smbd (core dumped) again and again

[ObiTobi]

Hi,
smbd crashes again and again an 13-U3 + Samba internal package

I think I will go back to v12, no one maschine can create bnackup on v 13 In messages I see error like this here

Code:

smbd 32894 - - [2022/12/28 11:29:20.661987,  0] ../../lib/util/fault.c:172(smb_panic_log)
smbd 32894 - -   ===============================================================
smbd 32894 - - [2022/12/28 11:29:20.662234,  0] ../../lib/util/fault.c:176(smb_panic_log)
smbd 32894 - -   INTERNAL ERROR: unable to get back to old directory
smbd 32894 - -    in pid 32894 (4.15.13)
smbd 32894 - - [2022/12/28 11:29:20.662322,  0] ../../lib/util/fault.c:181(smb_panic_log)
smbd 32894 - -   If you are running a recent Samba version, and if you think this problem is not yet fixed in the latest versions, please consider reporting this bug, see https://wiki.samba.g
smbd 32894 - - [2022/12/28 11:29:20.662384,  0] ../../lib/util/fault.c:182(smb_panic_log)
smbd 32894 - -   ===============================================================
smbd 32894 - - [2022/12/28 11:29:20.662442,  0] ../../lib/util/fault.c:184(smb_panic_log)
smbd 32894 - -   PANIC (pid 32894): unable to get back to old directory
smbd 32894 - -    in 4.15.13
smbd 32894 - - [2022/12/28 11:29:20.664783,  0] ../../lib/util/fault.c:288(log_stack_trace)
smbd 32894 - -   BACKTRACE: 28 stack frames:
smbd 32894 - -    #0 0x8014b3177 <log_stack_trace+0x37> at /usr/local/lib/samba4/libsamba-util.so.0
smbd 32894 - -    #1 0x8014b3251 <smb_panic+0x11> at /usr/local/lib/samba4/libsamba-util.so.0
smbd 32894 - -    #2 0x801b1ed49 <fd_openat+0xce9> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
smbd 32894 - -    #3 0x801b1e0d7 <fd_openat+0x77> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
smbd 32894 - -    #4 0x801ac52d1 <openat_pathref_fsp+0x231> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
smbd 32894 - -    #5 0x8166ef45f <samba_init_module+0x9e5f> at /usr/local/lib/shared-modules/vfs/fruit.so
smbd 32894 - -    #6 0x8166eed99 <samba_init_module+0x9799> at /usr/local/lib/shared-modules/vfs/fruit.so
smbd 32894 - -    #7 0x8166e9f4b <samba_init_module+0x494b> at /usr/local/lib/shared-modules/vfs/fruit.so
smbd 32894 - -    #8 0x801b48136 <make_connection_smb2+0xe76> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
smbd 32894 - -    #9 0x801b4731a <make_connection_smb2+0x5a> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
smbd 32894 - -    #10 0x801b5f40d <smbd_smb2_request_process_tcon+0x65d> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
smbd 32894 - -    #11 0x801b557ff <smbd_smb2_request_dispatch+0x134f> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
smbd 32894 - -    #12 0x801b5a3e2 <smbd_smb2_process_negprot+0x24f2> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
smbd 32894 - -    #13 0x8029ef57d <tevent_common_invoke_fd_handler+0x9d> at /usr/local/lib/samba4/private/libtevent.so.0
smbd 32894 - -    #14 0x8029f598d <tevent_ctx_get_iocb+0x8ed> at /usr/local/lib/samba4/private/libtevent.so.0
smbd 32894 - -    #15 0x8029f41d0 <tevent_signal_get_tag+0x230> at /usr/local/lib/samba4/private/libtevent.so.0
smbd 32894 - -    #16 0x8029ee591 <_tevent_loop_once+0xe1> at /usr/local/lib/samba4/private/libtevent.so.0
smbd 32894 - -    #17 0x8029ee7f2 <tevent_common_loop_wait+0x32> at /usr/local/lib/samba4/private/libtevent.so.0
smbd 32894 - -    #18 0x8029f4250 <tevent_signal_get_tag+0x2b0> at /usr/local/lib/samba4/private/libtevent.so.0
smbd 32894 - -    #19 0x801b436a3 <smbd_process+0x7b3> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
smbd 32894 - -    #20 0x1032373 <main+0x44b3> at /usr/local/sbin/smbd
smbd 32894 - -    #21 0x8029ef57d <tevent_common_invoke_fd_handler+0x9d> at /usr/local/lib/samba4/private/libtevent.so.0
smbd 32894 - -    #22 0x8029f598d <tevent_ctx_get_iocb+0x8ed> at /usr/local/lib/samba4/private/libtevent.so.0
smbd 32894 - -    #23 0x8029f41d0 <tevent_signal_get_tag+0x230> at /usr/local/lib/samba4/private/libtevent.so.0
smbd 32894 - -    #24 0x8029ee591 <_tevent_loop_once+0xe1> at /usr/local/lib/samba4/private/libtevent.so.0
smbd 32894 - -    #25 0x8029ee7f2 <tevent_common_loop_wait+0x32> at /usr/local/lib/samba4/private/libtevent.so.0
smbd 32894 - -    #26 0x8029f4250 <tevent_signal_get_tag+0x2b0> at /usr/local/lib/samba4/private/libtevent.so.0
smbd 32894 - -    #27 0x10308df <main+0x2a1f> at /usr/local/sbin/smbd
smbd 32894 - - [2022/12/28 11:29:20.665703,  0] ../../source3/lib/dumpcore.c:315(dump_core)
smbd 32894 - -   dumping core in /var/db/system/cores
smbd 32894 - -
kernel: pid 32894 (smbd), jid 0, uid 0: exited on signal 6 (core dumped)

