winbind 3.6.3 crashes frequently in environements with #sid's > 1000

[Peter Parzer]

System Information:
Ubuntu 12.04 LTS amd64
winbind 2:3.6.3-2ubuntu2

Winbind crashes frequently. It happens 5 times at login and 1 time at logout and at different occassions in between (for example sudo).

Here is a log of such a crash:

[2012/04/27 11:30:27.639126, 0] ../lib/util/debug.c:413(talloc_log_fn)
  Bad talloc magic value - unknown value
[2012/04/27 11:30:27.644636, 0] lib/util.c:1117(smb_panic)
  PANIC (pid 3842): Bad talloc magic value - unknown value
[2012/04/27 11:30:27.657191, 0] lib/util.c:1221(log_stack_trace)
  BACKTRACE: 20 stack frames:
   #0 /usr/sbin/winbindd(log_stack_trace+0x1a) [0x7fa21be7c36a]
   #1 /usr/sbin/winbindd(smb_panic+0x25) [0x7fa21be7c445]
   #2 /usr/lib/x86_64-linux-gnu/libtalloc.so.2(talloc_strdup+0x299) [0x7fa219cb7429]
   #3 /usr/sbin/winbindd(+0x4e78bd) [0x7fa21c1bf8bd]
   #4 /usr/sbin/winbindd(dcerpc_lsa_lookup_sids3+0x2e) [0x7fa21c1bffae]
   #5 /usr/sbin/winbindd(winbindd_lookup_sids+0x116) [0x7fa21bdc3306]
   #6 /usr/sbin/winbindd(+0xeefa2) [0x7fa21bdc6fa2]
   #7 /usr/sbin/winbindd(+0xd9be2) [0x7fa21bdb1be2]
   #8 /usr/sbin/winbindd(_wbint_LookupGroupMembers+0x5e) [0x7fa21bdd097e]
   #9 /usr/sbin/winbindd(+0x1029b4) [0x7fa21bdda9b4]
   #10 /usr/sbin/winbindd(winbindd_dual_ndrcmd+0xbc) [0x7fa21bdcff6c]
   #11 /usr/sbin/winbindd(+0xf6cb4) [0x7fa21bdcecb4]
   #12 /usr/sbin/winbindd(+0xf7765) [0x7fa21bdcf765]
   #13 /usr/sbin/winbindd(tevent_common_loop_immediate+0xe2) [0x7fa21be8dd32]
   #14 /usr/sbin/winbindd(run_events_poll+0x48) [0x7fa21be8be28]
   #15 /usr/sbin/winbindd(+0x1b4246) [0x7fa21be8c246]
   #16 /usr/sbin/winbindd(_tevent_loop_once+0x90) [0x7fa21be8ce50]
   #17 /usr/sbin/winbindd(main+0x78b) [0x7fa21bda5a3b]
   #18 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7fa2192df76d]
   #19 /usr/sbin/winbindd(+0xcde91) [0x7fa21bda5e91]
[2012/04/27 11:30:27.663686, 0] lib/util.c:1122(smb_panic)
  smb_panic(): calling panic action [/usr/share/samba/panic-action 3842]
[2012/04/27 11:30:29.456737, 0] lib/util.c:1130(smb_panic)
  smb_panic(): action returned status 0
[2012/04/27 11:30:29.457831, 0] lib/fault.c:372(dump_core)
  dumping core in /var/log/samba/cores/winbindd

[James Page (james-page)]

Hi Peter

Thanks for taking the time to report this bug in Ubuntu.

It looks like this issue might be related to the following upstream bugs:

https://bugzilla.samba.org/show_bug.cgi?id=8871
https://bugzilla.samba.org/show_bug.cgi?id=8807

Does your environment have more than 1000 sids/groups? If so this is most likely the issue.

Marking 'Incomplete' pending your response.

Thanks

[Peter Parzer (peter-parzer)]

Hi James,

we have about 20000 users/groups, so it definitly looks like bug 8807.