[Samba] Ongoing Samba Errors

[Ilia Chipitsine]

> Greetings
>
> We just updated two RH9 servers to 3.0.14a-1 and are still seeing a lot
> of errors in the logs.
>
> They're not stopping us working but I would _really_ like to understand
> what is causing them.

those entries are not known to LogWatch. nothing is wrong with samba.
it just says something to logs, which is not known for LogWatch.

truth to be told, samba logs are rarely useful, I'd more like the way,
apache httpd and sendmail logs work. Just few looks and everything is 
clear.

>
> On the first server, in the logwatch,  we get a whole swag of:
>
> samba:
>   Unknown Entries:
>      session opened for user janicer by (uid=0): 6 Time(s)
>      session opened for user sonjap by (uid=0): 8 Time(s)
>      session opened for user heatherf by (uid=0): 1 Time(s)
>      session closed for user georgev: 122 Time(s)
>      session closed for user heatherf: 1 Time(s)
>      session opened for user karens by (uid=0): 3 Time(s)
>      session closed for user margaretn: 1 Time(s)
>      session opened for user johnw by (uid=0): 1 Time(s)
>      session opened for user connieg by (uid=0): 3 Time(s)
>      session closed for user janicer: 6 Time(s)
>      session closed for user lindaa: 1 Time(s)
>      session opened for user yanal by (uid=0): 2 Time(s)
>      session opened for user wendym by (uid=0): 3 Time(s)
>
> I don't understand why these should be "Unknown Entries" and would
> really like to .
>
> Then I see a whole load of:
>
> mbd/dir.c:dptr_close(271)  Invalid key 256 given to dptr_close : 33
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 257 given to dptr_close : 32
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 258 given to dptr_close : 26
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 259 given to dptr_close : 26
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 260 given to dptr_close : 26
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 261 given to dptr_close : 25
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 262 given to dptr_close : 26
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 263 given to dptr_close : 26
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 264 given to dptr_close : 26
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 265 given to dptr_close : 26
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 266 given to dptr_close : 26
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 267 given to dptr_close : 26
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 268 given to dptr_close : 26
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 269 given to dptr_close : 26
> Time(s)
> smbd/dir.c:dptr_close(271)  Invalid key 270 given to dptr_close : 26
> Time(s)
>
> And I _mean_ a whole load of them - this is just a quick extract
>
> And then finally I see a swag of:
>
> smbd/service.c:make_connection(794)  pc001 (192.168.0.201) couldn't find
> service  : 2676 Time(s)
> smbd/service.c:make_connection(794)  pc002 (192.168.0.202) couldn't find
> service  : 11011 Time(s)
> smbd/service.c:make_connection(794)  pc003 (192.168.0.203) couldn't find
> service  : 1948 Time(s)
> smbd/service.c:make_connection(794)  pc004 (192.168.0.204) couldn't find
> service  : 1918 Time(s)
> smbd/service.c:make_connection(794)  pc005 (192.168.0.205) couldn't find
> service  : 2 Time(s)
> smbd/service.c:make_connection(794)  pc007 (192.168.0.207) couldn't find
> service  : 1 Time(s)
> smbd/service.c:make_connection(794)  pc008 (192.168.0.208) couldn't find
> service  : 2598 Time(s)
> smbd/service.c:make_connection(794)  pc012 (192.168.0.212) couldn't find
> service  : 9503 Time(s)
> smbd/service.c:make_connection(794)  pc013 (192.168.0.213) couldn't find
> service  : 1154 Time(s)
> smbd/service.c:make_connection(794)  pc014 (192.168.0.214) couldn't find
> service  : 1190 Time(s)
> smbd/service.c:make_connection(794)  pc015 (192.168.0.215) couldn't find
> service  : 1782 Time(s)
>
> Okay - I admit to total confusion.
>
> We run Samba in our own office (this is on a customers site btw) and I
> have never had problems like this before.
>
> Should I also post my smb.conf?
>
> Whilst I don't expect a miracle, can someone please (gently) point me in
> the right direction and suggest where I might start to look for the
> answers?
>
> TIA
>
> Nigel.
>
>
> -- 
> Nigel Allen, Snr Consultant, ProSmart Consulting Australia
> 48 Tiarri Avenue, Terrey Hills, NSW 2084, Australia
> Tel: +61 2 9450 2690  Fax: +61 2 9450 2691 Mob: +61 4 1494 5269
> http://www.prosmart.com.au
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>