[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
This bug was fixed in the package samba - 2:4.3.9+dfsg-0ubuntu1 --- samba (2:4.3.9+dfsg-0ubuntu1) yakkety; urgency=medium * SECURITY REGRESSION: Updated to 4.3.9 to fix multiple regressions in the previous security updates. (LP: #1577739) - debian/control: bump tevent Build-Depends to 0.9.28. * SECURITY REGRESSION: NTLM authentication issues (LP: #1578576) - debian/patches/samba-bug11912.patch: let msrpc_parse() return talloc'ed empty strings in libcli/auth/msrpc_parse.c. - debian/patches/samba-bug11914.patch: make ntlm_auth_generate_session_info() more complete in source3/utils/ntlm_auth.c. -- Marc Deslauriers Wed, 25 May 2016 09:29:15 -0400 ** Changed in: samba (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
This bug was fixed in the package samba - 2:4.3.9+dfsg-0ubuntu0.15.10.2 --- samba (2:4.3.9+dfsg-0ubuntu0.15.10.2) wily-security; urgency=medium * SECURITY REGRESSION: NTLM authentication issues (LP: #1578576) - debian/patches/samba-bug11912.patch: let msrpc_parse() return talloc'ed empty strings in libcli/auth/msrpc_parse.c. - debian/patches/samba-bug11914.patch: make ntlm_auth_generate_session_info() more complete in source3/utils/ntlm_auth.c. -- Marc Deslauriers Fri, 20 May 2016 08:09:44 -0400 ** Changed in: samba (Ubuntu Wily) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
This bug was fixed in the package samba - 2:4.3.9+dfsg-0ubuntu0.16.04.2 --- samba (2:4.3.9+dfsg-0ubuntu0.16.04.2) xenial-security; urgency=medium * SECURITY REGRESSION: NTLM authentication issues (LP: #1578576) - debian/patches/samba-bug11912.patch: let msrpc_parse() return talloc'ed empty strings in libcli/auth/msrpc_parse.c. - debian/patches/samba-bug11914.patch: make ntlm_auth_generate_session_info() more complete in source3/utils/ntlm_auth.c. -- Marc Deslauriers Fri, 20 May 2016 07:31:37 -0400 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
This bug was fixed in the package samba - 2:4.3.9+dfsg-0ubuntu0.14.04.3 --- samba (2:4.3.9+dfsg-0ubuntu0.14.04.3) trusty-security; urgency=medium * SECURITY REGRESSION: NTLM authentication issues (LP: #1578576) - debian/patches/samba-bug11912.patch: let msrpc_parse() return talloc'ed empty strings in libcli/auth/msrpc_parse.c. - debian/patches/samba-bug11914.patch: make ntlm_auth_generate_session_info() more complete in source3/utils/ntlm_auth.c. * debian/rules: work around amd64 build failure (LP: #1585174) -- Marc Deslauriers Tue, 24 May 2016 07:47:59 -0400 ** Changed in: samba (Ubuntu Trusty) Status: Confirmed => Fix Released ** Changed in: samba (Ubuntu Xenial) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Thanks Marc - appears to work for me! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
I have uploaded a test package for trusty that includes the proposed fix for Samba bug #11914 to the following PPA: https://launchpad.net/~mdeslaur/+archive/ubuntu/testing -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
** Changed in: samba Remote watch: Samba Bugzilla #11912 => Samba Bugzilla #11914 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
It seems there're two similar bugs, I've created https://bugzilla.samba.org/show_bug.cgi?id=11914 to track the 2nd problem ** Bug watch added: Samba Bugzilla #11914 https://bugzilla.samba.org/show_bug.cgi?id=11914 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Done :) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Thanks Paul. Could you please add a comment to the upstream bug? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Thanks for testing Paul. Did you update all the binary packages in the PPA, including winbind and samba-libs, and did you reboot or restart all processes including squid? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Yep - added your testing PPA, then: sudo apt-get update sudo apt-get upgrade samba (which brought in all dependencies) Then rebooted the server for good measure :) The above error messages were from after the reboot, and I'm still getting issues when trying to authenticate via the squid proxy. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Just tried and still getting the same problem: samba: Installed: 2:4.3.9+dfsg-0ubuntu0.14.04.2~ppa1 Candidate: 2:4.3.9+dfsg-0ubuntu0.14.04.2~ppa1 Version table: *** 2:4.3.9+dfsg-0ubuntu0.14.04.2~ppa1 0 500 http://ppa.launchpad.net/mdeslaur/testing/ubuntu/ trusty/main amd64 Packages 100 /var/lib/dpkg/status 2:4.3.9+dfsg-0ubuntu0.14.04.1 0 500 http://optubunturepository.MYDOMAIN.net/ubuntu/ trusty-updates/main amd64 Packages 500 http://optubunturepository.MYDOMAIN.net/ubuntu/ trusty-security/main amd64 Packages 2:4.1.6+dfsg-1ubuntu2 0 500 http://optubunturepository.MYDOMAIN.net/ubuntu/ trusty/main amd64 Packages syslog: May 10 14:31:11 optsquidproxy kernel: [ 206.928248] ntlm_auth[2264]: segfault at 8 ip 7f68e2aba9b0 sp 7fff384ec2c8 error 4 in libsamba-security.so.0[7f68e2aaf000+1b000] cache.log: 2016/05/10 14:32:42| WARNING: ntlmauthenticator #1 exited 2016/05/10 14:32:42| Too few ntlmauthenticator processes are running (need 1/10) 2016/05/10 14:32:42| Starting new helpers 2016/05/10 14:32:42| helperOpenServers: Starting 1/10 'ntlm_auth' processes 2016/05/10 14:32:42| ERROR: NTLM Authentication Helper '0x7f8368efb268' crashed!. 2016/05/10 14:32:42| ERROR: NTLM Authentication validating user. Error returned 'BH Internal error' -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
I have uploaded test packages that include the upstream fix to the following PPA: https://launchpad.net/~mdeslaur/+archive/ubuntu/testing Once they finish building, could someone please test them and confirm it fixes the issue? Once someone has tested them successfully, I will publish them as security updates. Thanks! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
** Also affects: samba (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: samba (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: samba (Ubuntu Wily) Importance: Undecided Status: New ** Changed in: samba (Ubuntu Trusty) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** Changed in: samba (Ubuntu Wily) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** Changed in: samba (Ubuntu Xenial) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** Changed in: samba (Ubuntu Trusty) Status: New => Confirmed ** Changed in: samba (Ubuntu Wily) Status: New => Confirmed ** Changed in: samba (Ubuntu Xenial) Status: New => Confirmed ** Changed in: samba (Ubuntu Trusty) Importance: Undecided => High ** Changed in: samba (Ubuntu Wily) Importance: Undecided => High ** Changed in: samba (Ubuntu Xenial) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Upstream has a patch in their bug now -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
** Tags added: regression-update -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
My downgrade command: aptitude -V install winbind=2:4.1.6+dfsg-1ubuntu2 samba=2:4.1.6+dfsg- 1ubuntu2 libwbclient0=2:4.1.6+dfsg-1ubuntu2 samba-libs=2:4.1.6+dfsg- 1ubuntu2 python-samba=2:4.1.6+dfsg-1ubuntu2 samba-vfs-modules=2:4.1.6 +dfsg-1ubuntu2 libldb1=1:1.1.16-1 samba-common=2:4.1.6+dfsg-1ubuntu2 samba-common-bin=2:4.1.6+dfsg-1ubuntu2 samba-dsdb-modules=2:4.1.6+dfsg- 1ubuntu2 python-ldb=1:1.1.16-1 libnss-winbind=2:4.1.6+dfsg-1ubuntu2 libpam-winbind=2:4.1.6+dfsg-1ubuntu2 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