 

[anodos]

Okay. Looks like you're hitting an SMB_ASSERT() possibly related to a permissions issue. What is output of testparm -s?

 

[ObiTobi]

Here the output you asked me.

Code:

Load smb config files from /usr/local/etc/smb4.conf
lpcfg_do_global_parameter: WARNING: The "blocking locks" option is deprecated
lpcfg_do_service_parameter: WARNING: The "blocking locks" option is deprecated
lpcfg_do_service_parameter: WARNING: The "blocking locks" option is deprecated
lpcfg_do_service_parameter: WARNING: The "blocking locks" option is deprecated
lpcfg_do_service_parameter: WARNING: The "blocking locks" option is deprecated
lpcfg_do_service_parameter: WARNING: The "blocking locks" option is deprecated
lpcfg_do_service_parameter: WARNING: The "blocking locks" option is deprecated
lpcfg_do_service_parameter: WARNING: The "blocking locks" option is deprecated
lpcfg_do_service_parameter: WARNING: The "blocking locks" option is deprecated
Loaded services file OK.
Weak crypto is allowed

WARNING: socket options = TCP_NODELAY SO_RCVBUF=1048576 SO_SNDBUF=1048576 IPTOS_LOWDELAY IPTOS_THROUGHPUT
This warning is printed because you set one of the
following options: SO_SNDBUF, SO_RCVBUF, SO_SNDLOWAT,
SO_RCVLOWAT
Modern server operating systems are tuned for
high network performance in the majority of situations;
when you set 'socket options' you are overriding those
settings.
Linux in particular has an auto-tuning mechanism for
buffer sizes (SO_SNDBUF, SO_RCVBUF) that will be
disabled if you specify a socket buffer size. This can
potentially cripple your TCP/IP stack.

Getting the 'socket options' correct can make a big
difference to your performance, but getting them wrong
can degrade it by just as much. As with any other low
level setting, if you must make changes to it, make
 small changes and test the effect before making any
large changes.

