Re: [Samba] Question on : Winbindd dumps core in find_builtin_domain() at nsswitch/winbindd_util.c:673
On Tue, Sep 02, 2008 at 05:54:02AM -0600, Har Gagan Sahai wrote: > This is happening in our specific Active Directory setup. > It is reaching this path finally and overwriting the > builtin domain. This is causing the dump later. We have a > bug raised in Novell on this issue (bug #292609, not sure > whether you will be able to access this.). The thing I don't understand: We're adding a domain with global_sid_Builtin using add_trusted_domain(). That sets the domain->internal flag according to is_internal_domain() which returns true for global_sid_Builtin. The only caller of set_dc_type_and_flags() is init_dc_connection_network(). That never calls set_dc_type_and_flags() if domain->internal is true. So I don't see a way how we can end up in set_dc_type_and_flags() with domain->sid being global_sid_Builtin. You should investigate that first. And, by the way, global_sid_Builtin is never ever an active directory domain. Volker pgpG3wXMuv6LK.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Question on : Winbindd dumps core in find_builtin_domain() at nsswitch/winbindd_util.c:673
Hi Volker,
This is happening in our specific Active Directory setup. It is reaching this
path finally and overwriting the builtin domain. This is causing the dump
later. We have a bug raised in Novell on this issue (bug #292609, not sure
whether you will be able to access this.).
regards,
Har Gagan Sahai
>>> Volker Lendecke <[EMAIL PROTECTED]> 08/25/08 1:56 PM >>>
On Sat, Aug 23, 2008 at 02:49:25AM -0600, Tukaram Laxmeshwar wrote:
> We code changes to fix this issue and verified that it is not dumping any
> more.
> Following is the patch ,
> --- nsswitch/winbindd_cm.c.old 2008-05-15 13:22:13.0 +0530
> +++ nsswitch/winbindd_cm.c 2008-05-15 13:21:55.0 +0530
> @@ -1691,6 +1691,10 @@
> return;
> }
>
> + if (sid_equal(&domain->sid, &global_sid_Builtin)) {
> + domain->active_directory = False;
> + goto done;
> + }
> result = rpccli_lsa_open_policy2(cli, mem_ctx, True,
> SEC_RIGHTS_MAXIMUM_ALLOWED, &pol);
>
> Can anybody tell me if this has been fixed in any of the recent patches ?
No, very likely that is not changed.
Your patch might fix it, but to me it seems the wrong place
to fix. For S-1-5-32 we should *never* end up in that
routine. How does winbind get there? For internal domains we
should never connect to the network.
Volker
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Question on : Winbindd dumps core in find_builtin_domain () at nsswitch/winbindd_util.c:673
On Sat, Aug 23, 2008 at 02:49:25AM -0600, Tukaram Laxmeshwar wrote:
> We code changes to fix this issue and verified that it is not dumping any
> more.
> Following is the patch ,
> --- nsswitch/winbindd_cm.c.old 2008-05-15 13:22:13.0 +0530
> +++ nsswitch/winbindd_cm.c 2008-05-15 13:21:55.0 +0530
> @@ -1691,6 +1691,10 @@
> return;
> }
>
> + if (sid_equal(&domain->sid, &global_sid_Builtin)) {
> + domain->active_directory = False;
> + goto done;
> + }
> result = rpccli_lsa_open_policy2(cli, mem_ctx, True,
> SEC_RIGHTS_MAXIMUM_ALLOWED, &pol);
>
> Can anybody tell me if this has been fixed in any of the recent patches ?
No, very likely that is not changed.
Your patch might fix it, but to me it seems the wrong place
to fix. For S-1-5-32 we should *never* end up in that
routine. How does winbind get there? For internal domains we
should never connect to the network.
Volker
pgpVCSVR6NvT8.pgp
Description: PGP signature
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Question on : Winbindd dumps core in find_builtin_domain () at nsswitch/winbindd_util.c:673
We are seeing winbindd dumping core in find_builtin_domain () at
nsswitch/winbindd_util.c:673.
We have analyzed the core and found that when there are no built domains it
sends smb_panic().
Looking in to the built domain we found that the built domain is being
overwritten.
Following is the stack trace from the system,
#0 0xb7cb8866 in raise () from /lib/libc.so.6
#1 0xb7cb9f23 in abort () from /lib/libc.so.6
#2 0x800b20ca in dump_core () at lib/fault.c:184
#3 0x800c68f8 in smb_panic (why=0x801ccb80 "Could not find BUILTIN domain\n")
at lib/util.c:1618
#4 0x80042750 in find_builtin_domain () at nsswitch/winbindd_util.c:673
#5 0x8006af52 in winbindd_gettoken_async (mem_ctx=0x80236000,
user_sid=0x8024caa0, cont=0x8003cb90 ,
private_data=0x8024ca90) at nsswitch/winbindd_async.c:1049
#6 0x8003ca89 in getgroups_usersid_recv (private_data=0x8024ca90, success=1,
sid=0xbfd177a8, type=SID_NAME_USER)
at nsswitch/winbindd_group.c:1203
#7 0x8006885f in lookupname_recv (mem_ctx=0x80236000, success=1,
response=0x802bb9fc, c=0x8003ca10, private_data=0x8024ca90)
at nsswitch/winbindd_async.c:664
#8 0x800677b7 in do_async_recv (private_data=0x802bb2a8, success=1) at
nsswitch/winbindd_async.c:57
#9 0x80065942 in async_reply_recv (private_data=0x802a8770, success=1) at
nsswitch/winbindd_dual.c:211
#10 0x80039808 in rw_callback (event=0x802a97bc, flags=1) at
nsswitch/winbindd.c:376
#11 0x80038c9d in main (argc=1140850688, argv=0x340b) at
nsswitch/winbindd.c:810
We code changes to fix this issue and verified that it is not dumping any more.
Following is the patch ,
--- nsswitch/winbindd_cm.c.old 2008-05-15 13:22:13.0 +0530
+++ nsswitch/winbindd_cm.c 2008-05-15 13:21:55.0 +0530
@@ -1691,6 +1691,10 @@
return;
}
+ if (sid_equal(&domain->sid, &global_sid_Builtin)) {
+ domain->active_directory = False;
+ goto done;
+ }
result = rpccli_lsa_open_policy2(cli, mem_ctx, True,
SEC_RIGHTS_MAXIMUM_ALLOWED, &pol);
Can anybody tell me if this has been fixed in any of the recent patches ?
Thanks,
Tukaram
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
