntu Precise): | |
milestone: | none → ubuntu-12.04.1 |
Changed in samba: | |
importance: | Unknown → High |
status: | Unknown → Fix Released |
Because of the Domain Users group being the default primary group in Active Directory, any domain with more than 1000 users will contain such a group and be affected by this.