enterprise-support team mailing list archive

[sense <sense@xxxxxxxxxxxxxx>]

Public bug reported:

System version: Ubuntu 14.04.4 LTS
Squid version: 2:4.3.8+dfsg-0ubuntu0.14.04.2
Winbind version: 2:4.3.8+dfsg-0ubuntu0.14.04.2 upgrade to 2:4.3.9+dfsg-0ubuntu0.14.04.1

My ubuntu server installed Squid to perform http_proxy. Squid auth the
Active Directory users by winbind, settings like follow:

...
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
...

Everything is ok until I upgrade winbind from 2:4.3.8+dfsg-
0ubuntu0.14.04.2 to 2:4.3.9+dfsg-0ubuntu0.14.04.1 today. Squid can't
auth the AD users anymore. There are some error log in the cache.log:

...
2016/05/05 13:50:45| ERROR: NTLM Authentication Helper '0x7fb54812af68' crashed!.
2016/05/05 13:50:45| ERROR: NTLM Authentication validating user. Error returned 'BH Internal error'
...

And there are some error log in the /var/log/syslog:

...
May  5 09:26:08 ocelot kernel: [  187.793014] ntlm_auth[4543]: segfault at 8 ip 00007f10aad619b0 sp 00007ffc1ed0e778 error 4 in libsamba-security.so.0[7f10aad56000+1b000]
May  5 09:26:08 ocelot kernel: [  188.207378] ntlm_auth[5062]: segfault at 8 ip 00007f41ada4d9b0 sp 00007ffebc1a1108 error 4 in libsamba-security.so.0[7f41ada42000+1b000]
May  5 09:26:08 ocelot kernel: [  188.438501] ntlm_auth[4535]: segfault at 8 ip 00007f73fa26a9b0 sp 00007ffc1c63f808 error 4 in libsamba-security.so.0[7f73fa25f000+1b000]
May  5 09:26:35 ocelot kernel: [  214.949867] ntlm_auth[5063]: segfault at 8 ip 00007fc1b5c459b0 sp 00007fffd3d5b398 error 4 in libsamba-security.so.0[7fc1b5c3a000+1b000]
May  5 09:26:35 ocelot kernel: [  215.026850] ntlm_auth[5067]: segfault at 8 ip 00007f782ba5c9b0 sp 00007ffe59d96aa8 error 4 in libsamba-security.so.0[7f782ba51000+1b000]
...

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New

** Description changed:

  System version: Ubuntu 14.04.4 LTS
  Squid version: 2:4.3.8+dfsg-0ubuntu0.14.04.2
- New winbind version: 2:4.3.8+dfsg-0ubuntu0.14.04.2 upgrade to 2:4.3.9+dfsg-0ubuntu0.14.04.1
+ Winbind version: 2:4.3.8+dfsg-0ubuntu0.14.04.2 upgrade to 2:4.3.9+dfsg-0ubuntu0.14.04.1
  
  My ubuntu server installed Squid to perform http_proxy. Squid auth the
  Active Directory users by winbind, settings like follow:
  
  ...
  auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
  ...
  
  Everything is ok until I upgrade winbind from 2:4.3.8+dfsg-
  0ubuntu0.14.04.2 to 2:4.3.9+dfsg-0ubuntu0.14.04.1 today. Squid can't
  auth the AD users anymore. There are some error log in the cache.log:
  
  ...
  2016/05/05 13:50:45| ERROR: NTLM Authentication Helper '0x7fb54812af68' crashed!.
  2016/05/05 13:50:45| ERROR: NTLM Authentication validating user. Error returned 'BH Internal error'
  ...
  
  And there are some error log in the /var/log/syslog:
  
  ...
  May  5 09:26:08 ocelot kernel: [  187.793014] ntlm_auth[4543]: segfault at 8 ip 00007f10aad619b0 sp 00007ffc1ed0e778 error 4 in libsamba-security.so.0[7f10aad56000+1b000]
  May  5 09:26:08 ocelot kernel: [  188.207378] ntlm_auth[5062]: segfault at 8 ip 00007f41ada4d9b0 sp 00007ffebc1a1108 error 4 in libsamba-security.so.0[7f41ada42000+1b000]
  May  5 09:26:08 ocelot kernel: [  188.438501] ntlm_auth[4535]: segfault at 8 ip 00007f73fa26a9b0 sp 00007ffc1c63f808 error 4 in libsamba-security.so.0[7f73fa25f000+1b000]
  May  5 09:26:35 ocelot kernel: [  214.949867] ntlm_auth[5063]: segfault at 8 ip 00007fc1b5c459b0 sp 00007fffd3d5b398 error 4 in libsamba-security.so.0[7fc1b5c3a000+1b000]
  May  5 09:26:35 ocelot kernel: [  215.026850] ntlm_auth[5067]: segfault at 8 ip 00007f782ba5c9b0 sp 00007ffe59d96aa8 error 4 in libsamba-security.so.0[7f782ba51000+1b000]
  ...

-- 
You received this bug notification because you are a member of Ubuntu
Server/Client Support Team, which is subscribed to samba in Ubuntu.
Matching subscriptions: Ubuntu Server/Client Support Team
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions