Zabbix-server crashes after updating libnetapi/winbind to the latest version

[OpsCharlie]

Working setup:

• AlmaLinux release 8.9 (Midnight Oncilla)
• kernel: 4.18.0-513.9.1.el8_9.x86_64
• zabbix_server (Zabbix) 6.0.25
• postgresql13-server-13.13-2PGDG.rhel8.x86_64
• Server is AD integrated with winbind (samba-winbind-4.17.5-3.el8_8.alma.x86_64)

Reproduce bug

When updating libnetapi and its dependencies to the latest version (4.18.6) the zabbix-server crashes.
Debug log:

1133084:20231212:140637.531 zbx_setproctitle() title:'preprocessing worker #3 starting'
1133084:20231212:140637.535 In zbx_ipc_socket_open()
1133084:20231212:140638.658 End of zbx_ipc_socket_open():SUCCEED
1133084:20231212:140638.662 In zbx_ipc_socket_write()
1133084:20231212:140638.665 End of zbx_ipc_socket_write():SUCCEED
1133084:20231212:140638.669 server #10 started [preprocessing worker #3]
1133084:20231212:140639.073 zbx_setproctitle() title:'preprocessing worker #3 started'
1133084:20231212:140639.076 In zbx_ipc_socket_read()
1133084:20231212:140641.224 End of zbx_ipc_socket_read():FAIL
1133084:20231212:140641.228 cannot read preprocessing service request
1133030:20231212:140644.796 One child process died (PID:1133084,exitcode/signal:1). Exiting ...

Repair

Downgrading winbind/libnetapi to 4.17

[codyro]

Just to clarify, did samba-winbind update to 4.18.6-2 when updating to libnetapi-4.18.6? Is SELinux enabled and if so is there anything in the audit.log?

[OpsCharlie]

Hi @codyro

These are the dependencies that are updated together:

 libnetapi              x86_64     4.18.6-2.el8_9.alma.1
 libsmbclient           x86_64     4.18.6-2.el8_9.alma.1
 libwbclient            x86_64     4.18.6-2.el8_9.alma.1
 python3-samba          x86_64     4.18.6-2.el8_9.alma.1
 python3-samba-dc       x86_64     4.18.6-2.el8_9.alma.1
 samba                  x86_64     4.18.6-2.el8_9.alma.1
 samba-client-libs      x86_64     4.18.6-2.el8_9.alma.1
 samba-common           noarch     4.18.6-2.el8_9.alma.1
 samba-common-libs      x86_64     4.18.6-2.el8_9.alma.1
 samba-common-tools     x86_64     4.18.6-2.el8_9.alma.1
 samba-dc-libs          x86_64     4.18.6-2.el8_9.alma.1
 samba-dcerpc           x86_64     4.18.6-2.el8_9.alma.1
 samba-ldb-ldap-modules x86_64     4.18.6-2.el8_9.alma.1
 samba-libs             x86_64     4.18.6-2.el8_9.alma.1
 samba-tools            x86_64     4.18.6-2.el8_9.alma.1
 samba-winbind          x86_64     4.18.6-2.el8_9.alma.1
 samba-winbind-clients  x86_64     4.18.6-2.el8_9.alma.1
 samba-winbind-modules  x86_64     4.18.6-2.el8_9.alma.1

SELinux is disabled.

[OpsCharlie]

Hi @codyro

Please make samba-4.18.7 available as it fixed in this version:
https://bugzilla.samba.org/show_bug.cgi?id=15464

Kind regards

[andrewlukoshko]

AlmaLinux 8.10 will get at least samba-4.19.4 with bugfix included.