[Bug 587014] New: Winbind offline authentication not working after upgrade to samba 3.5.x
http://bugzilla.novell.com/show_bug.cgi?id=587014 http://bugzilla.novell.com/show_bug.cgi?id=587014#c0 Summary: Winbind offline authentication not working after upgrade to samba 3.5.x Classification: openSUSE Product: openSUSE 11.2 Version: Final Platform: x86-64 OS/Version: openSUSE 11.2 Status: NEW Severity: Major Priority: P5 - None Component: Samba AssignedTo: samba-maintainers@SuSE.de ReportedBy: koen.dewitte@jandenul.com QAContact: samba-maintainers@SuSE.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/533.2 (KHTML, like Gecko) Chrome/5.0.342.1 Safari/533.2 Using OSS11.2 as desktop on a AD2003 domain with offline login enabled. After upgrade to the 3.5 stack (tried 3.5.0 and 3.5.1) I can no longer user offline login. It seems there is a problem with the tdb in the backend. This is what I get in the log for version 3.5 [2010/03/07 09:19:23, 0] winbindd/winbindd.c:1093(main) winbindd version 3.5.0-1.1-2315-SUSE-SL11.2 started. Copyright Andrew Tridgell and the Samba Team 1992-2010 [2010/03/07 09:19:23.416658, 1] lib/tdb_validate.c:470(tdb_validate_and_backup) tdb '/var/lib/samba/winbindd_cache.tdb' is invalid [2010/03/07 09:19:23.416779, 1] lib/tdb_validate.c:476(tdb_validate_and_backup) No backup found. [2010/03/07 09:19:23.416935, 1] lib/tdb_validate.c:494(tdb_validate_and_backup) Corrupt tdb stored as '/var/lib/samba/winbindd_cache.tdb.corrupt' [2010/03/07 09:19:23.416967, 0] winbindd/winbindd_cache.c:4094(winbindd_cache_validate_and_initialize) winbindd cache tdb corrupt and no backup could be restored. [2010/03/07 09:19:23.417420, 0] winbindd/winbindd_cache.c:3076(initialize_winbindd_cache) initialize_winbindd_cache: clearing cache and re-creating with version number 1 And the same for 3.5.1 winbindd version 3.5.1-1.1-2323-SUSE-SL11.2 started. Copyright Andrew Tridgell and the Samba Team 1992-2010 [2010/03/10 10:09:24.823684, 1] lib/tdb_validate.c:470(tdb_validate_and_backup) tdb '/var/lib/samba/winbindd_cache.tdb' is invalid [2010/03/10 10:09:24.823738, 1] lib/tdb_validate.c:478(tdb_validate_and_backup) backup '/var/lib/samba/winbindd_cache.tdb.bak' found. [2010/03/10 10:09:24.824374, 1] lib/tdb_validate.c:482(tdb_validate_and_backup) Backup '/var/lib/samba/winbindd_cache.tdb.bak' is invalid. [2010/03/10 10:09:24.824437, 1] lib/tdb_validate.c:494(tdb_validate_and_backup) Corrupt tdb stored as '/var/lib/samba/winbindd_cache.tdb.corrupt' [2010/03/10 10:09:24.824555, 0] winbindd/winbindd_cache.c:3103(initialize_winbindd_cache) initialize_winbindd_cache: clearing cache and re-creating with version number 1 To fix it, i have to downgrade. (To the OSS11.2 3.4.2 standard) [2010/03/10 11:17:04, 0] winbindd/winbindd.c:1244(main) winbindd version 3.4.2-1.1.3.1-2229-SUSE-SL11.2 started. Copyright Andrew Tridgell and the Samba Team 1992-2009 [2010/03/10 11:17:04, 0] winbindd/winbindd_cache.c:3673(cache_traverse_validate_fn) cache_traverse_validate_fn: unknown cache entry key : [2010/03/10 11:17:04, 0] ../lib/util/util.c:304(_dump_data) [0000] 4E 44 52 2F 52 4F 4F 54 44 4F 4D 41 49 4E 2F 32 NDR/ROOT DOMAIN/2 [0010] 2F 0F 00 00 00 00 00 00 00 0F 00 00 00 44 45 5F /....... .....DE_ [0020] 4E 55 4C 5F 4E 45 54 57 4F 52 4B 00 00 05 00 00 NUL_NETW ORK..... [0030] 00 00 00 00 00 05 00 00 00 52 4F 4F 54 00 00 00 ........ .ROOT... [0040] 00 08 00 00 00 ..... [2010/03/10 11:17:04, 0] winbindd/winbindd_cache.c:3675(cache_traverse_validate_fn) data : [2010/03/10 11:17:04, 0] ../lib/util/util.c:304(_dump_data) [0000] 2F 68 0E 00 00 00 00 00 00 00 00 00 00 00 00 00 /h...... ........ [0010] 73 00 00 C0 s... [2010/03/10 11:17:04, 1] lib/tdb_validate.c:459(tdb_validate_and_backup) tdb '/var/lib/samba/winbindd_cache.tdb' is invalid [2010/03/10 11:17:04, 1] lib/tdb_validate.c:467(tdb_validate_and_backup) backup '/var/lib/samba/winbindd_cache.tdb.bak' found. [2010/03/10 11:17:04, 1] lib/tdb_validate.c:488(tdb_validate_and_backup) valid backup '/var/lib/samba/winbindd_cache.tdb.bak' found [2010/03/10 11:17:04, 1] lib/tdb_validate.c:496(tdb_validate_and_backup) Restored tdb backup from '/var/lib/samba/winbindd_cache.tdb.bak' Reproducible: Always Steps to Reproduce: 1.Install OSS11.2 and enable AD login with offline enabled 2.upgrade to latest samba stable packages (3.5.1) 3.try to login offline Actual Results: "User is not known to the underlying authentication module" Also, you do not see the user in the GDM screen at login (when offline!) Expected Results: normally you can login with an AD user offline and see that cached account in the GDM. When logging in you get the message "logging in with cached credentials" -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=587014 http://bugzilla.novell.com/show_bug.cgi?id=587014#c1 Lars Müller <lmuelle@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |koen.dewitte@jandenul.com --- Comment #1 from Lars Müller <lmuelle@novell.com> 2010-03-15 08:47:44 UTC --- Please follow the instructions at http://en.opensuse.org/Samba section "Samba bug reporting and advanced debugging information" and provide us log level 10 log files. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=587014 http://bugzilla.novell.com/show_bug.cgi?id=587014#c2 --- Comment #2 from Koen De Witte <koen.dewitte@jandenul.com> 2010-03-15 20:38:15 UTC --- Created an attachment (id=348508) --> (http://bugzilla.novell.com/attachment.cgi?id=348508) Logfiles, TDB files and messages -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=587014 http://bugzilla.novell.com/show_bug.cgi?id=587014#c3 Koen De Witte <koen.dewitte@jandenul.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|koen.dewitte@jandenul.com | --- Comment #3 from Koen De Witte <koen.dewitte@jandenul.com> 2010-03-15 20:40:05 UTC --- I upgraded to the packages listed below and afterwards i started the winbind daemon again 2010-03-15 21:25:59|install|libtdb1|3.5.1-3.1|x86_64|root@jdn-9204|Samba|1c8f72e6b0fe8bc1a9f7a11b9288e6c523f52279 2010-03-15 21:26:01|install|libwbclient0-32bit|3.5.1-3.1|x86_64|root@jdn-9204|Samba|4b96b70540150ba22ae3c2ef0f3563dd61bc9c84 2010-03-15 21:26:02|install|libtdb1-32bit|3.5.1-3.1|x86_64|root@jdn-9204|Samba|940fb8f2087c11c5261dd81458058c392d479aa9 2010-03-15 21:26:03|install|libwbclient0|3.5.1-3.1|x86_64|root@jdn-9204|Samba|41519daf24f30649d94be07ee1eca6817577cd84 2010-03-15 21:26:06|install|libtalloc2|3.5.1-3.1|x86_64|root@jdn-9204|Samba|651818c0d9148c4e584126c34f2534ecd3abbf3f 2010-03-15 21:26:19|install|libtevent0|3.5.1-3.1|x86_64|root@jdn-9204|Samba|c96bf91735ea41a5257d27c889283a6bff44aa1d 2010-03-15 21:26:28|install|libsmbclient0|3.5.1-3.1|x86_64|root@jdn-9204|Samba|041ead4e4b86f84d4547eb755f6be22f4e4452b0 2010-03-15 21:26:31|install|samba-winbind-32bit|3.5.1-3.1|x86_64|root@jdn-9204|Samba|24b0d40f6f9c124842f07f1cee477e56afbbf3f9 2010-03-15 21:26:34|install|samba-32bit|3.5.1-3.1|x86_64|root@jdn-9204|Samba|beb858723437471b031e0e32a2e54abcacd1997f 2010-03-15 21:26:36|install|libsmbclient0-32bit|3.5.1-3.1|x86_64|root@jdn-9204|Samba|a8568f26cbfc086785fcf52e56734ea604ecce31 2010-03-15 21:26:38|install|samba-client-32bit|3.5.1-3.1|x86_64|root@jdn-9204|Samba|6b00ebdb05907a3c28e97854544f4f70fda7ca85 2010-03-15 21:26:39|install|libldb0|3.5.1-3.1|x86_64|root@jdn-9204|Samba|5ce51e94a5a1c2732791d6288f5407e20fc576bb # 2010-03-15 21:27:07 samba-client-3.5.1-3.1.x86_64.rpm installed ok # Additional rpm output: # warning: /etc/samba/smb.conf created as /etc/samba/smb.conf.rpmnew # warning: /etc/samba/smbfstab created as /etc/samba/smbfstab.rpmnew # Updating etc/sysconfig/network/dhcp... # 2010-03-15 21:27:07|install|samba-client|3.5.1-3.1|x86_64|root@jdn-9204|Samba|7183336c554c1e6be74ea95de2576ce7550e4e25 2010-03-15 21:27:16|install|samba|3.5.1-3.1|x86_64|root@jdn-9204|Samba|e3ed8b294aecc84f14d9afb97dc0a556e5b10ffc 2010-03-15 21:27:24|install|samba-winbind|3.5.1-3.1|x86_64|root@jdn-9204|Samba|bd20f785f687769135c4d2921071183a898b75bb -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=587014 http://bugzilla.novell.com/show_bug.cgi?id=587014#c4 --- Comment #4 from James McDonough <jmcdonough@novell.com> 2010-03-16 20:13:53 UTC --- Hrm, this just worked fine for me using 3.5.1. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=587014 http://bugzilla.novell.com/show_bug.cgi?id=587014#c5 James McDonough <jmcdonough@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |koen.dewitte@jandenul.com --- Comment #5 from James McDonough <jmcdonough@novell.com> 2010-03-16 20:44:51 UTC --- Ok, let me get this straight...you get an invalid tdb any time you upgrade? And it simply never recovers? Did you not ever login with 3.4.2, and only tried it at 3.5.1? I'd just like to make sure I get the exactly scenario. I just logged in on 3.4.2, and then logged in offline successfully, then I upgraded and logged in offline succesffully. If you had a different combination, be very detailed, because I wasn't able to reproduce it with this: - Install 11.2, join AD and enable offline login. - Login online, logoff, disconnect network, login offline - reconnect network, upgrade to 3.5.1 - disconnect network, login offline. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=587014 http://bugzilla.novell.com/show_bug.cgi?id=587014#c6 Koen De Witte <koen.dewitte@jandenul.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|koen.dewitte@jandenul.com | --- Comment #6 from Koen De Witte <koen.dewitte@jandenul.com> 2010-03-18 15:58:53 UTC --- - I took a new laptop and installed oss 11.2 x86 - I joined AD and enabled offline login - I tried offline login: it works, no errors in the log.winbind - I added the samba repo and upgraded several packages this is the zypp history 2010-03-18 16:20:55|radd |samba|http://download.opensuse.org/repositories/network:/samba:/STABLE/openSUSE_11... 2010-03-18 16:34:21|install|poppler-data|0.2.1-4.1|noarch||repo-non-oss|d5cb61c21047c4076b080c44386af0adf00471bb 2010-03-18 16:34:36|install|AdobeICCProfiles|2.0-137.1.1|noarch||repo-non-oss|ec990afcc2228ff66aa8b0f091da5353127141ad 2010-03-18 16:34:38|install|libtdb1|3.5.1-3.2|i586|root@jdn-8744|samba|e7b71083befd86d9638aee7851065747a015c46f 2010-03-18 16:34:40|install|libwbclient0|3.5.1-3.2|i586|root@jdn-8744|samba|1d342994e802668c164751e54a838a9748b911c7 2010-03-18 16:34:41|install|libtalloc2|3.5.1-3.2|i586||samba|09aa37a3f77e8dcd5af3dddef9ddfa58f40eb4e8 2010-03-18 16:35:07|install|flash-player|10.0.45.2-0.1.1|i586||repo-update|0c63c1eafb5adbdb889aebfa42c20aae43330cf0 2010-03-18 16:35:10|install|nspluginwrapper|1.2.2-5.7.1|i586||repo-update|cd2a06acfa77bad191751fb56ada3f2f888cb7ed 2010-03-18 16:35:10|install|fetchmsttfonts|11.2-6.6.12|noarch||repo-update|c4fc7f28a4ad45131ed58079b4314cbead9bdce8 2010-03-18 16:35:20|install|libsmbclient0|3.5.1-3.2|i586|root@jdn-8744|samba|be31eea401c653a40f83bd56bdad8938bde93325 2010-03-18 16:35:20|install|libtevent0|3.5.1-3.2|i586||samba|4f36b75936c71df146e984975e259d5732963b01 2010-03-18 16:35:23|install|libldb0|3.5.1-3.2|i586||samba|08e04241c93357ff0526a85ecfa5c372bc280fd5 # 2010-03-18 16:36:51 samba-client-3.5.1-3.2.i586.rpm installed ok # Additional rpm output: # warning: /etc/samba/smb.conf created as /etc/samba/smb.conf.rpmnew # Updating etc/sysconfig/network/dhcp... # 2010-03-18 16:36:51|install|samba-client|3.5.1-3.2|i586|root@jdn-8744|samba|b12b2d9363f7ef6f6947cfd3cd08d8a4d2b5ceb6 2010-03-18 16:37:20|install|samba|3.5.1-3.2|i586|root@jdn-8744|samba|a53da5fde50d3782addade229bcd5a4c0dbeeb11 2010-03-18 16:37:36|install|samba-winbind|3.5.1-3.2|i586|root@jdn-8744|samba|6d577278ede9dc6d754d293a6347542403d124a7 - after upgrading these packages I restarted the machine and tries to login online: it works - I disconnect the cable and try to connect offline= 'User is not known to the underlying authentication module' and I see the same errors in the logfile (corrupt tdb) - and again, downgrading to the 3.4.2 packages solves this issue, the tdb is restored from backup and offline works again I keep this test-machine available for more information. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=587014 http://bugzilla.novell.com/show_bug.cgi?id=587014#c7 James McDonough <jmcdonough@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |koen.dewitte@jandenul.com --- Comment #7 from James McDonough <jmcdonough@novell.com> 2010-03-23 15:39:22 UTC --- I have just merged a fix from upstream, where tdb validation could fail in some cases even on a valid tdb, causing it to clear the cache, which is basically what's happening here. I've just put this into network:samba:TESTING. Can you try the 3.5.1 packages from there? It's finished building, but waiting to be published. it should be 3.5.1-4.1 from TESTING. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=587014 http://bugzilla.novell.com/show_bug.cgi?id=587014#c James McDonough <jmcdonough@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium CC| |jmcdonough@novell.com AssignedTo|samba-maintainers@SuSE.de |jmcdonough@novell.com -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=587014 http://bugzilla.novell.com/show_bug.cgi?id=587014#c8 --- Comment #8 from James McDonough <jmcdonough@novell.com> 2010-03-23 16:16:59 UTC --- Ah, I have recreated the bug, and this fix works for me. I've pushed it into network:samba:STABLE as well, so the build should be available from there soon as well. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=587014 http://bugzilla.novell.com/show_bug.cgi?id=587014#c9 Koen De Witte <koen.dewitte@jandenul.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|koen.dewitte@jandenul.com | --- Comment #9 from Koen De Witte <koen.dewitte@jandenul.com> 2010-03-24 07:17:16 UTC --- Tested on my normal desktop (x86-64) and my test setup (x86) with the STABLE repo and it works now on both systems! Thank you for your help. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=587014 http://bugzilla.novell.com/show_bug.cgi?id=587014#c10 James McDonough <jmcdonough@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution| |FIXED --- Comment #10 from James McDonough <jmcdonough@novell.com> 2010-03-24 14:15:28 UTC --- Closing per reporter's confirmation of the fix. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=587014 http://bugzilla.novell.com/show_bug.cgi?id=587014#c11 --- Comment #11 from Bernhard Wiedemann <bwiedemann@suse.com> --- This is an autogenerated message for OBS integration: This bug (587014) was mentioned in https://build.opensuse.org/request/show/35658 Factory / samba -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com