Hi,

I've got a big problem since my new samba servers are in 3.0.23c version, no problems before. The server is only a file server and domain member in a Win2K Active Directory domain (4 replicated DC, 1 domain, no forest).

My problem:

Anytime I try to connect a share through any kind of client (MacOS cifs client, smbclient, windows win2K pro, ...) the client can't mount the share and I've got this in my user log on the samba server :

[2006/10/31 13:04:00, 0] auth/ auth_util.c:create_builtin_administrators(785)
  create_builtin_administrators: Failed to create Administrators
[2006/10/31 13:04:00, 0] auth/auth_util.c:create_builtin_users(751)
  create_builtin_users: Failed to create Users
[2006/10/31 13:04:00, 0] lib/fault.c:fault_report(41)
  ===============================================================
[2006/10/31 13:04:00, 0] lib/fault.c:fault_report(42)
  INTERNAL ERROR: Signal 11 in pid 9402 (3.0.23c-2)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2006/10/31 13:04:00, 0] lib/fault.c:fault_report(44)
  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2006/10/31 13:04:00, 0] lib/fault.c:fault_report(45)
  ===============================================================
[2006/10/31 13:04:00, 0] lib/util.c:smb_panic(1614)
  PANIC (pid 9402): internal error
[2006/10/31 13:04:00, 0] lib/util.c:log_stack_trace(1721)
  BACKTRACE: 20 stack frames:
   #0 smbd(log_stack_trace+0x1c) [0x5555557586cc]
   #1 smbd(smb_panic+0x43) [0x5555557587b3]
   #2 smbd [0x555555746b82]
   #3 /lib64/libpthread.so.0 [0x2aaaac259de0]
   #4 /lib64/libc.so.6(strlen+0x30) [0x2aaaad3c9510]
   #5 /lib64/libc.so.6(__strdup+0x16) [0x2aaaad3c9246]
   #6 /lib64/libnsl.so.1(nis_list+0x563) [0x2aaaacf3efa3]
#7 /lib64/libnss_nisplus.so.2(_nss_nisplus_setnetgrent+0x8a) [0x2aaaaf380e2a]
   #8 /lib64/libc.so.6(innetgr+0xcf) [0x2aaaad43dfff]
   #9 smbd(user_in_netgroup+0x6a) [0x5555555c679a]
   #10 smbd(token_contains_name_in_list+0x205) [0x5555555c8d05]
   #11 smbd(change_to_user+0x476) [0x555555601c56]
   #12 smbd [0x55555561c8eb]
   #13 smbd(make_connection+0x168) [0x55555561d8d8]
   #14 smbd(reply_tcon_and_X+0x1fe) [0x5555555e95fe]
   #15 smbd [0x5555556195d2]
   #16 smbd(smbd_process+0x720) [0x55555561a5e0]
   #17 smbd(main+0xa0b) [0x5555557ed24b]
   #18 /lib64/libc.so.6(__libc_start_main+0xf4) [0x2aaaad371a44]
   #19 smbd [0x5555555b2409]
[2006/10/31 13:04:00, 0] lib/fault.c:dump_core(173)
  dumping core in /var/log/samba/cores/smbd

Nothing strange in the other log files except this message in the .log file :

[2006/10/31 13:03:46, 0] auth/ auth_util.c:create_builtin_administrators(785)
  create_builtin_administrators: Failed to create Administrators
[2006/10/31 13:03:46, 0] auth/auth_util.c:create_builtin_users(751)
  create_builtin_users: Failed to create Users

With a smbclient 3.0.23c-1.fc5 I've got this message :
Domain=[myworkgroup] OS=[Unix] Server=[Samba 3.0.23c-2]
tree connect failed: Call returned zero bytes (EOF)

My configuration:

Testted on Linux FC6 or FC5, x86_64 or i386

On the server:
kinit OK
klist OK
net ads join -> OK
net ads testjoin -> OK
wbinfo --domain-users -> OK
getent passwd -> OK
wbinfo --domain-groups -> OK
getent group -> OK
net groupmap list -> empty
DNS entries (direct & reverse) -> OK
hosts file only make localhost declaration
fixed IP server

SMB.conf:

[global]

   netbios name = NAME
   server string = comment

   workgroup    = myworkgroup
   realm        = my.realm.com
   security     = ADS
   local master = no
   lanman auth  = no

   admin users        = @"myworkgroup\Admins du domaine"
   restrict anonymous = yes

   load printers = no

   log file     = /var/log/samba/%U.log
   max log size = 2048

   socket options     = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   dns proxy          = yes
   name resolve order = host
   deadtime           = 20

   template shell        = /bin/bash
   template homedir      = /home/%U
   idmap uid             = 10000-500000
   idmap gid             = 10000-500000
   idmap backend         = rid:"myworkgroup=10000-500000"
   allow trusted domains = no

   winbind enum users            = yes
   winbind enum groups           = yes
   winbind nested groups         = yes
   winbind use default domain    = yes

   unix charset    = UTF-8
   dos charset     = CP850
   display charset = UTF-8

   getwd cache     = yes

[homes]
comment          = Repertoire personnel
writable         = yes
browseable       = no
read only        = no
create mask      = 0700
directory mask   = 0700
force user       = %U
force group      = "Utilisa. du domaine"

[test]
comment = test
path = /tmp
browseable = no
writable = yes
read only = no

I tried to add/change these parameters and still got the same error:

   auth methods = winbind
   algorithmic rid base = 9000
   username map = /etc/samba/smbusers
   idmap uid             = 9000-500000
   idmap gid             = 9000-500000
idmap backend = rid:"BUILTIN=9000-9999,myworkgroup=10000-500000"

nsswitch.conf file:

passwd:     files winbind
group:      files winbind

krb5.conf file:

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
ticket_lifetime = 24000
default_realm = MY.REALM.COM
dns_lookup_realm = false
dns_lookup_kdc = true

[realms]
MY.REALM.COM = {
  default_domain = my.realm.com
}

[domain_realm]
.my.realm.com = MY.REALM.COM
my.realm.com = MY.REALM.COM

[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false
}

testparm:

Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[test]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER

Sounds like the groupmap change "problem" in 3.0.23 but I can't find anything on the web that can help me solving that problem. I'm not even sure that my problem come from the groupmap changes in the 3.0.23 samba version.

Best regards,

Sebastien.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to