enterprise-support team mailing list archive

[Jason Gunthorpe <jgunthorpe@xxxxxxxxx>]

Public bug reported:

Attempting to login via PAM causes winbind to segfault and log this to
syslog:

May  2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.540190,  0] ../lib/util/fault.c:72(fault_report)
May  2 16:25:54 jggl winbindd[2416]:   ===============================================================
May  2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.540238,  0] ../lib/util/fault.c:73(fault_report)
May  2 16:25:54 jggl winbindd[2416]:   INTERNAL ERROR: Signal 11 in pid 2416 (4.1.6-Ubuntu)
May  2 16:25:54 jggl winbindd[2416]:   Please read the Trouble-Shooting section of the Samba HOWTO
May  2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.540263,  0] ../lib/util/fault.c:75(fault_report)
May  2 16:25:54 jggl winbindd[2416]:   ===============================================================
May  2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.540295,  0] ../source3/lib/util.c:785(smb_panic_s3)
May  2 16:25:54 jggl winbindd[2416]:   PANIC (pid 2416): internal error
May  2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.585897,  0] ../source3/lib/util.c:896(log_stack_trace)
May  2 16:25:54 jggl winbindd[2416]:   BACKTRACE: 27 stack frames:
May  2 16:25:54 jggl winbindd[2416]:    #0 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f6d3e2fff3a]
May  2 16:25:54 jggl winbindd[2416]:    #1 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f6d3e300010]
May  2 16:25:54 jggl winbindd[2416]:    #2 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(smb_panic+0x2f) [0x7f6d425d9c6f]
May  2 16:25:54 jggl winbindd[2416]:    #3 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(+0x1ae86) [0x7f6d425d9e86]
May  2 16:25:54 jggl winbindd[2416]:    #4 /lib/x86_64-linux-gnu/libpthread.so.0(+0x10340) [0x7f6d42a07340]
May  2 16:25:54 jggl winbindd[2416]:    #5 /usr/lib/x86_64-linux-gnu(krb5_storage_free+0x1) [0x7f6d3ce45441]
May  2 16:25:54 jggl winbindd[2416]:    #6 /usr/lib/x86_64-linux-gnu(+0x42465) [0x7f6d3ce2b465]
May  2 16:25:54 jggl winbindd[2416]:    #7 /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(+0x86b1) [0x7f6d3ee756b1]
May  2 16:25:54 jggl winbindd[2416]:    #8 /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(gse_krb5_get_server_keytab+0xfb) [0x7f6d3ee75beb]
May  2 16:25:54 jggl winbindd[2416]:    #9 /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(+0xa7aa) [0x7f6d3ee777aa]
May  2 16:25:54 jggl winbindd[2416]:    #10 /usr/lib/x86_64-linux-gnu/libgensec.so.0(gensec_start_mech+0x71) [0x7f6d3f3012b1]
May  2 16:25:54 jggl winbindd[2416]:    #11 /usr/lib/x86_64-linux-gnu/libgensec.so.0(gensec_start_mech_by_oid+0x26) [0x7f6d3f301586]
May  2 16:25:54 jggl winbindd[2416]:    #12 /usr/sbin/winbindd(kerberos_return_pac+0x435) [0x7f6d42e66da5]
May  2 16:25:54 jggl winbindd[2416]:    #13 /usr/sbin/winbindd(winbindd_dual_pam_auth+0xec4) [0x7f6d42e78884]
May  2 16:25:54 jggl winbindd[2416]:    #14 /usr/sbin/winbindd(+0x5337c) [0x7f6d42e8d37c]
May  2 16:25:54 jggl winbindd[2416]:    #15 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x867b) [0x7f6d3c37167b]
May  2 16:25:54 jggl winbindd[2416]:    #16 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x6b27) [0x7f6d3c36fb27]
May  2 16:25:54 jggl winbindd[2416]:    #17 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d) [0x7f6d3c36c5ed]
May  2 16:25:54 jggl winbindd[2416]:    #18 /usr/sbin/winbindd(+0x55702) [0x7f6d42e8f702]
May  2 16:25:54 jggl winbindd[2416]:    #19 /usr/sbin/winbindd(+0x55db5) [0x7f6d42e8fdb5]
May  2 16:25:54 jggl winbindd[2416]:    #20 /usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_immediate+0xd4) [0x7f6d3c36ce14]
May  2 16:25:54 jggl winbindd[2416]:    #21 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x8437) [0x7f6d3c371437]
May  2 16:25:54 jggl winbindd[2416]:    #22 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x6b27) [0x7f6d3c36fb27]
May  2 16:25:54 jggl winbindd[2416]:    #23 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d) [0x7f6d3c36c5ed]
May  2 16:25:54 jggl winbindd[2416]:    #24 /usr/sbin/winbindd(main+0xad2) [0x7f6d42e5ee42]
May  2 16:25:54 jggl winbindd[2416]:    #25 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f6d3bfc4ec5]
May  2 16:25:54 jggl winbindd[2416]:    #26 /usr/sbin/winbindd(+0x25532) [0x7f6d42e5f532]
May  2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.586279,  0] ../source3/lib/dumpcore.c:312(dump_core)
May  2 16:25:54 jggl winbindd[2416]:   unable to change to /var/log/samba/cores/winbindd
May  2 16:25:54 jggl winbindd[2416]:   refusing to dump core

Attempting to validate passwords via wbinfo works fine, nss works fine,
etc.

The segfault prevents the login from succeeding, so pam winbind is
basically unusable.

This is a regression, this config has worked here on various Ubuntu's
for at least 5 years.

$ cat /etc/security/pam_winbind.conf 
[global]
;debug=yes
;debug_state=yes
require_membership_of=ORCORP\orc
krb5_auth=yes
$ cat /etc/samba/smb.conf 
[global]
workgroup = ORCORP
realm = ADS.ORCORP.CA
os level = 0
log level = 3

security = ads
password server = ads0.ads.orcorp.ca
kerberos method = secrets and keytab

guest account = nobody
invalid users = root
unix charset = "UTF8"
obey pam restrictions = yes
dns proxy = no

#idmap domains = ORCORP
idmap config ORCORP:backend = ad
idmap config ORCORP:readonly = yes
#idmap config ORCORP:default = yes
idmap config ORCORP:range = 1000-11000
idmap config ORCORP:schema_mode = rfc2307

idmap backend = tdb
idmap uid = 300000000 - 310000000
idmap gid = 300000000 - 310000000

winbind nss info = rfc2307
winbind use default domain = yes
winbind offline logon = yes
winbind refresh tickets = yes
winbind normalize names = yes
winbind enum groups = yes

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server/Client Support Team, which is subscribed to samba in Ubuntu.
Matching subscriptions: Ubuntu Server/Client Support Team
https://bugs.launchpad.net/bugs/1315560

Title:
  winbind segfaults during pam login

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1315560/+subscriptions