** Also affects: samba via https://bugzilla.samba.org/show_bug.cgi?id=11912 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Could anyone give a quick guide on how to downgrade samba/winbind to workaround this issue while it is fixed? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Have submitted to the Samba developers: https://bugzilla.samba.org/show_bug.cgi?id=11912 ** Bug watch added: Samba Bugzilla #11912 https://bugzilla.samba.org/show_bug.cgi?id=11912 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Could someone who is experiencing this regression with Samba 4.3.9 please report it to the Samba developers here: https://bugzilla.samba.org/ Please attach the bug report with this one once it's been filed. I'd file the bug myself, but they may require more details on the problematic environment. Thanks! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
running an Apache2 server with NTLM authentication against an AD, stopped working with 500 Internal Server error since the Samba upgrade. Apache config: AuthType NTLM AuthName "..." NTLMAuth on NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-.5-ntlmssp" NTLMBasicAuthoritative on require valid-user Syslog: May 9 08:41:17 intranet-gvp kernel: [438844.377831] ntlm_auth[23011]: segfault at 8 ip 7f512efcf9b0 sp 7ffc8017cc78 error 4 in libsamba-security.so.0[7f512efc4000+1b000] May 9 08:41:23 intranet-gvp kernel: [438849.956323] ntlm_auth[23148]: segfault at 8 ip 7f39b08e99b0 sp 7fff4ba86bb8 error 4 in libsamba-security.so.0[7f39b08de000+1b000] May 9 08:41:30 intranet-gvp kernel: [438856.430960] ntlm_auth[23240]: segfault at 8 ip 7f96a55309b0 sp 7ffe0a7eaa98 error 4 in libsamba-security.so.0[7f96a5525000+1b000] May 9 08:43:30 intranet-gvp kernel: [438977.462065] ntlm_auth[25264]: segfault at 8 ip 7f874faf29b0 sp 7ffd417d0478 error 4 in libsamba-security.so.0[7f874fae7000+1b000] May 9 08:45:03 intranet-gvp kernel: [439070.043363] ntlm_auth[28559]: segfault at 8 ip 7fb5af4769b0 sp 7ffcc2b84918 error 4 in libsamba-security.so.0[7fb5af46b000+1b000] May 9 08:47:12 intranet-gvp kernel: [439199.384723] ntlm_auth[30675]: segfault at 8 ip 7f357d1439b0 sp 7ffef1ea7c98 error 4 in libsamba-security.so.0[7f357d138000+1b000] May 9 08:47:25 intranet-gvp kernel: [439211.944010] ntlm_auth[30822]: segfault at 8 ip 7f89a24e49b0 sp 7b32b3c8 error 4 in libsamba-security.so.0[7f89a24d9000+1b000] May 9 08:50:12 intranet-gvp kernel: [439379.146404] ntlm_auth[1121]: segfault at 8 ip 7fdb6f7d19b0 sp 7ffcf44e5728 error 4 in libsamba-security.so.0[7fdb6f7c6000+1b000] After rollback to Samba packages 4.3.8, the system is running again. $ pgrep ntlm -a 2192 ntlm_auth 4951 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp 4952 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp 4953 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp 6074 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp 6503 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp 6596 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp 15376 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp 17037 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp 17149 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Same problem. Am running: Ubuntu Server 14.04.1 LTS Windbind: 2:4.3.9+dfsg-0ubuntu0.14.04.1 Samba: 2:4.3.9+dfsg-0ubuntu0.14.04.1 Squid3: 3.3.8-1ubuntu6.6 Authenticating against Active Directory - has been working really well for the last 18 months, then stopped working about a week ago. Errors in cache.log: 2016/05/09 06:20:07| Too few ntlmauthenticator processes are running (need 1/10) 2016/05/09 06:20:07| Starting new helpers 2016/05/09 06:20:07| helperOpenServers: Starting 1/10 'ntlm_auth' processes 2016/05/09 06:20:07| ERROR: NTLM Authentication Helper '0x7f313ea68318' crashed!. 2016/05/09 06:20:07| ERROR: NTLM Authentication validating user. Error returned 'BH Internal error' 2016/05/09 06:20:08| WARNING: ntlmauthenticator #1 exited Errors in syslog: May 9 06:20:09 optsquidproxy kernel: [228590.127125] ntlm_auth[8850]: segfault at 8 ip 7f201ec729b0 sp 7ffda249aae8 error 4 in libsamba-security.so.0[7f201ec67000+1b000] Squid is using pure NTLM authentication (taken from squid.conf): ### pure ntlm authentication auth_param ntlm program /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp --domain=MYDOMAIN auth_param ntlm children 10 auth_param ntlm keep_alive off -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
I am seeing the same errors. I am using ntlm_auth for Moodle access. When attempting to use NTLM, I show this in the processes: www-data 9866 9856 0 08:52 ?00:00:00 [ntlm_auth] -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
** Description changed: System version: Ubuntu 14.04.4 LTS Squid version: 2:4.3.8+dfsg-0ubuntu0.14.04.2 Winbind version: 2:4.3.8+dfsg-0ubuntu0.14.04.2 upgrade to 2:4.3.9+dfsg-0ubuntu0.14.04.1 My ubuntu server installed Squid to perform http_proxy. Squid auth the - Active Directory users by winbind, settings like follow: + Active Directory users(Win2003) by winbind, settings like follow: ... auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp ... Everything is ok until I upgrade winbind from 2:4.3.8+dfsg- 0ubuntu0.14.04.2 to 2:4.3.9+dfsg-0ubuntu0.14.04.1 today. Squid can't auth the AD users anymore. There are some error log in the cache.log: ... 2016/05/05 13:50:45| ERROR: NTLM Authentication Helper '0x7fb54812af68' crashed!. 2016/05/05 13:50:45| ERROR: NTLM Authentication validating user. Error returned 'BH Internal error' ... And there are some error log in the /var/log/syslog: ... May 5 09:26:08 ocelot kernel: [ 187.793014] ntlm_auth[4543]: segfault at 8 ip 7f10aad619b0 sp 7ffc1ed0e778 error 4 in libsamba-security.so.0[7f10aad56000+1b000] May 5 09:26:08 ocelot kernel: [ 188.207378] ntlm_auth[5062]: segfault at 8 ip 7f41ada4d9b0 sp 7ffebc1a1108 error 4 in libsamba-security.so.0[7f41ada42000+1b000] May 5 09:26:08 ocelot kernel: [ 188.438501] ntlm_auth[4535]: segfault at 8 ip 7f73fa26a9b0 sp 7ffc1c63f808 error 4 in libsamba-security.so.0[7f73fa25f000+1b000] May 5 09:26:35 ocelot kernel: [ 214.949867] ntlm_auth[5063]: segfault at 8 ip 7fc1b5c459b0 sp 7fffd3d5b398 error 4 in libsamba-security.so.0[7fc1b5c3a000+1b000] May 5 09:26:35 ocelot kernel: [ 215.026850] ntlm_auth[5067]: segfault at 8 ip 7f782ba5c9b0 sp 7ffe59d96aa8 error 4 in libsamba-security.so.0[7f782ba51000+1b000] ... And now I downgraded winbind to 2:4.1.6+dfsg-1ubuntu2(I can't downgrade it to 2:4.3.8+dfsg-0ubuntu0.14.04.2, it keeps telling me "Unable to find a version..."), Squid auth_param ntlm works again. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
When I run the commands on the command line they don't exit and pressing return gives: ERR Pressing "?" gives (for ntlmssp, not basic): BH Query invalid Typing about anything else gives me (again, only for ntlmssp, not basic): BH SPNEGO request invalid prefix I tried installing gdb and creating a backtrace, but I'm not sure what I'm doing - can't see to get anything useful. I'm reading this may be because apport is enabled? It looks like apport creates files under /var/crash/_usr_bin_ntlm_auth.13.crash automatically - I've attached this hoping it has what you need. ** Attachment added: "_usr_bin_ntlm_auth.13.crash" https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+attachment/4656633/+files/_usr_bin_ntlm_auth.13.crash -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
