[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Paul Strinati]

Same problem. Am running:

Ubuntu Server 14.04.1 LTS
Windbind: 2:4.3.9+dfsg-0ubuntu0.14.04.1
Samba: 2:4.3.9+dfsg-0ubuntu0.14.04.1
Squid3: 3.3.8-1ubuntu6.6

Authenticating against Active Directory - has been working really well
for the last 18 months, then stopped working about a week ago.

Errors in cache.log:
2016/05/09 06:20:07| Too few ntlmauthenticator processes are running (need 1/10)
2016/05/09 06:20:07| Starting new helpers
2016/05/09 06:20:07| helperOpenServers: Starting 1/10 'ntlm_auth' processes
2016/05/09 06:20:07| ERROR: NTLM Authentication Helper '0x7f313ea68318' crashed!.
2016/05/09 06:20:07| ERROR: NTLM Authentication validating user. Error returned 'BH Internal error'
2016/05/09 06:20:08| WARNING: ntlmauthenticator #1 exited

Errors in syslog:
May  9 06:20:09 optsquidproxy kernel: [228590.127125] ntlm_auth[8850]: segfault at 8 ip 00007f201ec729b0 sp 00007ffda249aae8 error 4 in libsamba-security.so.0[7f201ec67000+1b000]

Squid is using pure NTLM authentication (taken from squid.conf):
### pure ntlm authentication
auth_param ntlm program /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp --domain=MYDOMAIN
auth_param ntlm children 10
auth_param ntlm keep_alive off

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

Status in samba package in Ubuntu:
  Confirmed

Bug description:
  System version: Ubuntu 14.04.4 LTS
  Squid version: 2:4.3.8+dfsg-0ubuntu0.14.04.2
  Winbind version: 2:4.3.8+dfsg-0ubuntu0.14.04.2 upgrade to 2:4.3.9+dfsg-0ubuntu0.14.04.1

  My ubuntu server installed Squid to perform http_proxy. Squid auth the
  Active Directory users(Win2003) by winbind, settings like follow:

  ...
  auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
  ...

  Everything is ok until I upgrade winbind from 2:4.3.8+dfsg-
  0ubuntu0.14.04.2 to 2:4.3.9+dfsg-0ubuntu0.14.04.1 today. Squid can't
  auth the AD users anymore. There are some error log in the cache.log:

  ...
  2016/05/05 13:50:45| ERROR: NTLM Authentication Helper '0x7fb54812af68' crashed!.
  2016/05/05 13:50:45| ERROR: NTLM Authentication validating user. Error returned 'BH Internal error'
  ...

  And there are some error log in the /var/log/syslog:

  ...
  May  5 09:26:08 ocelot kernel: [  187.793014] ntlm_auth[4543]: segfault at 8 ip 00007f10aad619b0 sp 00007ffc1ed0e778 error 4 in libsamba-security.so.0[7f10aad56000+1b000]
  May  5 09:26:08 ocelot kernel: [  188.207378] ntlm_auth[5062]: segfault at 8 ip 00007f41ada4d9b0 sp 00007ffebc1a1108 error 4 in libsamba-security.so.0[7f41ada42000+1b000]
  May  5 09:26:08 ocelot kernel: [  188.438501] ntlm_auth[4535]: segfault at 8 ip 00007f73fa26a9b0 sp 00007ffc1c63f808 error 4 in libsamba-security.so.0[7f73fa25f000+1b000]
  May  5 09:26:35 ocelot kernel: [  214.949867] ntlm_auth[5063]: segfault at 8 ip 00007fc1b5c459b0 sp 00007fffd3d5b398 error 4 in libsamba-security.so.0[7fc1b5c3a000+1b000]
  May  5 09:26:35 ocelot kernel: [  215.026850] ntlm_auth[5067]: segfault at 8 ip 00007f782ba5c9b0 sp 00007ffe59d96aa8 error 4 in libsamba-security.so.0[7f782ba51000+1b000]
  ...

  And now I downgraded winbind to 2:4.1.6+dfsg-1ubuntu2(I can't
  downgrade it to 2:4.3.8+dfsg-0ubuntu0.14.04.2, it keeps telling me
  "Unable to find a version..."), Squid auth_param ntlm works again.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions