Meiko Watu's questions

I've got a really strange problem running Xenserver 7.0 (tried 7.1 as well) on a Dell M620 with BCM57810 network card.

The whole setup is fine and running flawlessly with no traffic. I've got a Windows Server 2016 running and can access it with RDC through a Vyos firewall etc. On another virtual machine I want to run an owncloud instance and add another IP to the network interface and forward the traffic to it. As soon as I access the owncloud http interface, the whole server is crashing with a kernel panic and error messages relating to the Broadcom network driver.

device tap13.0 left promiscuous mode
device vif13.0 left promiscuous mode
------------[ cut here ]------------
WARNING: at net/sched/sch_generic.c:255 dev_watchdog+0x1a4/0x280()
NETDEV WATCHDOG: eth0 (bnx2x): transmit queue 0 timed out
Modules linked in: btrfs zlib_deflate raid6_pq xor xfs tun nfsv3 nfs fscache bnx2fc(O) cnic(O) uio fcoe libfcoe libfc scsi_transport_fc scsi_tgt openvswitch(O) gre 8021q garp mrp stp llc ipt_REJECT nf_conntrack_ipv4 nf_defrag_ipv4 xt_tcpudp xt_multiport dm_multipath xt_conntrack nf_conntrack iptable_filter ipmi_devintf coretemp crc32_pclmul aesni_intel aes_x86_64 ablk_helper cryptd lrw lpc_ich mfd_core sg ipmi_si ipmi_msghandler wmi sb_edac edac_core hed shpchp nfsd auth_rpcgss oid_registry nfs_acl lockd nls_utf8 isofs sunrpc ip_tables x_tables hid_generic usbhid hid sd_mod ahci libahci libata bnx2x(O) ehci_pci ehci_hcd mdio libcrc32c ptp megaraid_sas(O) pps_core scsi_dh_rdac scsi_dh_hp_sw scsi_dh_emc scsi_dh_alua scsi_dh scsi_mod ipv6 autofs4
CPU: 6 PID: 0 Comm: swapper/6 Tainted: G           O 3.10.0+10 #1
Hardware name: Dell Inc. PowerEdge M620/0VHRN7, BIOS 2.5.4 01/27/2016
 0000000000000009 ffff8801354c3d58 ffffffff815427c7 ffff8801354c3d90
 ffffffff81054da1 ffff88012e210000 0000000000000000 0000000000000006
 ffff88012efe7100 ffff88012efe7080 ffff8801354c3df0 ffffffff81054e0c
Call Trace:
 <IRQ>  [<ffffffff815427c7>] dump_stack+0x19/0x1b
 [<ffffffff81054da1>] warn_slowpath_common+0x61/0x80
 [<ffffffff81054e0c>] warn_slowpath_fmt+0x4c/0x50
 [<ffffffff8149cd44>] dev_watchdog+0x1a4/0x280
 [<ffffffff8149cba0>] ? dev_deactivate_queue.constprop.29+0x60/0x60
 [<ffffffff81063cd3>] call_timer_fn+0x53/0x130
 [<ffffffff8149cba0>] ? dev_deactivate_queue.constprop.29+0x60/0x60
 [<ffffffff810658fd>] run_timer_softirq+0x22d/0x290
 [<ffffffff8105d48b>] __do_softirq+0xfb/0x240
 [<ffffffff8155255c>] call_softirq+0x1c/0x30
 [<ffffffff81014203>] do_softirq+0x43/0x80
 [<ffffffff8105d6d9>] irq_exit+0x49/0xa0
 [<ffffffff81384b55>] xen_evtchn_do_upcall+0x35/0x50
 [<ffffffff815525be>] xen_do_hypervisor_callback+0x1e/0xa0
 <EOI>  [<ffffffff810013aa>] ? xen_hypercall_sched_op+0xa/0x20
 [<ffffffff810013aa>] ? xen_hypercall_sched_op+0xa/0x20
 [<ffffffff8100a340>] ? xen_safe_halt+0x10/0x30
 [<ffffffff8101a844>] ? default_idle+0x44/0xd0
 [<ffffffff8101b038>] ? arch_cpu_idle+0x18/0x30
 [<ffffffff810a3532>] ? cpu_startup_entry+0x1c2/0x280
 [<ffffffff8152e11d>] ? cpu_bringup_and_idle+0x13/0x15
---[ end trace 3267d319304e6e4c ]---
ULP_STOP
bnx2fc: ERROR:bnx2fc_destroy_timer - Destroy compl not received!!
bnx2x: [bnx2x_stats_comp:211(eth0)]timeout waiting for stats finished
bnx2x: [bnx2x_stats_comp:211(eth0)]timeout waiting for stats finished
[bnx2x_clean_tx_queue:1624(eth0)]timeout waiting for queue[0]: txdata->tx_pkt_prod(17962) != txdata->tx_pkt_cons(17955)
[bnx2x_clean_tx_queue:1624(eth0)]timeout waiting for queue[24]: txdata->tx_pkt_prod(49476) != txdata->tx_pkt_cons(49474)
[bnx2x_clean_tx_queue:1624(eth0)]timeout waiting for queue[0]: txdata->tx_pkt_prod(17962) != txdata->tx_pkt_cons(17955)
[bnx2x_clean_tx_queue:1624(eth0)]timeout waiting for queue[24]: txdata->tx_pkt_prod(49476) != txdata->tx_pkt_cons(49474)
[bnx2x_state_wait:329(eth0)]timeout waiting for state 0
bnx2x: [bnx2x_del_all_macs:9335(eth0)]Failed to delete MACs: -16
bnx2x: [bnx2x_chip_cleanup:10164(eth0)]Failed to schedule DEL commands for UC MACs list: -16
[bnx2x_state_wait:329(eth0)]timeout waiting for state 9
[bnx2x_state_wait:329(eth0)]timeout waiting for state 2
bnx2x: [bnx2x_func_stop:9935(eth0)]FUNC_STOP ramrod failed. Running a dry transaction
bnx2x: [bnx2x_issue_dmae_with_comp:757(eth0)]DMAE timeout!
bnx2x: [bnx2x_write_dmae:806(eth0)]DMAE returned failure -1
bnx2x: [bnx2x_issue_dmae_with_comp:757(eth0)]DMAE timeout!
bnx2x: [bnx2x_write_dmae:806(eth0)]DMAE returned failure -1
bnx2x: [bnx2x_issue_dmae_with_comp:757(eth0)]DMAE timeout!
bnx2x: [bnx2x_write_dmae:806(eth0)]DMAE returned failure -1
bnx2x: [bnx2x_issue_dmae_with_comp:757(eth0)]DMAE timeout!
bnx2x: [bnx2x_write_dmae:806(eth0)]DMAE returned failure -1

