[Samba] Help wanted: Windows logs for our NETLOGON KB5028166 issue
Andrew Bartlett
abartlet at samba.org
Tue Jul 18 19:44:30 UTC 2023
Just in case someone was trying to work on this still, I was able to
get the logs to them myself.
Andrew,
On Mon, 2023-07-17 at 22:42 +1200, Andrew Bartlett via samba wrote:
> Kia Ora Samba users,
> Thanks so much for bringing the KB5028166 issues to our attention.
> Microsoft is also aware, and has reached out to us to understand
> theissue.
> They would like some windows logs, and it would save us all some
> timeif you - one of our Samba AD or NT4 DC users - could get those
> for us.
> If you have a lab domain where you can share detailed logs
> withoutcompromising privacy that would be very helpful.
> This would be with a patched Windows member server, and an
> unpatchedSamba DC.
> They ask:
> Meanwhile, if we can get netlogon logs on both client and server side
> in this case during an error scenario that would be helpful.
> https://learn.microsoft.com/en-us/troubleshoot/windows-client/windows-security/enable-debug-logging-netlogon-service
>
> Steps to enable netlogon logs on windows : 1. Configure debug
> flagsNltest /DBFlag:2080FFFF 2. Re-start netlogonnet stop
> netlogonnet start netlogonLogs path: at
> c:\windows\debug\netlogon.txt
> For the 'server logs', that would be Samba's logs with
> log level = 10debug hires timestamp = yes
> Bonus points if you can include a network capture (PCAPng format)
> fromthe server, as the timestamps in both will line up exactly.
> I'm just jumping into this having been on leave, so I'll need you
> towork out exactly the trigger point/steps, but the network call to
> seein your network trace is NETLOGON RPC LogonGetCapabilities
> If you see that, you have probably got enough logs. I guess from
> areboot would also do.
> Thanks so much for your help,
> Andrew Bartlett--Andrew Bartlett (he/him)
> https://samba.org/~abartlet/
> Samba Team Member (since 2001) https://samba.org
> Samba Team Lead https://catalyst.net.nz/services/samba
> Catalyst.Net Ltd
> Proudly developing Samba for Catalyst.Net Ltd - a Catalyst IT
> groupcompany
> Samba Development and Support: https://catalyst.net.nz/services/samba
>
> Catalyst IT - Expert Open Source Solutions
>
--
Andrew Bartlett (he/him) https://samba.org/~abartlet/Samba Team Member (since 2001) https://samba.orgSamba Team Lead https://catalyst.net.nz/services/sambaCatalyst.Net Ltd
Proudly developing Samba for Catalyst.Net Ltd - a Catalyst IT group
company
Samba Development and Support: https://catalyst.net.nz/services/samba
Catalyst IT - Expert Open Source Solutions
More information about the samba
mailing list