[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Launchpad Bug Tracker]

This bug was fixed in the package samba - 2:4.3.9+dfsg-0ubuntu1

---
samba (2:4.3.9+dfsg-0ubuntu1) yakkety; urgency=medium

  * SECURITY REGRESSION: Updated to 4.3.9 to fix multiple regressions in
the previous security updates. (LP: #1577739)
- debian/control: bump tevent Build-Depends to 0.9.28.
  * SECURITY REGRESSION: NTLM authentication issues (LP: #1578576)
- debian/patches/samba-bug11912.patch: let msrpc_parse() return
  talloc'ed empty strings in libcli/auth/msrpc_parse.c.
- debian/patches/samba-bug11914.patch: make
  ntlm_auth_generate_session_info() more complete in
  source3/utils/ntlm_auth.c.

 -- Marc Deslauriers   Wed, 25 May 2016
09:29:15 -0400

** Changed in: samba (Ubuntu)
   Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Launchpad Bug Tracker]

This bug was fixed in the package samba - 2:4.3.9+dfsg-0ubuntu0.15.10.2

---
samba (2:4.3.9+dfsg-0ubuntu0.15.10.2) wily-security; urgency=medium

  * SECURITY REGRESSION: NTLM authentication issues (LP: #1578576)
- debian/patches/samba-bug11912.patch: let msrpc_parse() return
  talloc'ed empty strings in libcli/auth/msrpc_parse.c.
- debian/patches/samba-bug11914.patch: make
  ntlm_auth_generate_session_info() more complete in
  source3/utils/ntlm_auth.c.

 -- Marc Deslauriers   Fri, 20 May 2016
08:09:44 -0400

** Changed in: samba (Ubuntu Wily)
   Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Launchpad Bug Tracker]

This bug was fixed in the package samba - 2:4.3.9+dfsg-0ubuntu0.16.04.2

---
samba (2:4.3.9+dfsg-0ubuntu0.16.04.2) xenial-security; urgency=medium

  * SECURITY REGRESSION: NTLM authentication issues (LP: #1578576)
- debian/patches/samba-bug11912.patch: let msrpc_parse() return
  talloc'ed empty strings in libcli/auth/msrpc_parse.c.
- debian/patches/samba-bug11914.patch: make
  ntlm_auth_generate_session_info() more complete in
  source3/utils/ntlm_auth.c.

 -- Marc Deslauriers   Fri, 20 May 2016
07:31:37 -0400

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Launchpad Bug Tracker]

This bug was fixed in the package samba - 2:4.3.9+dfsg-0ubuntu0.14.04.3

---
samba (2:4.3.9+dfsg-0ubuntu0.14.04.3) trusty-security; urgency=medium

  * SECURITY REGRESSION: NTLM authentication issues (LP: #1578576)
- debian/patches/samba-bug11912.patch: let msrpc_parse() return
  talloc'ed empty strings in libcli/auth/msrpc_parse.c.
- debian/patches/samba-bug11914.patch: make
  ntlm_auth_generate_session_info() more complete in
  source3/utils/ntlm_auth.c.
  * debian/rules: work around amd64 build failure (LP: #1585174)

 -- Marc Deslauriers   Tue, 24 May 2016
07:47:59 -0400

** Changed in: samba (Ubuntu Trusty)
   Status: Confirmed => Fix Released

** Changed in: samba (Ubuntu Xenial)
   Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Paul Strinati]

Thanks Marc - appears to work for me!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Marc Deslauriers]

I have uploaded a test package for trusty that includes the proposed fix
for Samba bug #11914 to the following PPA:

https://launchpad.net/~mdeslaur/+archive/ubuntu/testing

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Marc Deslauriers]

** Changed in: samba
 Remote watch: Samba Bugzilla #11912 => Samba Bugzilla #11914

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Stefan Metzmacher]

It seems there're two similar bugs, I've created
https://bugzilla.samba.org/show_bug.cgi?id=11914 to track the 2nd problem

** Bug watch added: Samba Bugzilla #11914
   https://bugzilla.samba.org/show_bug.cgi?id=11914

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Paul Strinati]

Done :)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Marc Deslauriers]

Thanks Paul. Could you please add a comment to the upstream bug?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Marc Deslauriers]

Thanks for testing Paul. Did you update all the binary packages in the
PPA, including winbind and samba-libs, and did you reboot or restart all
processes including squid?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Paul Strinati]

Yep - added your testing PPA, then:

sudo apt-get update
sudo apt-get upgrade samba (which brought in all dependencies)

Then rebooted the server for good measure :)

The above error messages were from after the reboot, and I'm still
getting issues when trying to authenticate via the squid proxy.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Paul Strinati]

Just tried and still getting the same problem:
samba:
  Installed: 2:4.3.9+dfsg-0ubuntu0.14.04.2~ppa1
  Candidate: 2:4.3.9+dfsg-0ubuntu0.14.04.2~ppa1
  Version table:
 *** 2:4.3.9+dfsg-0ubuntu0.14.04.2~ppa1 0
500 http://ppa.launchpad.net/mdeslaur/testing/ubuntu/ trusty/main amd64 
Packages
100 /var/lib/dpkg/status
 2:4.3.9+dfsg-0ubuntu0.14.04.1 0
500 http://optubunturepository.MYDOMAIN.net/ubuntu/ trusty-updates/main 
amd64 Packages
500 http://optubunturepository.MYDOMAIN.net/ubuntu/ 
trusty-security/main amd64 Packages
 2:4.1.6+dfsg-1ubuntu2 0
500 http://optubunturepository.MYDOMAIN.net/ubuntu/ trusty/main amd64 
Packages

syslog:
May 10 14:31:11 optsquidproxy kernel: [  206.928248] ntlm_auth[2264]: segfault 
at 8 ip 7f68e2aba9b0 sp 7fff384ec2c8 error 4 in 
libsamba-security.so.0[7f68e2aaf000+1b000]

cache.log:
2016/05/10 14:32:42| WARNING: ntlmauthenticator #1 exited
2016/05/10 14:32:42| Too few ntlmauthenticator processes are running (need 1/10)
2016/05/10 14:32:42| Starting new helpers
2016/05/10 14:32:42| helperOpenServers: Starting 1/10 'ntlm_auth' processes
2016/05/10 14:32:42| ERROR: NTLM Authentication Helper '0x7f8368efb268' 
crashed!.
2016/05/10 14:32:42| ERROR: NTLM Authentication validating user. Error returned 
'BH Internal error'

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Marc Deslauriers]

I have uploaded test packages that include the upstream fix to the
following PPA:

https://launchpad.net/~mdeslaur/+archive/ubuntu/testing

Once they finish building, could someone please test them and confirm it
fixes the issue?

Once someone has tested them successfully, I will publish them as
security updates.

Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Marc Deslauriers]

** Also affects: samba (Ubuntu Xenial)
   Importance: Undecided
   Status: New

** Also affects: samba (Ubuntu Trusty)
   Importance: Undecided
   Status: New

** Also affects: samba (Ubuntu Wily)
   Importance: Undecided
   Status: New

** Changed in: samba (Ubuntu Trusty)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: samba (Ubuntu Wily)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: samba (Ubuntu Xenial)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: samba (Ubuntu Trusty)
   Status: New => Confirmed

** Changed in: samba (Ubuntu Wily)
   Status: New => Confirmed

** Changed in: samba (Ubuntu Xenial)
   Status: New => Confirmed

** Changed in: samba (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: samba (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: samba (Ubuntu Xenial)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Sebastien Bacher]

Upstream has a patch in their bug now

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Thomas]

** Tags added: regression-update

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[sense]

My downgrade command:

aptitude -V install winbind=2:4.1.6+dfsg-1ubuntu2 samba=2:4.1.6+dfsg-
1ubuntu2 libwbclient0=2:4.1.6+dfsg-1ubuntu2 samba-libs=2:4.1.6+dfsg-
1ubuntu2 python-samba=2:4.1.6+dfsg-1ubuntu2 samba-vfs-modules=2:4.1.6
+dfsg-1ubuntu2 libldb1=1:1.1.16-1 samba-common=2:4.1.6+dfsg-1ubuntu2
samba-common-bin=2:4.1.6+dfsg-1ubuntu2 samba-dsdb-modules=2:4.1.6+dfsg-
1ubuntu2 python-ldb=1:1.1.16-1 libnss-winbind=2:4.1.6+dfsg-1ubuntu2
libpam-winbind=2:4.1.6+dfsg-1ubuntu2