The network diagram is as follows:

Unfortunately I cannot install the vendor driver since I don't have the kernel headers to compile the driver manually.

I tried to disable virtual interfaces in the NIC configuration but without any success. Also disable_tpa or other module parameter didn't give me any success.

Hope anyone has any ideas.

I'm trying to mount a cifs folder on a ubuntu server with multiuser support from a windows DC.

I can get user kerberos tickets as root on the server and mount the directory with kerberos without any problems. But I don't want to mount the directory as a user, it should be mounted as multiuser and accessible for all users on the server.

Maybe this is just a general question about understanding, maybe you can correct me whats wrong here.

• The multiuser mounting server needs a keytab from the DC (ktpass export for cifs/samba.domain)
• Samba uses this keytab to mount the DC share multiuser
• Winbind / kerberos authenticates the users against the DC and issues a ticket
• The user can access the share with his ticket

I exported a keytab file on the DC and put it as the global keytab file /etc/krb5.keytab

root@remote:/etc# klist -ke
Keytab name: FILE:/etc/krb5.keytab
KVNO Principal
---- --------------------------------------------------------------------------
   3 cifs/[email protected] (des-cbc-md5) 

But I still cannot mount the directory because the key is not available mount error(126): Required key not available

syslog shows me this:

May 17 11:37:22 remote cifs.upcall: key description: cifs.spnego;0;0;3f000000;ver=0x2;host=nina.mbeya.domain.org;ip4=10.10.10.17;sec=krb5;uid=0x0;creduid=0x0;user=root;pid=0x599b
May 17 11:37:22 remote cifs.upcall: ver=2
May 17 11:37:22 remote cifs.upcall: host=nina.mbeya.domain.org
May 17 11:37:22 remote cifs.upcall: ip=10.10.10.17
May 17 11:37:22 remote cifs.upcall: sec=1
May 17 11:37:22 remote cifs.upcall: uid=0
May 17 11:37:22 remote cifs.upcall: creduid=0
May 17 11:37:22 remote cifs.upcall: user=root
May 17 11:37:22 remote cifs.upcall: pid=22939
May 17 11:37:22 remote cifs.upcall: find_krb5_cc: considering /tmp/krb5cc_1000
May 17 11:37:22 remote cifs.upcall: find_krb5_cc: /tmp/krb5cc_1000 is owned by 1000, not 0
May 17 11:37:22 remote cifs.upcall: krb5_get_init_creds_keytab: -1765328378
May 17 11:37:22 remote cifs.upcall: handle_krb5_mech: getting service ticket for cifs/nina.mbeya.domain.org
May 17 11:37:22 remote cifs.upcall: cifs_krb5_get_req: unable to resolve (null) to ccache
May 17 11:37:22 remote cifs.upcall: handle_krb5_mech: failed to obtain service ticket (-1765328245)
May 17 11:37:22 remote cifs.upcall: handle_krb5_mech: getting service ticket for host/nina.mbeya.domain.org
May 17 11:37:22 remote cifs.upcall: cifs_krb5_get_req: unable to resolve (null) to ccache
May 17 11:37:22 remote cifs.upcall: handle_krb5_mech: failed to obtain service ticket (-1765328245)

I appreciate any input on this.

