Bug 449038

Description of problem:

Just upgrading to F9, saw password server issues so decided to grab the latest
samba.  Get panics when Mac OS X clients connect.

[2008/05/29 17:24:03,  0] lib/fault.c:fault_report(40)
  ===============================================================
[2008/05/29 17:24:03,  0] lib/fault.c:fault_report(41)
  INTERNAL ERROR: Signal 11 in pid 19151 (3.2.0rc1-14.fc9)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2008/05/29 17:24:03,  0] lib/fault.c:fault_report(43)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2008/05/29 17:24:03,  0] lib/fault.c:fault_report(44)
  ===============================================================
[2008/05/29 17:24:03,  0] lib/util.c:smb_panic(1666)
  PANIC (pid 19151): internal error
[2008/05/29 17:24:03,  0] lib/util.c:log_stack_trace(1770)
  BACKTRACE: 12 stack frames:
   #0 smbd(log_stack_trace+0x2d) [0xb7d770bd]
   #1 smbd(smb_panic+0x2d) [0xb7d771bd]
   #2 smbd [0xb7d5ff26]
   #3 [0x12e400]
   #4 smbd [0xb7dc3051]
   #5 smbd [0xb7dbe56c]
   #6 smbd(reply_sesssetup_and_X+0xe29) [0xb7b953e9]
   #7 smbd [0xb7bcbf77]
   #8 smbd(smbd_process+0x2b2) [0xb7bce562]
   #9 smbd(main+0x1022) [0xb7fb8d92]
   #10 /lib/libc.so.6(__libc_start_main+0xe6) [0x3c55d6]
   #11 smbd [0xb7b49821]
[2008/05/29 17:24:03,  0] lib/fault.c:dump_core(201)
  dumping core in /var/log/samba/cores/smbd

Version-Release number of selected component (if applicable):
3.2.0-1.rc1.14.fc9

How reproducible:
every time.

(gdb) bt
#0  0x0012e416 in __kernel_vsyscall ()
#1  0x003d9660 in raise () from /lib/libc.so.6
#2  0x003db028 in abort () from /lib/libc.so.6
#3  0xb7d5fa09 in dump_core () at lib/fault.c:212
#4  0xb7d771dd in smb_panic (why=0xb8017033 "internal error") at lib/util.c:1682
#5  0xb7d5ff26 in sig_fault (sig=11) at lib/fault.c:46
#6  <signal handler called>
#7  0xb7dc3051 in check_smbserver_security (auth_context=0xb9a25188,
    my_private_data=0xb99cdee0, mem_ctx=0xb99ceab0, user_info=0xb9a29c38,
    server_info=0xbfbd990c) at auth/auth_server.c:298
#8  0xb7dbe56c in check_ntlm_password (auth_context=0xb9a25188,
user_info=0xb9a29c38,
    server_info=0xbfbd990c) at auth/auth.c:256
#9  0xb7b953e9 in reply_sesssetup_and_X (req=0xb9a2b600) at smbd/sesssetup.c:1680
#10 0xb7bcbf77 in switch_message (type=115 's', req=0xb9a2b600, size=208)
    at smbd/process.c:1462
#11 0xb7bce562 in smbd_process () at smbd/process.c:1485
#12 0xb7fb8d92 in main (argc=Cannot access memory at address 0x8
) at smbd/server.c:1448

password server (earth) is CentOS 5 running samba-3.0.28a.