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Marc Deslauriers]

** Also affects: samba via
   https://bugzilla.samba.org/show_bug.cgi?id=11912
   Importance: Unknown
   Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Paul Carroll]

Could anyone give a quick guide on how to downgrade samba/winbind to
workaround this issue while it is fixed?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Paul Strinati]

Have submitted to the Samba developers:
https://bugzilla.samba.org/show_bug.cgi?id=11912


** Bug watch added: Samba Bugzilla #11912
   https://bugzilla.samba.org/show_bug.cgi?id=11912

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Marc Deslauriers]

Could someone who is experiencing this regression with Samba 4.3.9
please report it to the Samba developers here:

https://bugzilla.samba.org/

Please attach the bug report with this one once it's been filed.

I'd file the bug myself, but they may require more details on the
problematic environment.

Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Sven Ehret]

running an Apache2 server with NTLM authentication against an AD,
stopped working with 500 Internal Server error since the Samba upgrade.

Apache config:
AuthType NTLM
AuthName "..."
NTLMAuth on
NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-.5-ntlmssp"
NTLMBasicAuthoritative on
require valid-user

Syslog:
May  9 08:41:17 intranet-gvp kernel: [438844.377831] ntlm_auth[23011]: segfault 
at 8 ip 7f512efcf9b0 sp 7ffc8017cc78 error 4 in 
libsamba-security.so.0[7f512efc4000+1b000]
May  9 08:41:23 intranet-gvp kernel: [438849.956323] ntlm_auth[23148]: segfault 
at 8 ip 7f39b08e99b0 sp 7fff4ba86bb8 error 4 in 
libsamba-security.so.0[7f39b08de000+1b000]
May  9 08:41:30 intranet-gvp kernel: [438856.430960] ntlm_auth[23240]: segfault 
at 8 ip 7f96a55309b0 sp 7ffe0a7eaa98 error 4 in 
libsamba-security.so.0[7f96a5525000+1b000]
May  9 08:43:30 intranet-gvp kernel: [438977.462065] ntlm_auth[25264]: segfault 
at 8 ip 7f874faf29b0 sp 7ffd417d0478 error 4 in 
libsamba-security.so.0[7f874fae7000+1b000]
May  9 08:45:03 intranet-gvp kernel: [439070.043363] ntlm_auth[28559]: segfault 
at 8 ip 7fb5af4769b0 sp 7ffcc2b84918 error 4 in 
libsamba-security.so.0[7fb5af46b000+1b000]
May  9 08:47:12 intranet-gvp kernel: [439199.384723] ntlm_auth[30675]: segfault 
at 8 ip 7f357d1439b0 sp 7ffef1ea7c98 error 4 in 
libsamba-security.so.0[7f357d138000+1b000]
May  9 08:47:25 intranet-gvp kernel: [439211.944010] ntlm_auth[30822]: segfault 
at 8 ip 7f89a24e49b0 sp 7b32b3c8 error 4 in 
libsamba-security.so.0[7f89a24d9000+1b000]
May  9 08:50:12 intranet-gvp kernel: [439379.146404] ntlm_auth[1121]: segfault 
at 8 ip 7fdb6f7d19b0 sp 7ffcf44e5728 error 4 in 
libsamba-security.so.0[7fdb6f7c6000+1b000]

After rollback to Samba packages 4.3.8, the system is running again.

$ pgrep ntlm -a
2192 ntlm_auth
4951 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
4952 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
4953 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
6074 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
6503 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
6596 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
15376 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
17037 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
17149 /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Paul Strinati]

Same problem. Am running:

Ubuntu Server 14.04.1 LTS
Windbind: 2:4.3.9+dfsg-0ubuntu0.14.04.1
Samba: 2:4.3.9+dfsg-0ubuntu0.14.04.1
Squid3: 3.3.8-1ubuntu6.6

Authenticating against Active Directory - has been working really well
for the last 18 months, then stopped working about a week ago.