Server role: ROLE_DOMAIN_MEMBER

# Global parameters
[global]
    ads dns update = No
    allow trusted domains = No
    bind interfaces only = Yes
    client ldap sasl wrapping = seal
    disable spoolss = Yes
    dns proxy = No
    domain master = No
    enable web service discovery = Yes
    kerberos method = secrets and keytab
    kernel change notify = No
    load printers = No
    local master = No
    logging = syslog@0 file
    max log size = 5120
    netbios aliases = mynas001
    nsupdate command = /usr/local/bin/samba-nsupdate -g
    preferred master = No
    realm = RJAP.DE
    registry shares = Yes
    restrict anonymous = 2
    security = ADS
    server role = member server
    server string = My NAS
    socket options = TCP_NODELAY SO_RCVBUF=1048576 SO_SNDBUF=1048576 IPTOS_LOWDELAY IPTOS_THROUGHPUT
    template homedir = /mnt/zpool01/home/%U
    template shell = /bin/sh
    unix extensions = No
    winbind cache time = 7200
    winbind enum groups = Yes
    winbind enum users = Yes
    winbind max domain connections = 20
    winbind nss info = rfc2307
    winbind use default domain = Yes
    workgroup = RJAP
    idmap config *: range = 90000001-100000000
    idmap config rjap: range = 20000-90000000
    idmap config rjap: backend = rid
    fruit:nfs_aces = No
    rpc_server:mdssvc = disabled
    rpc_daemon:mdssd = disabled
    idmap config * : backend = tdb
    aio write behind = yes
    directory name cache size = 0
    dos filemode = Yes
    kernel oplocks = Yes
    veto oplock files = /*.doc/*.DOC/*.docx/*.DOCX/*.docm/*.DOCM/*.dotm/*.DOTM/*.xltm/*.XLTM/*.xltx/*.XLTX/*.xlsx/*.XLSX/*.xlsm/*.XLSM/*.xlsb/*.XLSB/*.xls/*.XLS/*.ppt/*.PPT/*.pst/*.PST/*.mdb/*.MDB/*.ldb/*.LDB/*.vsd/*.VSD/*.mpp/*.MPP/*.qbw/*.QBW/*.qbb/*.QBB/*.qbI/*.qbl/*.dxf/*.DXF/*.dwg/*.DWG/*.cdr/*.CDR/*.bak/*.BAK/*.ord/*.xlo/*.igs/*.ipt/*.ipj/*.slp/*.stp/*.opt/*.xli/*.stl/*.cur/*.sjb/*.log/*.LOG/*.sbs/*.iam/*.idv/*.pcbdoc/*.PcbDoc/*.PCBDOC/*.dbf/*.DBF/*.cdx/*.CDX/*.mrimg/*.MRIMG/*.tmp/*.TMP/*.imd5/*.IMD5/*.db/*.DB


[Home]
    browseable = No
    comment = Home
    path = /mnt/zpool01/home
    read only = No
    smbd max xattr size = 2097152
    vfs objects = zfs_space fruit streams_xattr ixnas zfsacl
    fruit:aapl = yes
    fruit:model = MacSamba
    streams_xattr:store_stream_type = no
    streams_xattr:prefix = user.
    fruit:locking = netatalk
    fruit:resource = file
    fruit:metadata = netatalk
    nfs4:chown = true


[Fotografie]
    browseable = No
    comment = Fotografie
    path = /mnt/zpool01/fotografie
    read only = No
    smbd max xattr size = 2097152
    vfs objects = zfs_space fruit streams_xattr ixnas zfsacl
    fruit:aapl = yes
    fruit:model = MacSamba
    streams_xattr:store_stream_type = no
    streams_xattr:prefix = user.
    fruit:locking = netatalk
    fruit:resource = file
    fruit:metadata = netatalk
    nfs4:chown = true


