[Pkg-samba-maint] Bug#501773: samba: Failed to set uid privileges to (-1, 1017) now set to (0, 0) in smbd log

[Yuriy Padlyak]

Hi Steve,

On Sun, Oct 26, 2008 at 4:32 AM, Steve Langasek <vorlon at debian.org> wrote:
> Hi Yuriy,
>
> On Fri, Oct 10, 2008 at 01:00:50PM +0300, Yuriy Padlyak wrote:
>> smbd log:
>
>> Don't know the cause, but there are error messaes in the log:
>
>> [2008/10/08 10:06:35, 1] smbd/service.c:make_connection_snum(950)
>>   finance (192.168.0.12) connect to service Business initially as user padlyak.yaroslav (uid=1017, gid=1004) (pid 21106)
>> [2008/10/08 10:06:36, 0] lib/util_sec.c:assert_uid(101)
>>   Failed to set uid privileges to (-1,1017) now set to (0,0)
>> [2008/10/08 10:06:36, 0] lib/util.c:smb_panic(1599)
>>   PANIC (pid 21106): failed to set uid
>> [2008/10/08 10:06:36, 0] lib/util.c:log_stack_trace(1706)
>>   BACKTRACE: 13 stack frames:
>>    #0 /usr/sbin/smbd(log_stack_trace+0x23) [0x822c3d3]
>>    #1 /usr/sbin/smbd(smb_panic+0x46) [0x822c4c6]
>>    #2 /usr/sbin/smbd [0x8231849]
>>    #3 /usr/sbin/smbd [0x80db3be]
>>    #4 /usr/sbin/smbd(pop_sec_ctx+0xa3) [0x80db553]
>>    #5 /usr/sbin/smbd(unbecome_root+0xb) [0x80d13fb]
>>    #6 /usr/sbin/smbd(gid_to_sid+0xfe) [0x81ef16e]
>>    #7 /usr/sbin/smbd(change_to_user+0x5de) [0x80d1c1e]
>>    #8 /usr/sbin/smbd [0x80ea351]
>>    #9 /usr/sbin/smbd(smbd_process+0x6fd) [0x80eb83d]
>>    #10 /usr/sbin/smbd(main+0x10df) [0x82c384f]
>>    #11 /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xc8) [0xb7c19ea8]
>>    #12 /usr/sbin/smbd [0x8082b11]
>
> There are very few cases in which a root process should fail to be able to
> change uids.  The main one is a ulimit restriction.
>
> Have you restarted samba from your shell at some point prior to this?  If
> so, what does 'ulimit -u' show when run from your shell?
>

# ulimit -u
unlimited

Don't really remember when I last restarted samba prior to this, but
I'm not getting these messages for about a week already.


> --
> Steve Langasek                   Give me a lever long enough and a Free OS
> Debian Developer                   to set it on, and I can move the world.
> Ubuntu Developer                                    http://www.debian.org/
> slangasek at ubuntu.com                                     vorlon at debian.org
>



-- 
Regards,
Yuriy Padlyak