[Samba] Samba 4.4.5 segmentation fault on Darwin

[Michael A Weber]

First: Long-time samba user (since 2004), and my first reach-out to everyone, so thank you for the great work!

New issue: Both joining an AD domain and smbd fail with a segmentation fault on the Mac. I’ve tried to debug it the best I can but I’m not a C developer and can’t figure out what is the cause.

For smbd, I have the log errors and the stack trace from it which I hope will provide some clues. For net ads join, I have it on full debug (-d 10), but the only thing I get is the segmentation fault at the end. If there is a log file which may have more of a clue, I don’t know where to find it, but I’ll be happy to get any information out of it that I can.

I know… I hear the groans already. “Mac OS X????” Yep… I know. Sadly, I need to configure a Mac OS X machine as a member server to an AD domain. I know… YUCK. However, it’s something I must do.

I’m going to attempt to provide information that may help to identify the problem, but if there is anything else needed, I’ll do what I can to get it. Please just let me know.

Gratefully,

Mike



Here is the info from smbd log:


*****************************************************************************************************************************************************

[2016/07/29 16:09:59.994149, 0] ../source3/lib/util.c:1399(set_maxfiles)
set_maxfiles: setrlimit for RLIMIT_NOFILE for 16424 files failed with error Invalid argument
[2016/07/29 16:10:00.009840, 0] ../lib/util/become_daemon.c:124(daemon_ready)
STATUS=daemon 'smbd' finished starting up and ready to serve connections
[2016/07/29 16:10:00.154074, 0] ../lib/util/fault.c:78(fault_report)
===============================================================
[2016/07/29 16:10:00.155925, 0] ../lib/util/fault.c:79(fault_report)
INTERNAL ERROR: Signal 11 in pid 1698 (4.4.5)
Please read the Trouble-Shooting section of the Samba HOWTO
[2016/07/29 16:10:00.157317, 0] ../lib/util/fault.c:81(fault_report)
===============================================================
[2016/07/29 16:10:00.159240, 0] ../source3/lib/util.c:791(smb_panic_s3)
PANIC (pid 1698): internal error
[2016/07/29 16:10:00.161906, 0] ../source3/lib/util.c:902(log_stack_trace)
BACKTRACE: 21 stack frames:
#0 0 libsmbconf.dylib 0x0000000102107e0a log_stack_trace + 42
#1 1 libsmbconf.dylib 0x0000000102107be8 smb_panic_s3 + 152
#2 2 libsamba-util.dylib 0x000000010155a687 smb_panic + 39
#3 3 libsamba-util.dylib 0x000000010155ac50 string_sub_once + 0
#4 4 libsamba-util.dylib 0x000000010155a653 sig_fault + 19
#5 5 libsystem_platform.dylib 0x00007fff913a752a _sigtramp + 26
#6 6 ??? 0x0000000083442f30 0x0 + 2202283824
#7 7 libsystem_c.dylib 0x00007fff82d45f13 __memcpy_chk + 22
#8 8 libgssapi-samba4.dylib 0x0000000101ab5d06 _gss_copy_oid + 150
#9 9 libgssapi-samba4.dylib 0x0000000101ab89e3 gss_import_name + 259
#10 10 libads-samba4.dylib 0x0000000102b58677 ads_generate_service_principal + 359
#11 11 libads-samba4.dylib 0x0000000102b57bde ads_sasl_spnego_bind + 974
#12 12 libads-samba4.dylib 0x0000000102b5761a ads_sasl_bind + 650
#13 13 libads-samba4.dylib 0x0000000102b4a2f9 ads_connect + 3097
#14 14 libsmbd-base-samba4.dylib 0x000000010160f8ea check_published_printers + 442
#15 15 libsmbd-base-samba4.dylib 0x000000010160375b nt_printing_init + 107
#16 16 libsmbd-base-samba4.dylib 0x00000001015f81ac print_backend_init + 636
#17 17 libsmbd-base-samba4.dylib 0x0000000101611282 printing_subsystem_init + 50
#18 18 smbd 0x000000010152e652 main + 7570
#19 19 libdyld.dylib 0x00007fff84fed5ad start + 1
#20 20 ??? 0x0000000000000001 0x0 + 1
[2016/07/29 16:10:00.173382, 0] ../source3/lib/dumpcore.c:303(dump_core)
dumping core in /usr/local/samba/var/cores/smbd

*****************************************************************************************************************************************************

(It says at the end that it’s core dumping to that location, but there is nothing in there.)




Here is the trailing end of the net -d 10 ads join command and failure:

*****************************************************************************************************************************************************

create_local_private_krb5_conf_for_domain: wrote file /usr/local/samba/var/lock/smb_krb5/krb5.conf.WEBERAUTOMOTIVE with realm INT.WEBERAUTOMOTIVE.COM KDC list = kdc = 192.168.75.76

sitename_fetch: Returning sitename for INT.WEBERAUTOMOTIVE.COM: "Default-First-Site-Name"
internal_resolve_name: looking up addc.int.weberautomotive.com#20 (sitename Default-First-Site-Name)
name addc.int.weberautomotive.com#20 found.
remove_duplicate_addrs2: looking for duplicate address/port pairs
ads_try_connect: sending CLDAP request to 192.168.75.76 (realm: int.weberautomotive.com)
&response->data.nt5_ex: struct NETLOGON_SAM_LOGON_RESPONSE_EX
command : LOGON_SAM_LOGON_RESPONSE_EX (23)
sbz : 0x0000 (0)
server_type : 0x000013fd (5117)
1: NBT_SERVER_PDC
1: NBT_SERVER_GC
1: NBT_SERVER_LDAP
1: NBT_SERVER_DS
1: NBT_SERVER_KDC
1: NBT_SERVER_TIMESERV
1: NBT_SERVER_CLOSEST
1: NBT_SERVER_WRITABLE
1: NBT_SERVER_GOOD_TIMESERV
0: NBT_SERVER_NDNC
0: NBT_SERVER_SELECT_SECRET_DOMAIN_6
1: NBT_SERVER_FULL_SECRET_DOMAIN_6
0: NBT_SERVER_ADS_WEB_SERVICE
0: NBT_SERVER_DS_8
0: NBT_SERVER_HAS_DNS_NAME
0: NBT_SERVER_IS_DEFAULT_NC
0: NBT_SERVER_FOREST_ROOT
domain_uuid : 8f9e1b80-b8a8-47fd-898b-b9e68b3bc463
forest : 'int.weberautomotive.com'
dns_domain : 'int.weberautomotive.com'
pdc_dns_name : 'addc.int.weberautomotive.com'
domain_name : 'WEBERAUTOMOTIVE'
pdc_name : 'ADDC'
user_name : ''
server_site : 'Default-First-Site-Name'
client_site : 'Default-First-Site-Name'
sockaddr_size : 0x00 (0)
sockaddr: struct nbt_sockaddr
sockaddr_family : 0x00000000 (0)
pdc_ip : (null)
remaining : DATA_BLOB length=0
next_closest_site : NULL
nt_version : 0x00000005 (5)
1: NETLOGON_NT_VERSION_1
0: NETLOGON_NT_VERSION_5
1: NETLOGON_NT_VERSION_5EX
0: NETLOGON_NT_VERSION_5EX_WITH_IP
0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE
0: NETLOGON_NT_VERSION_AVOID_NT4EMUL
0: NETLOGON_NT_VERSION_PDC
0: NETLOGON_NT_VERSION_IP
0: NETLOGON_NT_VERSION_LOCAL
0: NETLOGON_NT_VERSION_GC
lmnt_token : 0xffff (65535)
lm20_token : 0xffff (65535)
sitename_store: realm = [WEBERAUTOMOTIVE], sitename = [Default-First-Site-Name], expire = [2085923199]
Did not store value for AD_SITENAME/DOMAIN/WEBERAUTOMOTIVE, we already got it
sitename_store: realm = [int.weberautomotive.com], sitename = [Default-First-Site-Name], expire = [2085923199]
Did not store value for AD_SITENAME/DOMAIN/INT.WEBERAUTOMOTIVE.COM, we already got it
Successfully contacted LDAP server 192.168.75.76
Opening connection to LDAP server '192.168.75.76:389', timeout 15 seconds
Initialized connection for LDAP server 'ldap://192.168.75.76:389'
Connected to LDAP server addc.int.weberautomotive.com
ads_closest_dc: NBT_SERVER_CLOSEST flag set
saf_store: domain = [WEBERAUTOMOTIVE], server = [addc.int.weberautomotive.com], expire = [1469828016]
Adding cache entry with key=[SAF/DOMAIN/WEBERAUTOMOTIVE] and timeout=[Fri Jul 29 16:33:36 2016 CDT] (900 seconds ahead)
saf_store: domain = [int.weberautomotive.com], server = [addc.int.weberautomotive.com], expire = [1469828016]
Adding cache entry with key=[SAF/DOMAIN/INT.WEBERAUTOMOTIVE.COM] and timeout=[Fri Jul 29 16:33:36 2016 CDT] (900 seconds ahead)
KDC time offset is -187 seconds
Found SASL mechanism GSS-SPNEGO
ads_sasl_spnego_bind: got OID=1.2.840.48018.1.2.2
ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2
ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10
Segmentation fault: 11

*****************************************************************************************************************************************************



Build information for samba 4.4.5:

*****************************************************************************************************************************************************

Build environment:
Built by: ***@macmini.int.weberautomotive.com
Built on: Thu Jul 28 22:30:57 CDT 2016
Built using: /usr/bin/gcc
Build host: Darwin macmini.int.weberautomotive.com 15.6.0 Darwin Kernel Version 15.6.0: Thu Jun 23 18:25:34 PDT 2016; root:xnu-3248.60.10~1/RELEASE_X86_64 x86_64
SRCDIR: /Users/mweber/Downloads/install/samba-4.4.5/source3
BUILDDIR: /Users/mweber/Downloads/install/samba-4.4.5/source3