I can't seem to reproduce this issue. Can someone get a backtrace? Are you able to reproduce it by using ntlm_auth directly on the command line, like so?: $ sudo ntlm_auth --helper-protocol=squid-2.5-basic MYDOMAIN\testuser mypassword $ sudo ntlm_auth --helper-protocol=squid-2.5-ntlmssp MYDOMAIN\testuser mypassword -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Windows AD i have rolled back and all good now. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Just so I can try and reproduce this in a test environment, are you authenticating to a Windows AD, or to a Samba AD? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
** Changed in: samba (Ubuntu) Importance: Undecided => High ** Changed in: samba (Ubuntu) Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Yep, we had to turn off single signon -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
This broke web browsing for my 325 employees this morning. Trying to research how to roll back to 2:4.1.6+dfsg-1ubuntu2. Please provide instructions if you can to help others affected. Thanks for reporting this and your help! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: samba (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault
** Description changed: System version: Ubuntu 14.04.4 LTS Squid version: 2:4.3.8+dfsg-0ubuntu0.14.04.2 Winbind version: 2:4.3.8+dfsg-0ubuntu0.14.04.2 upgrade to 2:4.3.9+dfsg-0ubuntu0.14.04.1 My ubuntu server installed Squid to perform http_proxy. Squid auth the Active Directory users by winbind, settings like follow: ... auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp ... Everything is ok until I upgrade winbind from 2:4.3.8+dfsg- 0ubuntu0.14.04.2 to 2:4.3.9+dfsg-0ubuntu0.14.04.1 today. Squid can't auth the AD users anymore. There are some error log in the cache.log: ... 2016/05/05 13:50:45| ERROR: NTLM Authentication Helper '0x7fb54812af68' crashed!. 2016/05/05 13:50:45| ERROR: NTLM Authentication validating user. Error returned 'BH Internal error' ... And there are some error log in the /var/log/syslog: ... May 5 09:26:08 ocelot kernel: [ 187.793014] ntlm_auth[4543]: segfault at 8 ip 7f10aad619b0 sp 7ffc1ed0e778 error 4 in libsamba-security.so.0[7f10aad56000+1b000] May 5 09:26:08 ocelot kernel: [ 188.207378] ntlm_auth[5062]: segfault at 8 ip 7f41ada4d9b0 sp 7ffebc1a1108 error 4 in libsamba-security.so.0[7f41ada42000+1b000] May 5 09:26:08 ocelot kernel: [ 188.438501] ntlm_auth[4535]: segfault at 8 ip 7f73fa26a9b0 sp 7ffc1c63f808 error 4 in libsamba-security.so.0[7f73fa25f000+1b000] May 5 09:26:35 ocelot kernel: [ 214.949867] ntlm_auth[5063]: segfault at 8 ip 7fc1b5c459b0 sp 7fffd3d5b398 error 4 in libsamba-security.so.0[7fc1b5c3a000+1b000] May 5 09:26:35 ocelot kernel: [ 215.026850] ntlm_auth[5067]: segfault at 8 ip 7f782ba5c9b0 sp 7ffe59d96aa8 error 4 in libsamba-security.so.0[7f782ba51000+1b000] ... + + And now I downgraded winbind to 2:4.1.6+dfsg-1ubuntu2(I can't downgrade + it to 2:4.3.8+dfsg-0ubuntu0.14.04.2, it keeps telling me "Unable to find + a version..."), Squid auth_param ntlm works again. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1578576 Title: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs