[Bug 1315560] [NEW] winbind segfaults during pam login
Jason Gunthorpe
jgunthorpe at gmail.com
Fri May 2 22:30:51 UTC 2014
Public bug reported:
Attempting to login via PAM causes winbind to segfault and log this to
syslog:
May 2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.540190, 0] ../lib/util/fault.c:72(fault_report)
May 2 16:25:54 jggl winbindd[2416]: ===============================================================
May 2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.540238, 0] ../lib/util/fault.c:73(fault_report)
May 2 16:25:54 jggl winbindd[2416]: INTERNAL ERROR: Signal 11 in pid 2416 (4.1.6-Ubuntu)
May 2 16:25:54 jggl winbindd[2416]: Please read the Trouble-Shooting section of the Samba HOWTO
May 2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.540263, 0] ../lib/util/fault.c:75(fault_report)
May 2 16:25:54 jggl winbindd[2416]: ===============================================================
May 2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.540295, 0] ../source3/lib/util.c:785(smb_panic_s3)
May 2 16:25:54 jggl winbindd[2416]: PANIC (pid 2416): internal error
May 2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.585897, 0] ../source3/lib/util.c:896(log_stack_trace)
May 2 16:25:54 jggl winbindd[2416]: BACKTRACE: 27 stack frames:
May 2 16:25:54 jggl winbindd[2416]: #0 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f6d3e2fff3a]
May 2 16:25:54 jggl winbindd[2416]: #1 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f6d3e300010]
May 2 16:25:54 jggl winbindd[2416]: #2 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(smb_panic+0x2f) [0x7f6d425d9c6f]
May 2 16:25:54 jggl winbindd[2416]: #3 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(+0x1ae86) [0x7f6d425d9e86]
May 2 16:25:54 jggl winbindd[2416]: #4 /lib/x86_64-linux-gnu/libpthread.so.0(+0x10340) [0x7f6d42a07340]
May 2 16:25:54 jggl winbindd[2416]: #5 /usr/lib/x86_64-linux-gnu(krb5_storage_free+0x1) [0x7f6d3ce45441]
May 2 16:25:54 jggl winbindd[2416]: #6 /usr/lib/x86_64-linux-gnu(+0x42465) [0x7f6d3ce2b465]
May 2 16:25:54 jggl winbindd[2416]: #7 /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(+0x86b1) [0x7f6d3ee756b1]
May 2 16:25:54 jggl winbindd[2416]: #8 /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(gse_krb5_get_server_keytab+0xfb) [0x7f6d3ee75beb]
May 2 16:25:54 jggl winbindd[2416]: #9 /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(+0xa7aa) [0x7f6d3ee777aa]
May 2 16:25:54 jggl winbindd[2416]: #10 /usr/lib/x86_64-linux-gnu/libgensec.so.0(gensec_start_mech+0x71) [0x7f6d3f3012b1]
May 2 16:25:54 jggl winbindd[2416]: #11 /usr/lib/x86_64-linux-gnu/libgensec.so.0(gensec_start_mech_by_oid+0x26) [0x7f6d3f301586]
May 2 16:25:54 jggl winbindd[2416]: #12 /usr/sbin/winbindd(kerberos_return_pac+0x435) [0x7f6d42e66da5]
May 2 16:25:54 jggl winbindd[2416]: #13 /usr/sbin/winbindd(winbindd_dual_pam_auth+0xec4) [0x7f6d42e78884]
May 2 16:25:54 jggl winbindd[2416]: #14 /usr/sbin/winbindd(+0x5337c) [0x7f6d42e8d37c]
May 2 16:25:54 jggl winbindd[2416]: #15 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x867b) [0x7f6d3c37167b]
May 2 16:25:54 jggl winbindd[2416]: #16 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x6b27) [0x7f6d3c36fb27]
May 2 16:25:54 jggl winbindd[2416]: #17 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d) [0x7f6d3c36c5ed]
May 2 16:25:54 jggl winbindd[2416]: #18 /usr/sbin/winbindd(+0x55702) [0x7f6d42e8f702]
May 2 16:25:54 jggl winbindd[2416]: #19 /usr/sbin/winbindd(+0x55db5) [0x7f6d42e8fdb5]
May 2 16:25:54 jggl winbindd[2416]: #20 /usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_immediate+0xd4) [0x7f6d3c36ce14]
May 2 16:25:54 jggl winbindd[2416]: #21 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x8437) [0x7f6d3c371437]
May 2 16:25:54 jggl winbindd[2416]: #22 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x6b27) [0x7f6d3c36fb27]
May 2 16:25:54 jggl winbindd[2416]: #23 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d) [0x7f6d3c36c5ed]
May 2 16:25:54 jggl winbindd[2416]: #24 /usr/sbin/winbindd(main+0xad2) [0x7f6d42e5ee42]
May 2 16:25:54 jggl winbindd[2416]: #25 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f6d3bfc4ec5]
May 2 16:25:54 jggl winbindd[2416]: #26 /usr/sbin/winbindd(+0x25532) [0x7f6d42e5f532]
May 2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.586279, 0] ../source3/lib/dumpcore.c:312(dump_core)
May 2 16:25:54 jggl winbindd[2416]: unable to change to /var/log/samba/cores/winbindd
May 2 16:25:54 jggl winbindd[2416]: refusing to dump core
Attempting to validate passwords via wbinfo works fine, nss works fine,
etc.
The segfault prevents the login from succeeding, so pam winbind is
basically unusable.
This is a regression, this config has worked here on various Ubuntu's
for at least 5 years.
$ cat /etc/security/pam_winbind.conf
[global]
;debug=yes
;debug_state=yes
require_membership_of=ORCORP\orc
krb5_auth=yes
$ cat /etc/samba/smb.conf
[global]
workgroup = ORCORP
realm = ADS.ORCORP.CA
os level = 0
log level = 3
security = ads
password server = ads0.ads.orcorp.ca
kerberos method = secrets and keytab
guest account = nobody
invalid users = root
unix charset = "UTF8"
obey pam restrictions = yes
dns proxy = no
#idmap domains = ORCORP
idmap config ORCORP:backend = ad
idmap config ORCORP:readonly = yes
#idmap config ORCORP:default = yes
idmap config ORCORP:range = 1000-11000
idmap config ORCORP:schema_mode = rfc2307
idmap backend = tdb
idmap uid = 300000000 - 310000000
idmap gid = 300000000 - 310000000
winbind nss info = rfc2307
winbind use default domain = yes
winbind offline logon = yes
winbind refresh tickets = yes
winbind normalize names = yes
winbind enum groups = yes
** Affects: samba (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1315560
Title:
winbind segfaults during pam login
Status in “samba” package in Ubuntu:
New
Bug description:
Attempting to login via PAM causes winbind to segfault and log this to
syslog:
May 2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.540190, 0] ../lib/util/fault.c:72(fault_report)
May 2 16:25:54 jggl winbindd[2416]: ===============================================================
May 2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.540238, 0] ../lib/util/fault.c:73(fault_report)
May 2 16:25:54 jggl winbindd[2416]: INTERNAL ERROR: Signal 11 in pid 2416 (4.1.6-Ubuntu)
May 2 16:25:54 jggl winbindd[2416]: Please read the Trouble-Shooting section of the Samba HOWTO
May 2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.540263, 0] ../lib/util/fault.c:75(fault_report)
May 2 16:25:54 jggl winbindd[2416]: ===============================================================
May 2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.540295, 0] ../source3/lib/util.c:785(smb_panic_s3)
May 2 16:25:54 jggl winbindd[2416]: PANIC (pid 2416): internal error
May 2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.585897, 0] ../source3/lib/util.c:896(log_stack_trace)
May 2 16:25:54 jggl winbindd[2416]: BACKTRACE: 27 stack frames:
May 2 16:25:54 jggl winbindd[2416]: #0 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f6d3e2fff3a]
May 2 16:25:54 jggl winbindd[2416]: #1 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f6d3e300010]
May 2 16:25:54 jggl winbindd[2416]: #2 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(smb_panic+0x2f) [0x7f6d425d9c6f]
May 2 16:25:54 jggl winbindd[2416]: #3 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(+0x1ae86) [0x7f6d425d9e86]
May 2 16:25:54 jggl winbindd[2416]: #4 /lib/x86_64-linux-gnu/libpthread.so.0(+0x10340) [0x7f6d42a07340]
May 2 16:25:54 jggl winbindd[2416]: #5 /usr/lib/x86_64-linux-gnu(krb5_storage_free+0x1) [0x7f6d3ce45441]
May 2 16:25:54 jggl winbindd[2416]: #6 /usr/lib/x86_64-linux-gnu(+0x42465) [0x7f6d3ce2b465]
May 2 16:25:54 jggl winbindd[2416]: #7 /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(+0x86b1) [0x7f6d3ee756b1]
May 2 16:25:54 jggl winbindd[2416]: #8 /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(gse_krb5_get_server_keytab+0xfb) [0x7f6d3ee75beb]