Thanks

I'm trying to create a special mail account to collect all incoming spam with the purpose to later on be able to train the SA more easily for the whole domain.

We're using Zimbra, but as far as I can see the problem is not zimbra related, because it's "almost" working.

The setting I have are:

$quarantine_method_by_ccat{+CC_SPAMMY}     = 'smtp:127.0.0.1:10025'; 
$quarantine_method_by_ccat{CC_SPAMMY.",1"} = 'smtp:127.0.0.1:10025'; 
$quarantine_method_by_ccat{+CC_SPAM}       = 'smtp:127.0.0.1:10025'; 
$quarantine_to_maps_by_ccat{+CC_SPAMMY}     = ['spam@domain']; 
$quarantine_to_maps_by_ccat{CC_SPAMMY.",1"} = ['spam@domain']; 
$quarantine_to_maps_by_ccat{+CC_SPAM}       = ['spam@domain']; 

@spam_lovers_maps = @bypass_spam_checks_maps = ( [ qw('spam@domain',) ], ); 
$final_virus_destiny      = D_BOUNCE; 
$final_banned_destiny     = D_BOUNCE; 
$final_bad_header_destiny = D_PASS; 
$final_spam_destiny       = D_DISCARD; 
$final_destiny_by_ccat{+CC_SPAMMY} = $final_spam_destiny; 

So far so good, most of the time as spam-admin I receive messages like:

http://pastebin.com/fqaCsZR8

But some mails will be discarded and not even send to spamasassin (I think) and it doesn't matter if it's spam or not.

http://pastebin.com/2Uh34gBT

And this was even just an autoresponder from the user himself. Issued by the server.

Or http://pastebin.com/bePUrEtf for more or less spam mails. Just no report and this is neither an autoresponder nor a mail-daemon message.

Any Ideas?

Thanks!

I experience a very strange problem with our PBX (Asterisk 1.8, FreePBX, Grandstream GXP1200 phones)

If I call an internal number (1020 in this case) the asterisk server redirects me to the last called number of the phone.

I enabled and checked the debug log and it looks like the 302 message comes from the phone, but in the phone configuration I don't see the number or any redirecting feature anywhere.

The log looks like:

[2013-04-04 13:16:46] VERBOSE[3278] app_dial.c:     -- Called SIP/3543*
[2013-04-04 13:16:46] VERBOSE[3278] chan_sip.c: 
<--- Transmitting (no NAT) to 10.10.10.240:5062 --->
SIP/2.0 180 Ringing
Via: SIP/2.0/UDP 10.10.10.240:5062;branch=z9hG4bK197ebd0e30221ad9;received=10.10.10.240
From: "Michael *" <sip:1070@*.org;user=phone>;tag=1afa14dde19d2814
To: <sip:1020@*.org;user=phone>;tag=as24cb89e7
Call-ID: [email protected]
CSeq: 39761 INVITE
Server: FPBX-2.10.0rc1(1.8.15)
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Contact: <sip:[email protected]:5060>
Remote-Party-ID: "Philipp *" <sip:1020@*.org>;party=called;privacy=off;screen=no
Content-Length: 0

the answer from the phone:

<------------>
[2013-04-04 13:16:46] VERBOSE[3278] app_dial.c:     -- Connected line update to SIP/1070-0000001c prevented.
[2013-04-04 13:16:46] VERBOSE[2654] chan_sip.c: 
<--- SIP read from UDP:10.10.10.247:5062 --->
SIP/2.0 302 Moved Temporarily
Via: SIP/2.0/UDP 10.10.11.201:5060;branch=z9hG4bK3f571876
From: "IT Department" <sip:[email protected]>;tag=as21ffd3bb
To: <sip:3543*@10.10.10.247:5062;transport=udp;user=phone>;tag=16149ed6566c95c6
Call-ID: [email protected]:5060
CSeq: 102 INVITE
User-Agent: Grandstream GXP1200 1.2.5.3
Contact: <sip:001888*@*.org>
Diversion: <sip:35436*@10.10.10.247:5062;transport=udp;user=phone>;reason=unconditional
Content-Length: 0

The dialed number in this case is a teleconferencing server by AT&T in US.

I checked all configuration files if the number is somewhere but a grep over the directory and the number returns nothing.

Hope the message is not too specific to Grandstream phones.