[Online Banking]
    browseable = No
    comment = Online Banking
    path = /mnt/zpool01/onlinebanking
    read only = No
    smbd max xattr size = 2097152
    vfs objects = zfs_space fruit streams_xattr ixnas zfsacl
    fruit:aapl = yes
    fruit:model = MacSamba
    streams_xattr:store_stream_type = no
    streams_xattr:prefix = user.
    fruit:locking = netatalk
    fruit:resource = file
    fruit:metadata = netatalk
    nfs4:chown = true


[Anwendungsdaten]
    browseable = No
    comment = Anwendungsdaten
    path = /mnt/zpool01/anwendungsdaten
    read only = No
    smbd max xattr size = 2097152
    vfs objects = zfs_space fruit streams_xattr ixnas zfsacl
    fruit:aapl = yes
    fruit:model = MacSamba
    streams_xattr:store_stream_type = no
    streams_xattr:prefix = user.
    fruit:locking = netatalk
    fruit:resource = file
    fruit:metadata = netatalk
    nfs4:chown = true


[Profile]
    browseable = No
    comment = Profile
    ea support = No
    path = /mnt/zpool01/profile
    read only = No
    smbd max xattr size = 2097152
    vfs objects = zfs_space fruit streams_xattr ixnas zfsacl
    fruit:resource = stream
    fruit:metadata = stream
    nfs4:chown = true


[Windows Sicherung]
    browseable = No
    comment = Windows Sicherung
    ea support = No
    path = /mnt/zpool02/backup/Windows
    read only = No
    smbd max xattr size = 2097152
    vfs objects = zfs_space fruit streams_xattr ixnas zfsacl
    fruit:resource = stream
    fruit:metadata = stream
    nfs4:chown = true


[Multimedia]
    browseable = No
    comment = Multimedia
    path = /mnt/zpool01/multimedia
    read only = No
    smbd max xattr size = 2097152
    vfs objects = zfs_space fruit streams_xattr ixnas zfsacl
    fruit:aapl = yes
    fruit:model = MacSamba
    streams_xattr:store_stream_type = no
    streams_xattr:prefix = user.
    fruit:locking = netatalk
    fruit:resource = file
    fruit:metadata = netatalk
    nfs4:chown = true


[ISO]
    browseable = No
    comment = iso
    path = /mnt/zpool01/iso
    read only = No
    smbd max xattr size = 2097152
    vfs objects = zfs_space fruit streams_xattr ixnas zfsacl
    fruit:aapl = yes
    fruit:model = MacSamba
    streams_xattr:store_stream_type = no
    streams_xattr:prefix = user.
    fruit:locking = netatalk
    fruit:resource = file
    fruit:metadata = netatalk
    nfs4:chown = true


[Download]
    browseable = No
    comment = Download
    path = /mnt/zpool01/download
    read only = No
    smbd max xattr size = 2097152
    vfs objects = zfs_space fruit streams_xattr ixnas zfsacl
    fruit:aapl = yes
    fruit:model = MacSamba
    streams_xattr:store_stream_type = no
    streams_xattr:prefix = user.
    fruit:locking = netatalk
    fruit:resource = file
    fruit:metadata = netatalk
    nfs4:chown = true


[Android]
    browseable = No
    comment = Android Backup
    ea support = No
    path = /mnt/zpool02/backup/Android
    read only = No
    smbd max xattr size = 2097152
    vfs objects = zfs_space fruit streams_xattr ixnas zfsacl
    fruit:resource = stream
    fruit:metadata = stream
    nfs4:chown = true


[TestShare]
    comment = TestShare
    ea support = No
    path = /mnt/zpool01/TestShare
    read only = No
    smbd max xattr size = 2097152
    vfs objects = zfs_space fruit streams_xattr zfsacl
    streams_xattr:store_stream_type = no
    streams_xattr:prefix = user.
    fruit:locking = netatalk
    fruit:resource = file
    fruit:metadata = netatalk
    nfs4:chown = true