May 2 16:25:54 jggl winbindd[2416]: #9 /usr/lib/x86_64-linux-gnu/samba/libgse.so.0(+0xa7aa) [0x7f6d3ee777aa]
May 2 16:25:54 jggl winbindd[2416]: #10 /usr/lib/x86_64-linux-gnu/libgensec.so.0(gensec_start_mech+0x71) [0x7f6d3f3012b1]
May 2 16:25:54 jggl winbindd[2416]: #11 /usr/lib/x86_64-linux-gnu/libgensec.so.0(gensec_start_mech_by_oid+0x26) [0x7f6d3f301586]
May 2 16:25:54 jggl winbindd[2416]: #12 /usr/sbin/winbindd(kerberos_return_pac+0x435) [0x7f6d42e66da5]
May 2 16:25:54 jggl winbindd[2416]: #13 /usr/sbin/winbindd(winbindd_dual_pam_auth+0xec4) [0x7f6d42e78884]
May 2 16:25:54 jggl winbindd[2416]: #14 /usr/sbin/winbindd(+0x5337c) [0x7f6d42e8d37c]
May 2 16:25:54 jggl winbindd[2416]: #15 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x867b) [0x7f6d3c37167b]
May 2 16:25:54 jggl winbindd[2416]: #16 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x6b27) [0x7f6d3c36fb27]
May 2 16:25:54 jggl winbindd[2416]: #17 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d) [0x7f6d3c36c5ed]
May 2 16:25:54 jggl winbindd[2416]: #18 /usr/sbin/winbindd(+0x55702) [0x7f6d42e8f702]
May 2 16:25:54 jggl winbindd[2416]: #19 /usr/sbin/winbindd(+0x55db5) [0x7f6d42e8fdb5]
May 2 16:25:54 jggl winbindd[2416]: #20 /usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_immediate+0xd4) [0x7f6d3c36ce14]
May 2 16:25:54 jggl winbindd[2416]: #21 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x8437) [0x7f6d3c371437]
May 2 16:25:54 jggl winbindd[2416]: #22 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x6b27) [0x7f6d3c36fb27]
May 2 16:25:54 jggl winbindd[2416]: #23 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d) [0x7f6d3c36c5ed]
May 2 16:25:54 jggl winbindd[2416]: #24 /usr/sbin/winbindd(main+0xad2) [0x7f6d42e5ee42]
May 2 16:25:54 jggl winbindd[2416]: #25 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f6d3bfc4ec5]
May 2 16:25:54 jggl winbindd[2416]: #26 /usr/sbin/winbindd(+0x25532) [0x7f6d42e5f532]
May 2 16:25:54 jggl winbindd[2416]: [2014/05/02 16:25:54.586279, 0] ../source3/lib/dumpcore.c:312(dump_core)
May 2 16:25:54 jggl winbindd[2416]: unable to change to /var/log/samba/cores/winbindd
May 2 16:25:54 jggl winbindd[2416]: refusing to dump core
Attempting to validate passwords via wbinfo works fine, nss works
fine, etc.
The segfault prevents the login from succeeding, so pam winbind is
basically unusable.
This is a regression, this config has worked here on various Ubuntu's
for at least 5 years.
$ cat /etc/security/pam_winbind.conf
[global]
;debug=yes
;debug_state=yes
require_membership_of=ORCORP\orc
krb5_auth=yes
$ cat /etc/samba/smb.conf
[global]
workgroup = ORCORP
realm = ADS.ORCORP.CA
os level = 0
log level = 3
security = ads
password server = ads0.ads.orcorp.ca
kerberos method = secrets and keytab
guest account = nobody
invalid users = root
unix charset = "UTF8"
obey pam restrictions = yes
dns proxy = no
#idmap domains = ORCORP
idmap config ORCORP:backend = ad
idmap config ORCORP:readonly = yes
#idmap config ORCORP:default = yes
idmap config ORCORP:range = 1000-11000
idmap config ORCORP:schema_mode = rfc2307
idmap backend = tdb
idmap uid = 300000000 - 310000000
idmap gid = 300000000 - 310000000
winbind nss info = rfc2307
winbind use default domain = yes
winbind offline logon = yes
winbind refresh tickets = yes
winbind normalize names = yes
winbind enum groups = yes
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1315560/+subscriptions
More information about the foundations-bugs
mailing list