Package: samba
Version: 3.0.23c-1
Severity: grave

When I upgrade to samba 3.0.23c-1 the shares causes a segmentation fault
in the smbd, but the process don't stop.

Here is a copy of the email send to root:

--- BEGIN ---
Using host libthread_db library "/lib/tls/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread -1212447040 (LWP 10797)]
0xb7cc57be in waitpid () from /lib/tls/libc.so.6
#0  0xb7cc57be in waitpid () from /lib/tls/libc.so.6
#1  0xb7c6d699 in strtold_l () from /lib/tls/libc.so.6
#2  0xb7dfe53d in system () from /lib/tls/libpthread.so.0
#3  0x0822b8ba in smb_panic (why=0x83208a7 "internal error") at
lib/util.c:1601
#4  0x08219f0a in sig_fault (sig=6) at lib/fault.c:47
#5  <signal handler called>
#6  0xb7c60947 in raise () from /lib/tls/libc.so.6
#7  0xb7c620c9 in abort () from /lib/tls/libc.so.6
#8  0xb7c95fda in __fsetlocking () from /lib/tls/libc.so.6
#9  0xb7ca02c6 in realloc () from /lib/tls/libc.so.6
#10 0x0822c830 in Realloc (p=0xb7d65ff4, size=2, free_old_on_error=1)
    at lib/util.c:1021
#11 0x082259b3 in add_sid_to_array (mem_ctx=0x6, sid=0xbfae68f8,
    sids=0xbfae69d0, num=0xbfae69cc) at lib/util_sid.c:590
#12 0x0826b53c in create_token_from_username (mem_ctx=0x0,
    username=0x83f2bf8 "nobody", is_guest=1, uid=0x83bcac0, gid=0x83bcac4,
    found_username=0xbfae7144, token=0x83bcae4) at auth/auth_util.c:1230
#13 0x080ed26f in make_connection_snum (snum=2, vuser=0x83f4b90, password=
      {data = 0x83ef208 "", length = 1, free = 0x82290f0 <free_data_blob>},
    pdev=0xbfae7280 "A:", status=0xbfae7afc) at smbd/service.c:541
#14 0x080eeaef in make_connection (service_in=0xbfae79f0 "COMPARTIDOS",
    password=
      {data = 0x83ef208 "", length = 1, free = 0x82290f0 <free_data_blob>},
    pdev=0xbfae78f0 "A:", vuid=100, status=0xbfae7afc) at smbd/service.c:1118
#15 0x080b8b62 in reply_tcon_and_X (conn=0x0, inbuf=0xb7997008 "",
    outbuf=0xb7976008 "", length=77, bufsize=2920) at smbd/reply.c:670
#16 0x080ea2f4 in switch_message (type=117, inbuf=0xb7997008 "",
    outbuf=0xb7976008 "", size=77, bufsize=2920) at smbd/process.c:991
#17 0x080eb4b8 in smbd_process () at smbd/process.c:1018
#18 0x082c281f in main (argc=) at smbd/server.c:1024
--- END ---

And here is the smb.conf with some shares excludes for security reasons,
but the problem is with all shares:

--- BEGIN ---
[global]
   workgroup = INDEGA
   netbios name = servidor-01
   server string = Servidor Samba
   interfaces = eth0
   bind interfaces only = yes
;   smb ports = 139 445
   smb ports = 139
   wins support = yes
;   wins server = w.x.y.z
   remote announce = 192.168.2.255/INDEGA 192.168.3.255/INDEGA
   dns proxy = yes
   name resolve order = wins lmhosts hosts bcast
;   loglevel = 1
   log file = /var/log/samba/log.%m
   max log size = 1000
;   syslog only = no
   syslog = 0
   panic action = /usr/share/samba/panic-action %d
   security = user
   encrypt passwords = true
   passdb backend = tdbsam
   obey pam restrictions = yes
   guest account = nobody
;   invalid users = root
   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
   pam password change = yes
   username map = /etc/samba/smbusers
   load printers = no
;   printing = bsd
;   printcap name = /etc/printcap
;   printing = cups
;   printcap name = cups
;   printer admin = @ntadmin
;   preserve case = yes
;   short preserve case = yes
;   include = /home/samba/etc/smb.conf.%m
   socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=4096 SO_SNDBUF=4096
;   message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' &
;   local master = yes
   domain master = yes
   preferred master = yes
   os level = 128
   time server = yes
;   idmap uid = 10000-20000
;   idmap gid = 10000-20000
;   template shell = /bin/bash
   add user script = /usr/sbin/useradd -m %u
   delete user script = /user/sbin/userdel -r %u
   add group script = /usr/sbin/groupadd %g
   delete group script = /usr/sbin/groupdel %g
   add user to group script = /usr/sbin/usermod -G %g %u
   add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u
;   shutdown script = /var/lib/samba/scripts/shutdown.sh
;   abort shutdown script = /sbin/shutdown -c
   logon script = scripts\%U.bat
;   logon path = \\%L\profiles\%U
;   logon drive = X:
;   logon home = \\%L\%U
   logon path =
   logon home =
   domain logons = yes
   utmp = yes
   map acl inherit = yes
   veto files = /*.eml/*.nws/*.{*}/
   veto oplock files = /*.doc/*.xls/*.mdb/

[IPC$]
   path = /tmp
   hosts allow = 10.10.21.0/24 192.168.2.0/24 192.168.3.0/24
   hosts deny = 0.0.0.0/0
   browseable = no

