Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 23 Oct 2012 12:10:06 GMT
From:      Michael Letzgus <michael.letzgus@uni-bielefeld.de>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   ports/172983: Upgrade from samba36 3.6.7 to 3.6.8 kills AD membership, "net ads join" segfaults
Message-ID:  <201210231210.q9NCA6In086860@red.freebsd.org>
Resent-Message-ID: <201210231220.q9NCK1uk084634@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         172983
>Category:       ports
>Synopsis:       Upgrade from samba36 3.6.7 to 3.6.8 kills AD membership, "net ads join" segfaults
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Oct 23 12:20:00 UTC 2012
>Closed-Date:
>Last-Modified:
>Originator:     Michael Letzgus
>Release:        RELEASE 9.0 p3
>Organization:
Universität Bielefeld
>Environment:
FreeBSD pc1.uni-bielefeld.de 9.0-RELEASE-p3 FreeBSD 9.0-RELEASE-p3 #0: Tue Jun 12 02:52:29 UTC 2012     root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC  amd64

>Description:
Hi,

after upgrading from Samba 3.6.7 to 3.6.8 "something" was wrong with the AD membership:

* net ads testjoin => OK
* wbinfo -P => failed
* wbinfo -t => failed


winbindd logs a lot of these messages:

winbindd/winbindd_cm.c:1015(cm_prepare_connection)
  failed tcon_X with NT_STATUS_ACCESS_DENIED


Oct 23 13:22:00 pc1 winbindd[42932]: [2012/10/23 13:22:00.194727,  0] winbindd/winbindd_util.c:635(init_domain_list)
Oct 23 13:22:00 pc1 winbindd[42932]:   Could not fetch our SID - did we join?
Oct 23 13:22:00 pc1 winbindd[42932]: [2012/10/23 13:22:00.194825,  0] winbindd/winbindd.c:1108(winbindd_register_handlers)
Oct 23 13:22:00 pc1 winbindd[42932]:   unable to initialize domain list




Joining the domain again failed because "net" segfaulted:

>How-To-Repeat:
Upgrade from Samba 3..6.7 to 3.6.8 on a machine which is ADS member...
>Fix:
go back to 3.6.7!

I'll try to reproduce that on a FreeBSD Bm for debugging...

>Release-Note:
>Audit-Trail:
>Unformatted:
 >net ads join -U domainadmin
 Password for domainadmin@mydomain:***
 
 Then: Segfault, core dumped
 
 Another strange observation:
 
 With 3.6.7 "net ads join" asked for "root" password, but 3.6.8 asks for password of user "(null)". Something goes horribly wrong inside "net"...
 
 
 smbd had problems, too:
 
 Oct 23 12:19:35 pc1 smbd[38310]: [2012/10/23 12:19:35.877698,  0] rpc_client/cli_pipe_schannel.c:184(cli_rpc_pipe_open_schannel)
 Oct 23 12:19:35 pc1 smbd[38310]:   cli_rpc_pipe_open_schannel: failed to get schannel session key from server DC1.AD.UNI-BIELEFELD.DE for domain AD.
 Oct 23 12:19:35 pc1 smbd[38310]: [2012/10/23 12:19:35.877823,  0] auth/auth_domain.c:193(connect_to_domain_password_server)
 Oct 23 12:19:35 pc1 smbd[38310]:   connect_to_domain_password_server: unable to open the domain client session to machine DC1.AD.UNI-BIELEFELD.DE. Error was : NT_STATUS_ACCESS_DENIED.
 Oct 23 12:19:35 pc1 smbd[38310]: [2012/10/23 12:19:35.886597,  0] rpc_client/cli_pipe_schannel.c:184(cli_rpc_pipe_open_schannel)
 
 [...]
 
 Oct 23 13:35:44 pc1 smbd[46818]:   INTERNAL ERROR: Signal 11 in pid 46818 (3.6.8)
 Oct 23 13:35:44 pc1 smbd[46818]:   Please read the Trouble-Shooting section of the Samba3-HOWTO
 Oct 23 13:35:44 pc1 smbd[46818]: [2012/10/23 13:35:44.673042,  0] lib/fault.c:54(fault_report)
 Oct 23 13:35:44 pc1 smbd[46818]:   
 Oct 23 13:35:44 pc1 smbd[46818]:   From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
 Oct 23 13:35:44 pc1 smbd[46818]: [2012/10/23 13:35:44.673062,  0] lib/fault.c:55(fault_report)
 Oct 23 13:35:44 pc1 smbd[46818]:   ===============================================================
 Oct 23 13:35:44 pc1 smbd[46818]: [2012/10/23 13:35:44.673077,  0] lib/util.c:1117(smb_panic)
 Oct 23 13:35:44 pc1 smbd[46818]:   PANIC (pid 46818): internal error
 
 
 
 
 Since reverting back to 3.6.7 everything is fine.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201210231210.q9NCA6In086860>