Paths:
SBINDIR: /usr/local/samba/sbin
BINDIR: /usr/local/samba/bin
CONFIGFILE: /usr/local/samba/etc/smb.conf
LOGFILEBASE: /usr/local/samba/var
LMHOSTSFILE: /usr/local/samba/etc/lmhosts
LIBDIR: /usr/local/samba/lib
MODULESDIR: /usr/local/samba/lib
SHLIBEXT: dylib
LOCKDIR: /usr/local/samba/var/lock
STATEDIR: /usr/local/samba/var/locks
CACHEDIR: /usr/local/samba/var/cache
PIDDIR: /usr/local/samba/var/run
SMB_PASSWD_FILE: /usr/local/samba/private/smbpasswd
PRIVATE_DIR: /usr/local/samba/private


--with Options:
WITH_ADS
WITH_AUTOMOUNT
WITH_DNS_UPDATES
WITH_PAM
WITH_PAM_MODULES
WITH_PTHREADPOOL
WITH_QUOTAS
WITH_SENDFILE
WITH_SYSLOG
WITH_WINBIND

Builtin modules:
vfs_default auth_domain auth_builtin auth_sam auth_winbind pdb_smbpasswd pdb_tdbsam pdb_wbc_sam auth_unix auth_wbc nss_info_template idmap_tdb idmap_passdb idmap_nss pdb_ldapsam idmap_ldap charset_macosxfs

*****************************************************************************************************************************************************

[Kevin Davidson]

Post by Michael A Weber
I know… I hear the groans already. “Mac OS X????” Yep… I know. Sadly, I need to configure a Mac OS X machine as a member server to an AD domain. I know… YUCK. However, it’s something I must do.

Is there a reason for attempting to do this with Samba, rather than the built in support for SMB 2.0 and Active Directory?

Either add an Active Directory Network Account Server in the Users & Groups System Preference, using the domain controller and an admin account, or use dsconfigad to do it from the command line. Set the search paths appropriately for authentication and contacts if you also need access to an Open Directory domain.

Then turn on file sharing in the Server app and set up your shares, ACLs etc.

If there's a specific requirement for Samba it might be helpful to know what that is.

Post by Michael A Weber
[2016/07/29 16:10:00.173382, 0] ../source3/lib/dumpcore.c:303(dump_core)
dumping core in /usr/local/samba/var/cores/smbd
*****************************************************************************************************************************************************
(It says at the end that it’s core dumping to that location, but there is nothing in there.)

Try ulimit -c unlimited before you test. Core dump size is limited to 0 by default.


Sent from my iPad
--
Kevin Davidson
Apple Certified System Administrator
Technical Director

t 01506 668674
m 07813 149620
w www.indigospring.co.uk

indigospring (Scotland) Ltd
Registered in Scotland No. SC398572
Registered office: 103 Oldwood Place, Livingston, EH54 6US

Follow us on Twitter - twitter.com/indigospringIT
Members of the Apple Consultants Network - consultants.apple.com/uk

www.indigospring.co.uk/terms-and-conditions

[Michael A Weber]

Post by Michael A Weber
First: Long-time samba user (since 2004), and my first reach-out to
everyone, so thank you for the great work!
New issue: Both joining an AD domain and smbd fail with a
segmentation fault on the Mac. I’ve tried to debug it the best I can
but I’m not a C developer and can’t figure out what is the cause.
For smbd, I have the log errors and the stack trace from it which I
hope will provide some clues. For net ads join, I have it on full
debug (-d 10), but the only thing I get is the segmentation fault at
the end. If there is a log file which may have more of a clue, I
don’t know where to find it, but I’ll be happy to get any information
out of it that I can.
I know… I hear the groans already. “Mac OS X????” Yep… I
know. Sadly, I need to configure a Mac OS X machine as a member
server to an AD domain. I know… YUCK. However, it’s something I
must do.

:-)
I'm glad to hear it is compiling these days. For the longest time
there were bugs complaining that we didn't even compile.

Well, maybe I should have stated or clarified that I made small modifications to the code to remedy the bugs per suggested patches I found. Oops?? :D

Post by Michael A Weber
I’m going to attempt to provide information that may help to identify
the problem, but if there is anything else needed, I’ll do what I can
to get it. Please just let me know.

disable spoolss = yes.
That might work around it. To get us the info we need getting a gdb
backtrace from the crashing process or the resulting core would be very
helpful.
Thanks,
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

I’ll do my best to get this to you. I’m sure the dump would be the most helpful, so I’m going to see what I can do. For the time being, I’m going to investigate and test what Kevin Davidson suggested previously and if that fails or isn’t as good as I would like, maybe we will have some headway for a working Samba install on Mac OS X in the future.

Thanks!

Mike