;[homes]
;   comment = Home Directories
;   valid users = %S
;   read only = yes
;   browseable = no
;   create mask = 0700
;   directory mask = 0700

[netlogon]
   comment = Network Logon Service
   path = /var/lib/samba/netlogon
   guest ok = yes
   locking = no
   browseable = no
;   writable = no
;   share modes = no

;[profiles]
;   comment = Profile Share
;   path = /var/lib/samba/profiles
;   read only = yes
;   profile acls = yes
;   browseable = no

;[printers]
;   comment = All Printers
;   browseable = no
;   path = /tmp
;   printable = yes
;   public = no
;   writable = no
;   create mode = 0700

;[print$]
;   comment = Printer Drivers
;   path = /var/lib/samba/printers
;   browseable = yes
;   read only = yes
;   guest ok = no
;   write list = root, @ntadmin

[compartidos]
   comment = Compartidos
   path = /var/lib/samba/datos/compartidos
   guest only = yes
   valid users = +users
   write list = +users
   create mask = 777
   directory mask = 777
--- END ---

And the log of one machine is:

--- BEGIN ---
[2006/09/25 19:00:51, 0] lib/fault.c:fault_report(41)
  ===============================================================
[2006/09/25 19:00:51, 0] lib/fault.c:fault_report(42)
  INTERNAL ERROR: Signal 6 in pid 11475 (3.0.23c)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2006/09/25 19:00:51, 0] lib/fault.c:fault_report(44)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2006/09/25 19:00:51, 0] lib/fault.c:fault_report(45)
  ===============================================================
[2006/09/25 19:00:51, 0] lib/util.c:smb_panic(1592)
  PANIC (pid 11475): internal error
[2006/09/25 19:00:51, 0] lib/util.c:log_stack_trace(1699)
  BACKTRACE: 18 stack frames:
   #0 /usr/sbin/smbd(log_stack_trace+0x23) [0x822b763]
   #1 /usr/sbin/smbd(smb_panic+0x46) [0x822b856]
   #2 /usr/sbin/smbd [0x8219f0a]
   #3 [0xffffe420]
   #4 /lib/tls/libc.so.6(abort+0x109) [0xb7c400c9]
   #5 /lib/tls/libc.so.6 [0xb7c73fda]
   #6 /lib/tls/libc.so.6(__libc_realloc+0x2c6) [0xb7c7e2c6]
   #7 /usr/sbin/smbd(Realloc+0x70) [0x822c830]
   #8 /usr/sbin/smbd(add_sid_to_array+0x93) [0x82259b3]
   #9 /usr/sbin/smbd(create_token_from_username+0x71c) [0x826b53c]
   #10 /usr/sbin/smbd [0x80ed26f]
   #11 /usr/sbin/smbd(make_connection+0x13f) [0x80eeaef]
   #12 /usr/sbin/smbd(reply_tcon_and_X+0x1b2) [0x80b8b62]
   #13 /usr/sbin/smbd [0x80ea2f4]
   #14 /usr/sbin/smbd(smbd_process+0x6f8) [0x80eb4b8]
   #15 /usr/sbin/smbd(main+0x10df) [0x82c281f]
   #16 /lib/tls/libc.so.6(__libc_start_main+0xc8) [0xb7c2aea8]
   #17 /usr/sbin/smbd [0x8082a31]
[2006/09/25 19:00:51, 0] lib/util.c:smb_panic(1600)
  smb_panic(): calling panic action [/usr/share/samba/panic-action 11475]
Cannot access memory at address 0x2cd3
[2006/09/25 19:00:51, 0] lib/util.c:smb_panic(1608)
  smb_panic(): action returned status 0
[2006/09/25 19:00:51, 0] lib/fault.c:dump_core(173)
  dumping core in /var/log/samba/cores/smbd
[2006/09/25 19:00:52, 1] smbd/service.c:make_connection_snum(941)
  informatica-07 (10.10.21.169) connect to service netlogon initially as
user rzayas (uid=1000, gid=100) (pid 11486)
[2006/09/25 19:00:52, 0] smbd/service.c:make_connection(1102)
  informatica-07 (10.10.21.169) couldn't find service backup
[2006/09/25 19:01:05, 1] smbd/service.c:close_cnum(1141)
  informatica-07 (10.10.21.169) closed connection to service netlogon
[2006/09/25 19:07:00, 1] smbd/service.c:make_connection_snum(941)
  informatica-07 (10.10.21.169) connect to service netlogon initially as
user rzayas (uid=1000, gid=100) (pid 11535)
[2006/09/25 19:07:00, 1] smbd/service.c:close_cnum(1141)
  informatica-07 (10.10.21.169) closed connection to service netlogon
[2006/09/25 19:07:01, 1] smbd/service.c:make_connection_snum(941)
  informatica-07 (10.10.21.169) connect to service netlogon initially as
user rzayas (uid=1000, gid=100) (pid 11535)
[2006/09/25 19:09:06, 1] smbd/service.c:close_cnum(1141)
  informatica-07 (10.10.21.169) closed connection to service netlogon
*** glibc detected *** realloc(): invalid pointer: 0x083bc098 ***
[2006/09/25 19:09:59, 0] lib/fault.c:fault_report(41)
  ===============================================================
--- END ---

I'm using Debian testing 2.6.16 #2 SMP i686

I tested downgrade samba to 2.0.14 downloading de package from the stable
release, and it works, but it can't read the tdb file, because is and
older version, then I need to change everybody password, and rejoin XP to
the domain, is a huge work.

Please, I need a hurry solution, this service is vital in my work.






-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to