[Time Machine]
    blocking locks = No
    comment = Time Machine
    kernel oplocks = No
    level2 oplocks = No
    mangled names = no
    oplocks = No
    path = /mnt/zpool02/backup/OSX
    read only = No
    smbd max xattr size = 2097152
    vfs objects = catia zfs_space fruit streams_xattr ixnas zfsacl
    fruit:advertise_fullsync = true
    fruit:aapl = yes
    fruit:model = MacSamba
    fruit:time machine = yes
    streams_xattr:store_stream_type = no
    streams_xattr:prefix = user.
    fruit:locking = none
    fruit:resource = file
    fruit:metadata = netatalk
    fruit:encoding = native
    nfs4:chown = true

 

[anodos]

Okay. Remove the auxiliary parameters and see if it still occurs. From my perspective once auxiliary parameters are placed in the configuration you're kind of on your own from debugging standpoint (because you're not really running SMB as we've implemented it).

 

[ObiTobi]

OK, one test I can do before I go back to v12. Here I had have never problems with smbd.core

(OK it changes nothing - just in this moment new smbd.core created)

What I do not understand - why I see in messages many of this entries?

Code:

smbd 2210 - - [2022/12/28 18:56:46.152577,  0] ../../source3/smbd/service.c:213(chdir_current_service)
 smbd 2210 - -   chdir_current_service: vfs_ChDir(/mnt/zpool01/anwendungsdaten) failed: Permission denied. Current token: uid=22603, gid=20515, 6 groups: 22603 20515 22611 90000222 90000223 90000225
smbd 2210 - - [2022/12/28 18:56:52.773034,  0] ../../source3/smbd/service.c:213(chdir_current_service)
smbd 2210 - -   chdir_current_service: vfs_ChDir(/mnt/zpool01/anwendungsdaten) failed: Permission denied. Current token: uid=22603, gid=20515, 6 groups: 22603 20515 22611 90000222 90000223 90000225
smbd 2210 - - [2022/12/28 18:56:52.786646,  0] ../../source3/smbd/service.c:213(chdir_current_service)
smbd 2210 - -   chdir_current_service: vfs_ChDir(/mnt/zpool01/anwendungsdaten) failed: Permission denied. Current token: uid=22603, gid=20515, 6 groups: 22603 20515 22611 90000222 90000223 90000225
smbd 2210 - - [2022/12/28 18:56:54.016901,  0] ../../source3/smbd/service.c:213(chdir_current_service)
smbd 2210 - -   chdir_current_service: vfs_ChDir(/mnt/zpool01/anwendungsdaten) failed: Permission denied. Current token: uid=22603, gid=20515, 6 groups: 22603 20515 22611 90000222 90000223 90000225

Code:

getfacl /mnt/zpool01/anwendungsdaten
# file: /mnt/zpool01/anwendungsdaten
# owner: root
# group: wheel
group:domänencomputer:r-----a-R-c---:fd-----:allow
group:domänen-admins:rwxpDdaARWcCos:fd-----:allow
         user:root:rwxpDdaARWcCos:fd-----:allow
            group@:rwxpDdaARWcCos:fd-----:allow
      group:office:rwxpDdaARWcCos:fd-----:allow
  group:ctx-office:rwxpDdaARWcCos:fd-----:allow
user:administrator:rwxpDdaARWcCos:fd-----:allow
         everyone@:--------------:fd-----:allow

I had changed the permissions with:

Code:

setfacl -m g:domänencomputer:read_set:fd:allow /mnt/zpool01/anwendungsdaten

but it's loks loke it changes nothing.

 

[anodos]

read_set is insufficient to chdir into a path. You need execute as well. This is same behavior you have with other OSes (can't chdir into path where you don't have execute).

 

[ObiTobi]

Yes, I know.

I changed it now to

Code:

setfacl -m g:domänencomputer:rxaRc:fd:allow /mnt/zpool01/anwendungsdaten

But I wonder why all this works perfectly with v12

 

[ObiTobi]

OK, all this I tried has nothing changed. smbd creates again and again core files.
I'm back to version 12 which is more stable in my opinion.