Maybe there is a possibility to disable call forwarding complete from asterisk side?

Thanks in advance

I set up a ubuntu server which is authenticating against the active directory of our W2k8 Domain. Everything went well and I see all the users in getent passwd, and wbinfo.

I want to be able to use kerberos and winbind auth on the machine and so far everything works.

But when i login with a AD user onto the server, I just see the motd and instead of getting a promt, I get logged out again.

auth.log

Feb 28 15:34:48 server sshd[12635]: Postponed keyboard-interactive for micha from 10.10.10.121 port 36519 ssh2 [preauth]
Feb 28 15:34:50 server sshd[12637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ub64-it.city.domain.org  user=micha
Feb 28 15:34:50 server sshd[12637]: pam_krb5(sshd:auth): pam_sm_authenticate: entry (nonull)
Feb 28 15:34:50 server sshd[12637]: pam_krb5(sshd:auth): (user micha) attempting authentication as [email protected]
Feb 28 15:34:50 server sshd[12637]: pam_krb5(sshd:auth): user micha authenticated as [email protected]
Feb 28 15:34:50 server sshd[12637]: pam_krb5(sshd:auth): pam_sm_authenticate: exit (success)
Feb 28 15:34:50 server sshd[12637]: pam_winbind(sshd:account): user 'micha' granted access
Feb 28 15:34:50 server sshd[12635]: Postponed keyboard-interactive/pam for micha from 10.10.10.121 port 36519 ssh2 [preauth]
Feb 28 15:34:50 server sshd[12635]: Accepted keyboard-interactive/pam for micha from 10.10.10.121 port 36519 ssh2
Feb 28 15:34:50 server sshd[12635]: pam_krb5(sshd:session): pam_sm_open_session: entry
Feb 28 15:34:50 server sshd[12635]: pam_krb5(sshd:session): no context found, creating one
Feb 28 15:34:50 server sshd[12635]: pam_krb5(sshd:session): (user micha) found initial ticket cache at /tmp/krb5cc_pam_e12637
Feb 28 15:34:50 server sshd[12635]: pam_krb5(sshd:session): (user micha) initializing ticket cache FILE:/tmp/krb5cc_72208_e12635
Feb 28 15:34:50 server sshd[12635]: pam_krb5(sshd:session): pam_sm_open_session: exit (success)
Feb 28 15:34:50 server sshd[12635]: pam_unix(sshd:session): session opened for user micha by (uid=0)
Feb 28 15:34:50 server sshd[12771]: Received disconnect from 10.10.10.121: 11: disconnected by user
Feb 28 15:34:50 server sshd[12635]: pam_krb5(sshd:session): pam_sm_close_session: entry (silent)
Feb 28 15:34:50 server sshd[12635]: pam_krb5(sshd:session): pam_sm_close_session: exit (success)
Feb 28 15:34:50 server sshd[12635]: pam_unix(sshd:session): session closed for user micha

The SSH client just tells me its closed

    Last login: Thu Feb 28 15:25:26 2013 from ub64-it.city.domain.org
    Connection to server closed

And with -vv I see:

    debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
    debug1: client_input_channel_req: channel 0 rtype [email protected] reply 0
    debug2: channel 0: rcvd eow
    debug2: channel 0: close_read
    debug2: channel 0: input open -> closed
    debug2: channel 0: rcvd eof
    debug2: channel 0: output open -> drain
    debug2: channel 0: rcvd close
    Welcome to Ubuntu 12.04.2 LTS (GNU/Linux 3.2.0-37-virtual x86_64)

     * Documentation:  https://help.ubuntu.com/

      System information as of Thu Feb 28 15:40:36 EAT 2013

      System load:  0.0                Users logged in:     1
      Usage of /:   16.7% of 18.21GB   IP address for eth0: 10.10.11.9
      Memory usage: 48%                IP address for tap0: 10.10.14.1
      Swap usage:   0%                 IP address for tap1: 10.10.12.1
      Processes:    94                 IP address for tun0: 10.10.13.1

      Graph this data and manage this system at https://landscape.canonical.com/


    The programs included with the Ubuntu system are free software;
    the exact distribution terms for each program are described in the
    individual files in /usr/share/doc/*/copyright.

    Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by
    applicable law.

    Last login: Thu Feb 28 15:34:50 2013 from ub64-it.city.domain.org
    debug2: channel 0: obuf empty
    debug2: channel 0: close_write
    debug2: channel 0: output drain -> closed
    debug2: channel 0: almost dead
    debug2: channel 0: gc: notify user
    debug2: channel 0: gc: user detached
    debug2: channel 0: send close
    debug2: channel 0: is dead
    debug2: channel 0: garbage collecting
    debug1: channel 0: free: client-session, nchannels 1
    Connection to server closed.

Any Ideas?

Best regards Michael