Errors in cache.log:
2016/05/09 06:20:07| Too few ntlmauthenticator processes are running (need 1/10)
2016/05/09 06:20:07| Starting new helpers
2016/05/09 06:20:07| helperOpenServers: Starting 1/10 'ntlm_auth' processes
2016/05/09 06:20:07| ERROR: NTLM Authentication Helper '0x7f313ea68318' 
crashed!.
2016/05/09 06:20:07| ERROR: NTLM Authentication validating user. Error returned 
'BH Internal error'
2016/05/09 06:20:08| WARNING: ntlmauthenticator #1 exited

Errors in syslog:
May  9 06:20:09 optsquidproxy kernel: [228590.127125] ntlm_auth[8850]: segfault 
at 8 ip 7f201ec729b0 sp 7ffda249aae8 error 4 in 
libsamba-security.so.0[7f201ec67000+1b000]

Squid is using pure NTLM authentication (taken from squid.conf):
### pure ntlm authentication
auth_param ntlm program /usr/bin/ntlm_auth --diagnostics 
--helper-protocol=squid-2.5-ntlmssp --domain=MYDOMAIN
auth_param ntlm children 10
auth_param ntlm keep_alive off

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Patrick McKenna]

I am seeing the same errors. I am using ntlm_auth for Moodle access.

When attempting to use NTLM, I show this in the processes:

www-data  9866  9856  0 08:52 ?00:00:00 [ntlm_auth] 

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[sense]

** Description changed:

  System version: Ubuntu 14.04.4 LTS
  Squid version: 2:4.3.8+dfsg-0ubuntu0.14.04.2
  Winbind version: 2:4.3.8+dfsg-0ubuntu0.14.04.2 upgrade to 
2:4.3.9+dfsg-0ubuntu0.14.04.1
  
  My ubuntu server installed Squid to perform http_proxy. Squid auth the
- Active Directory users by winbind, settings like follow:
+ Active Directory users(Win2003) by winbind, settings like follow:
  
  ...
  auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
  ...
  
  Everything is ok until I upgrade winbind from 2:4.3.8+dfsg-
  0ubuntu0.14.04.2 to 2:4.3.9+dfsg-0ubuntu0.14.04.1 today. Squid can't
  auth the AD users anymore. There are some error log in the cache.log:
  
  ...
  2016/05/05 13:50:45| ERROR: NTLM Authentication Helper '0x7fb54812af68' 
crashed!.
  2016/05/05 13:50:45| ERROR: NTLM Authentication validating user. Error 
returned 'BH Internal error'
  ...
  
  And there are some error log in the /var/log/syslog:
  
  ...
  May  5 09:26:08 ocelot kernel: [  187.793014] ntlm_auth[4543]: segfault at 8 
ip 7f10aad619b0 sp 7ffc1ed0e778 error 4 in 
libsamba-security.so.0[7f10aad56000+1b000]
  May  5 09:26:08 ocelot kernel: [  188.207378] ntlm_auth[5062]: segfault at 8 
ip 7f41ada4d9b0 sp 7ffebc1a1108 error 4 in 
libsamba-security.so.0[7f41ada42000+1b000]
  May  5 09:26:08 ocelot kernel: [  188.438501] ntlm_auth[4535]: segfault at 8 
ip 7f73fa26a9b0 sp 7ffc1c63f808 error 4 in 
libsamba-security.so.0[7f73fa25f000+1b000]
  May  5 09:26:35 ocelot kernel: [  214.949867] ntlm_auth[5063]: segfault at 8 
ip 7fc1b5c459b0 sp 7fffd3d5b398 error 4 in 
libsamba-security.so.0[7fc1b5c3a000+1b000]
  May  5 09:26:35 ocelot kernel: [  215.026850] ntlm_auth[5067]: segfault at 8 
ip 7f782ba5c9b0 sp 7ffe59d96aa8 error 4 in 
libsamba-security.so.0[7f782ba51000+1b000]
  ...
  
  And now I downgraded winbind to 2:4.1.6+dfsg-1ubuntu2(I can't downgrade
  it to 2:4.3.8+dfsg-0ubuntu0.14.04.2, it keeps telling me "Unable to find
  a version..."), Squid auth_param ntlm works again.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[ewaldmire]

When I run the commands on the command line they don't exit and pressing
return gives:

ERR

Pressing "?" gives (for ntlmssp, not basic):

BH Query invalid

Typing about anything else gives me (again, only for ntlmssp, not
basic):

BH SPNEGO request invalid prefix

I tried installing gdb and creating a backtrace, but I'm not sure what
I'm doing - can't see to get anything useful.  I'm reading this may be
because apport is enabled?

