[Samba] Problem regarding connection

Wed Jun 23 20:20:08 GMT 2004

Hi all, I hope not to bother with a "constant" topic.

I have 2 samba servers, both connected in the same LAN, with a windows 2003
(I know I know) as a domain controller.

Both samba servers are using winbind and are in the domain, one samba box
act as a file server and it works great. The other samba box have 2 printers
connected and they work great too. But I have a problem that I need to fix
and I've been searching for hours some clue and I don't get it.

Both samba boxes are linux fedora 2 with the default samba installation 

[root at bnaprint1 samba]# rpm -qa | grep samba

samba-common-3.0.3-5

samba-client-3.0.3-5

system-config-samba-1.2.9-2

samba-3.0.3-5

[root at bnaprint1 samba]#

The issue is the following.

File server is bnafs1, print server es bnaprint1

When a computer (not the servers, just a single user windows computer) is
"out" of the KDC domain, If I call the print server as \\bnaprint1 , after
the logon (with the kdc user) I can see the printers, conect'em and print
without a problem. But when I add the user box to the domain, \\bnaprint1
<file:///\\bnaprint1>  stops to work, it asks for a logon over and over
again but the KDC users don't work.

This behavior is different in the file server, it can be called as \\bnafs1
<file:///\\bnafs1>  anytime (inside or outside the domain) and it works
fine.

Here's the test parm's for both boxes

--cut

# Global parameters

[global]

        workgroup = BAICOM

        realm = BAICOM.COM

        server string = Baicom.FS

        interfaces = eth0, lo

        bind interfaces only = Yes

        security = ADS

        password server = 172.22.0.101

        log file = /var/log/samba/%m.log

        max log size = 50

        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

        dns proxy = No

        wins server = 172.22.0.101

        idmap uid = 10000-99999999

        idmap gid = 10000-99999999

        template shell = /bin/bash

        winbind use default domain = Yes

        hosts allow = 172.21.0.0/24, 127.0.0.1, 172.20.0.0/24

        hosts deny = 0.0.0.0/0

[Baicom]

        comment = Institucional Baicom

        path = /fileserver/Baicom

        admin users = amf, pam, jia, hem, @directores

        read only = No

[Applications]

        comment = Aplicaciones Baicom

        path = /fileserver/Applications

        read only = No

[Users]

        comment = Directorios de Usuario

        path = /fileserver/Users

        read only = No

[mp3]

        comment = Directorio de mp3

        path = /mp3

        read only = No

        guest ok = Yes

[backups]

        comment = Directorio para backups

        path = /backups

        read only = No

---cut

and this is for the print server

--cut

[root at bnaprint1 samba]# testparm

Load smb config files from /etc/samba/smb.conf

Processing section "[printers]"

Processing section "[tmp]"

Loaded services file OK.

Server role: ROLE_DOMAIN_MEMBER

Press enter to see a dump of your service definitions

# Global parameters

[global]

        workgroup = BAICOM

        realm = BAICOM.COM

        server string = Baicom.ps

        interfaces = eth0, lo

        bind interfaces only = Yes

        security = ADS

        password server = 172.22.0.101

        log level = 3

        log file = /var/log/samba/%m.log

        max log size = 50

        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

        dns proxy = No

        wins server = 172.22.0.101

        idmap uid = 10000-99999999

        idmap gid = 10000-99999999

        template shell = /bin/bash

        winbind use default domain = Yes

        hosts allow = 172.21.0.0/24, 127.0.0.1, 172.20.0.0/24

        hosts deny = 0.0.0.0/0

[printers]

        comment = All Printers

        path = /var/spool/samba

        printable = Yes

        use client driver = Yes

        browseable = No

[tmp]

        comment = Temporary file space

        path = /tmp

        read only = No

        guest ok = Yes

--cut

I've started a debug in level 3 and this is what I see when I try to connect

Jun 23 17:03:28 bnaprint1 smbd[31255]: [2004/06/23 17:03:28, 0]
lib/util_sock.c:get_peer_addr(975)

Jun 23 17:03:28 bnaprint1 smbd[31255]:   getpeername failed. Error was
Transport endpoint is not connected

Jun 23 17:03:28 bnaprint1 smbd[31255]: [2004/06/23 17:03:28, 0]
lib/util_sock.c:get_peer_addr(975)

Jun 23 17:03:28 bnaprint1 smbd[31255]:   getpeername failed. Error was
Transport endpoint is not connected

Jun 23 17:03:28 bnaprint1 smbd[31255]: [2004/06/23 17:03:28, 0]
lib/access.c:check_access(328)

Jun 23 17:03:28 bnaprint1 smbd[31255]: [2004/06/23 17:03:28, 0]
lib/util_sock.c:get_peer_addr(975)

Jun 23 17:03:28 bnaprint1 smbd[31255]:   getpeername failed. Error was
Transport endpoint is not connected

Jun 23 17:03:28 bnaprint1 smbd[31255]:   Denied connection from  (0.0.0.0)

Jun 23 17:03:28 bnaprint1 smbd[31255]: [2004/06/23 17:03:28, 0]
lib/util_sock.c:get_peer_addr(975)

Jun 23 17:03:28 bnaprint1 smbd[31255]:   getpeername failed. Error was
Transport endpoint is not connected

Jun 23 17:03:28 bnaprint1 smbd[31255]:   Connection denied from 0.0.0.0

Jun 23 17:03:28 bnaprint1 smbd[31255]: [2004/06/23 17:03:28, 0]
lib/util_sock.c:write_socket_data(411)

Jun 23 17:03:28 bnaprint1 smbd[31255]:   write_socket_data: write failure.
Error = Connection reset by peer

Jun 23 17:03:28 bnaprint1 smbd[31255]: [2004/06/23 17:03:28, 0]
lib/util_sock.c:write_socket(436)

Jun 23 17:03:28 bnaprint1 smbd[31255]:   write_socket: Error writing 5 bytes
to socket 24: ERRNO = Connection reset by peer

Jun 23 17:03:28 bnaprint1 smbd[31255]: [2004/06/23 17:03:28, 0]
lib/util_sock.c:send_smb(628)

Jun 23 17:03:28 bnaprint1 smbd[31255]:   Error writing 5 bytes to client.
-1. (Connection reset by peer)

Any idea? Any help-

Thanks in advance