RPC and Profile errors

[Jamie ffolliott]

Hi there.  We've recently upgraded from 1.9.19 to 2.0 beta5 on RedHat
Linux 5.2 as a PDC.

For the most part profiles "seem" to work, but more frequently now I'm
hearing from a few users that their roaming profile gets reset and Outlook
Express email is lost.  By "reset", I mean they lose their roaming
profile and they get the default profile again.  So I checked into the
Event logs on a few of our workstations and found a whole bunch of errors
and warnings.  Details below.  Also attached is our smb.conf.  

If any of these problems have been fixed in the Head branch, or
you need some debug logs, please let me know.  We haven't been able to
login to a 2.1prealpha PDC until the "local policy" problem is fixed.

Jamie ffolliott
Queen's Engineering Society


The three workstations I'm looking at are named Nelson, Cosmo, and
Dilbert.  All are NT4 Workstations, SP3.

Here are the errors,

Nelson and Cosmo:  Redirector warnings

Lots of these messages in the System log.  They don't appear all the time,
but show up on some days, sometimes separated by a few minutes and other 
times in multiple numbers in the same minute.  I don't know what
application is causing them yet, but we are finding that people's profiles
are often reset and this sounds a bit suspicious.

Source: Rdr
Type: Warning
Description:
A write-behind operation has failed to the remote server Q-ENG.  The data
contains the amount requested to write and the amount actually written.

Nelson was just re-installed the other day.

--------

Dilbert and Cosmo:  RPC Server Crash

Browsing through the event log ok.
Double-clicked an event in the event log.

Error pops up: The enumeration value is out of range.

Next time I double click an event, I get:
  lsass.exe - Application error
  The instruction at "0x77f7f3b9" referenced memory at "0x00000005". The
memory could not be "read".
  Click on OK to terminate the application.

Then I get error message:  The remote procedure call failed.

Then the RPC Server (of the NTWS) soon fails, and a reboot is needed.
This also causes the error message below, where the Roaming profile isn't
saved, but I'm sure the RPC server can fail in other ways besides the
using the Event Viewer because ordinary users that don't know the Event 
Viewer exists are getting this next error too.

--------

Dilbert and Cosmo:  RPC Server Unavailable

The RPC server fails (on the NTWS), and get messages like "RPC Server
Unavailable".

On logout, the error is logged:
Source: UserEnv, in Application Log
Type: Error
Description: The update of your roaming profile failed.  Please contact
your Network Administrator. (6)

Any new changes to the profile are then lost if the user logs in at
another workstation.

----------

Dilbert and Cosmo: Profile RESET

Source: Userenv, in Application Log
Type: Error
Description:
RegLoadKey failed with error 1009 for C:\WINNT\Profiles\vpsd\ntuser.dat 

Few seconds later...
Source: Userenv, in App Log
Type: Error
Description:
The operating system was unable to load the locally stored profile.  A new
local profile will be created. (1009) 

Profiles in c:\winnt\profiles\vpsd renamed to vpsd.bak, and the profile is
reset.  This happened to the user vpsd twice, on Dilbert. (eg. happened
once and then two days later).

----------

Dilbert and Cosmo:  First login, problem creating roaming profile

Source: Userenv
Description:
The operating system was unable to create profile directory
\\q-eng\profiles\USER.pds.  You will be logged on with a local
profile only.  Please contact your Network Administrator. (39) 

This doesn't happen for everyone - just a few users.

--------

Dilbert: Eudora Light causes LOTS of warnings

When it's run from a network share on the Samba PDC, a ton of these
messages show up in the System Log.  (about 85 of them, consecutively)
q-eng is the samba pdc.

Source: Rdr
Type: Warning
The redirector failed to unlock part of a file on server q-eng. 

-------------- next part --------------
# Samba config file created using SWAT
# from localhost (127.0.0.1)
# Date: 1999/01/12 00:11:35

# Global parameters
	workgroup = ENGSOC
	netbios name = Q-ENG
	server string = EngSoc Server
	interfaces = <snip>
	encrypt passwords = Yes
	passwd program = /usr/bin/passwd %u
	passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*
	password level = 8
	username level = 8
	unix password sync = Yes
	log file = /var/log/samba/log.%m
	max log size = 500
	socket options = TCP_NODELAY
	domain admin group = root
	logon script = logon.bat
	logon path = \\%L\profiles\%U
	logon drive = h:
	logon home = \\%L\home\%U
	domain logons = Yes
	os level = 63
	preferred master = Yes
	domain master = Yes
	dns proxy = No
	wins support = Yes
	message command = /bin/mail -s 'Message from %f on %m' root < %s; rm %s
	unix realname = Yes
	hosts allow = 127.0.0.1 <snip> 
	print command = echo Printing %s on %p >> /tmp/print.log; lpr -P%p %s; rm %s

[home]
	comment = Home Directories
	path = /home
	read only = No
	create mask = 0774
	guest ok = No
	hide dot files = Yes
	mangled names = Yes

[netlogon]
	comment = Network Logon Service
	path = /home/netlogon	
	writable = yes
	share modes = no
	locking = no
	public = no

[profiles]
	path = /home/profiles
	read only = No
	directory mask = 0700
	guest ok = Yes
	browseable = No

[printers]
	comment = All Printers
	path = /var/spool/samba
	print ok = Yes
	browseable = No

[personal]
	comment = Personal Home Folder
	path = /home/%U
	force group = users
	read only = No

[tmp]
	comment = Temporary file space
	path = /var/tmp
	read only = No
	guest ok = Yes

[apps]
	comment = Applications
	path = /usr/apps
	read only = No

[web]
	comment = Web Pages
	path = /home/httpd
	force group = www
	read only = No

[finance]
	comment = Finance Shared Directory
	path = /usr/ghome/finance
	valid users = @finance
	force group = finance
	read only = No
	directory mask = 0770