[Pkg-samba-maint] Bug#579357: winbind: passwd/smbpasswd causes segmentation fault on Debian Lenny x64 (Samba Winbind and Windows Active Directory)

[pdrescher]

Package: winbind
Version: 2:3.2.5-4lenny9
Severity: important

I added my linux server to a windows AD using winbind / samba. Everything worked just fine. After changing the OS to Debian lenny x64 I get a "segmentation fault" when trying to change user passwords. I am using the exact same configuration, on my 32 bit Server everything works. Any ideas?

debian:~# passwd <user>
sgmentation fault

debian# tail /var/log/syslog:
kernel: [689689.005934] passwd[11209]: segfault at 0 ip b7b84418 sp bfc37fc0 error 4 in pam_winbind.so[b7b7e000+b000]

Debian Lenny 5.0
winbind (2:3.2.5-4lenny6)
krb5-config (1.2.2)
samba-common (2:3.2.5-4lenny6).

/etc/samba/smb.conf
    [global]
    workgroup = <DOMAINNAME>
    realm = <DOMAINNAME>.ORG
    server string = %h
    security = ADS
    winbind separator = +
    winbind cache time = 10
    password server = 192.168.1.1
    encrypt passwords = yes
    client use spnego = yes
    idmap uid = 10000-20000
    idmap gid = 10000-20000
    template shell = /bin/bash
    template homedir = /home/%U
    winbind use default domain = yes
    winbind enum users = yes
    winbind enum groups = yes
    dns proxy = no
    log level = 3
    debug timestamp = yes
    log file = /var/log/samba/log.%m
    max log size = 1000
    syslog = 0
    panic action = /usr/share/samba/panic-action %d
    socket options = TCP_NODELAY
    unix charset = ISO8859-1
    dos charset = 850

/etc/krb.conf
    [libdefaults]
    default_realm = <DOMAINNAME>.org
    [realms]
    <DOMAINNAME>.org = {
    kdc = 192.168.1.1
    admin_server = 192.168.1.1
    default_domain = <DOMAINNAME>
    dns_lookup_realm = false
    dns_lookup_kdc = true
    }
    [domain_realm]
    .<DOMAINNAME>.org = <DOMAINNAME>
    <DOMAINNAME>.org = <DOMAINNAME>
    [appdefaults]
    pam = {
    debug = false
    ticket_lifetime = 36000
    renew_lifetime = 36000
    forwardable = true
    krb4_convert = false
    }

/etc/nsswitch:
     passwd:         compat winbind
    group:          compat winbind
    shadow:         compat winbind
    (...)

/etc/pam.d/common-account:
     account sufficient      pam_winbind.so
    account required        pam_unix.so

/etc/pam.d/common-auth:
     auth    sufficient      pam_winbind.so
    auth    required        pam_unix.so use_first_pass nullok_secure

/etc/common-passwd:
     password   required   pam_unix.so nullok obscure min=4 max=8 md5
    password        sufficient      pam_winbind.so use_authok


-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-2-xen-amd64 (SMP w/1 CPU core)
Locale: LANG=de_DE at euro, LC_CTYPE=de_DE at euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Versions of packages winbind depends on:
ii  adduser         3.110                    add and remove users and groups
ii  libc6           2.7-18lenny1             GNU C Library: Shared libraries
ii  libcomerr2      1.41.3-1                 common error description library
ii  libkrb53        1.6.dfsg.4~beta1-5lenny3 MIT Kerberos runtime libraries
ii  libldap-2.4-2   2.4.11-1+lenny1          OpenLDAP libraries
ii  libpam0g        1.0.1-5+lenny1           Pluggable Authentication Modules l
ii  libpopt0        1.14-4                   lib for parsing cmdline parameters
ii  libtalloc1      1.2.0~git20080616-1      hierarchical pool based memory all
ii  libwbclient0    2:3.2.5-4lenny9          client library for interfacing wit
ii  lsb-base        3.2-20                   Linux Standard Base 3.2 init scrip
ii  samba-common    2:3.2.5-4lenny9          Samba common files used by both th

winbind recommends no packages.

winbind suggests no packages.

-- no debconf information