It looks like apport creates files under
/var/crash/_usr_bin_ntlm_auth.13.crash automatically - I've attached
this hoping it has what you need.

** Attachment added: "_usr_bin_ntlm_auth.13.crash"
   
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+attachment/4656633/+files/_usr_bin_ntlm_auth.13.crash

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Marc Deslauriers]

I can't seem to reproduce this issue. Can someone get a backtrace?

Are you able to reproduce it by using ntlm_auth directly on the command
line, like so?:

$ sudo ntlm_auth --helper-protocol=squid-2.5-basic
MYDOMAIN\testuser mypassword

$ sudo ntlm_auth --helper-protocol=squid-2.5-ntlmssp
MYDOMAIN\testuser mypassword

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Mich]

Windows AD

i have rolled back and all good now.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Marc Deslauriers]

Just so I can try and reproduce this in a test environment, are you
authenticating to a Windows AD, or to a Samba AD?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Sebastien Bacher]

** Changed in: samba (Ubuntu)
   Importance: Undecided => High

** Changed in: samba (Ubuntu)
 Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Mich]

Yep, we had to turn off single signon

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[ewaldmire]

This broke web browsing for my 325 employees this morning.  Trying to
research how to roll back to 2:4.1.6+dfsg-1ubuntu2.  Please provide
instructions if you can to help others affected.   Thanks for reporting
this and your help!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[Launchpad Bug Tracker]

Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: samba (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1578576] Re: ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

[sense]

** Description changed:

  System version: Ubuntu 14.04.4 LTS
  Squid version: 2:4.3.8+dfsg-0ubuntu0.14.04.2
  Winbind version: 2:4.3.8+dfsg-0ubuntu0.14.04.2 upgrade to 
2:4.3.9+dfsg-0ubuntu0.14.04.1
  
  My ubuntu server installed Squid to perform http_proxy. Squid auth the
  Active Directory users by winbind, settings like follow:
  
  ...
  auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
  ...
  
  Everything is ok until I upgrade winbind from 2:4.3.8+dfsg-
  0ubuntu0.14.04.2 to 2:4.3.9+dfsg-0ubuntu0.14.04.1 today. Squid can't
  auth the AD users anymore. There are some error log in the cache.log:
  
  ...
  2016/05/05 13:50:45| ERROR: NTLM Authentication Helper '0x7fb54812af68' 
crashed!.
  2016/05/05 13:50:45| ERROR: NTLM Authentication validating user. Error 
returned 'BH Internal error'
  ...
  
  And there are some error log in the /var/log/syslog:
  
  ...
  May  5 09:26:08 ocelot kernel: [  187.793014] ntlm_auth[4543]: segfault at 8 
ip 7f10aad619b0 sp 7ffc1ed0e778 error 4 in 
libsamba-security.so.0[7f10aad56000+1b000]
  May  5 09:26:08 ocelot kernel: [  188.207378] ntlm_auth[5062]: segfault at 8 
ip 7f41ada4d9b0 sp 7ffebc1a1108 error 4 in 
libsamba-security.so.0[7f41ada42000+1b000]
  May  5 09:26:08 ocelot kernel: [  188.438501] ntlm_auth[4535]: segfault at 8 
ip 7f73fa26a9b0 sp 7ffc1c63f808 error 4 in 
libsamba-security.so.0[7f73fa25f000+1b000]
  May  5 09:26:35 ocelot kernel: [  214.949867] ntlm_auth[5063]: segfault at 8 
ip 7fc1b5c459b0 sp 7fffd3d5b398 error 4 in 
libsamba-security.so.0[7fc1b5c3a000+1b000]
  May  5 09:26:35 ocelot kernel: [  215.026850] ntlm_auth[5067]: segfault at 8 
ip 7f782ba5c9b0 sp 7ffe59d96aa8 error 4 in 
libsamba-security.so.0[7f782ba51000+1b000]
  ...
+ 
+ And now I downgraded winbind to 2:4.1.6+dfsg-1ubuntu2(I can't downgrade
+ it to 2:4.3.8+dfsg-0ubuntu0.14.04.2, it keeps telling me "Unable to find
+ a version..."), Squid auth_param ntlm works again.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs