Win 2000 problem with Samba-TNG 2.5.3
Ben Blakely
brb at isilver-inc.com
Fri Jun 2 18:01:24 GMT 2000
Hi,
OS: Linux (Slackware-7.0) 2.2.15
Compiler: egcs-2.91.66 19990314/Linux (egcs-1.1.2 release)
CVS-Branch: SAMBA_TNG
Version: samba-tng-alpha.2.5.3 (got it as a tarball, not via CVS)
Error Type: Reproducable
Short Desc: On Win2k client workstation, there's a delay between the
time I log in to the domain and the time I can browse or mount shares
on the PDC.
Long Description:
I'm trying to get samba-tng-alpha.2.5.3 working on a server, but I'm
running into problems with Windows 2000 (ugh). Testing with win98
workstations have been flawless thus far, so this only applies to my
win2k system. I've got the server (which is named ISIS) set up as a PDC
with all the settings recommended by the docs on Lars Kneschke's FAQ. My
win2k workstation (IS-ZEN) authenticates me when I go to log into the
domain, but when it tries to grab my profile and mount my home directory
on the server as U:, it's spitting out access denied errors. So I "ok"
past the errors, and then when I go into explorer.exe to try and browse
over to the server, it's again giving errors and presenting me with a
login prompt to make the connection. However, if I walk away and think
good thoughts, then 5-10 minutes later I can somehow browse into the
server with no problems. If I log out after it's started working, and go
to log back in, everything works perfectly (picks up the profile and
mounts up the U: drive). Below is the output in log.smb of one of the
failures (turned debug level up to 100). If the very concept of me
trying to make this work with Windows 2000 is too whacky, I can accept
that as an answer, but it seems like a bug since everything appears to
work properly after the initial delay. I've included my smb.conf file as
an attachment. Oh, and my apologies if this is the wrong place to post
this sort of inquiry. Thanks,
Ben Blakely
Systems Admin
I-Silver, Inc.
cli_net_req_chal: LSA Request Challenge from \\. to ISIS:
E529140D2622BA74
make_q_req_chal: 542
make_q_req_chal: 552
000000 net_io_q_req_chal
0000 undoc_buffer: 00000001
000004 smb_io_unistr2 logon_srv
0004 uni_max_len: 00000004
0008 undoc : 00000000
000c uni_str_len: 00000004
0010 buffer : \.\.....
000018 smb_io_unistr2 logon_clnt
0018 uni_max_len: 00000005
001c undoc : 00000000
0020 uni_str_len: 00000005
0024 buffer : I.S.I.S...
00002e smb_io_chal clnt_chal
002e data: e5 29 14 0d 26 22 ba 74
rpc_con_pipe_req: op_num 4 offset 54 used: 54
rpc_api_pipe_req: start: 0 off: 54
create_rpc_request: opnum: 0x4 data_len: 0x30
create_rpc_request: data_len: 30 auth_len: 0 alloc_hint: 18
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 01
0004 pack_type : 10 00 00 00
prs_set_packtype: bigendian: No
0008 frag_len : 0030
000a auth_len : 0000
000c call_id : 0000002b
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 00000018
0014 context_id: 0064
0016 opnum : 0004
frag_len: 0x30 data_len: 0x18 data_calc_len: 0x18
create_noauth_pdu: 95
create_noauth_pdu: 102
rpc_api_pipe_req: end: 24
ncalrpc_l_send_prs: data: 0x809df78 len 48
[000] 05 00 00 01 10 00 00 00 30 00 00 00 2B 00 00 00 ........
0...+...
[010] 18 00 00 00 64 00 04 00 01 00 00 00 04 00 00 00 ....d...
........
[020] 00 00 00 00 04 00 00 00 5C 00 5C 00 2E 00 00 00 ........
\.\.....
write_socket(12,48)
write_socket(12,48) wrote 48
rpc_api_pipe_req: start: 24 off: 54
create_rpc_request: opnum: 0x4 data_len: 0x30
create_rpc_request: data_len: 30 auth_len: 0 alloc_hint: 18
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 00
0004 pack_type : 10 00 00 00
prs_set_packtype: bigendian: No
0008 frag_len : 0030
000a auth_len : 0000
000c call_id : 0000002c
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 00000018
0014 context_id: 0064
0016 opnum : 0004
frag_len: 0x30 data_len: 0x18 data_calc_len: 0x18
create_noauth_pdu: 95
create_noauth_pdu: 102
rpc_api_pipe_req: end: 48
ncalrpc_l_send_prs: data: 0x809df78 len 48
[000] 05 00 00 00 10 00 00 00 30 00 00 00 2C 00 00 00 ........
0...,...
[010] 18 00 00 00 64 00 04 00 05 00 00 00 00 00 00 00 ....d...
........
[020] 05 00 00 00 49 00 53 00 49 00 53 00 00 00 E5 29 ....I.S.
I.S....)
write_socket(12,48)
write_socket(12,48) wrote 48
rpc_api_pipe_req: start: 48 off: 54
create_rpc_request: opnum: 0x4 data_len: 0x30
create_rpc_request: data_len: 30 auth_len: 0 alloc_hint: 18
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 00
0004 pack_type : 10 00 00 00
prs_set_packtype: bigendian: No
0008 frag_len : 0030
000a auth_len : 0000
000c call_id : 0000002d
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 00000018
0014 context_id: 0064
0016 opnum : 0004
frag_len: 0x30 data_len: 0x18 data_calc_len: 0x18
create_noauth_pdu: 95
create_noauth_pdu: 102
rpc_api_pipe_req: end: 72
ncalrpc_l_send_prs: data: 0x809df78 len 48
[000] 05 00 00 00 10 00 00 00 30 00 00 00 2D 00 00 00 ........
0...-...
[010] 18 00 00 00 64 00 04 00 14 0D 26 22 BA 74 00 00 ....d...
..&".t..
[020] B0 78 29 40 C1 43 00 00 B0 78 29 40 B0 78 29 40 .x)@.C..
.x)@.x)@
write_socket(12,48)
write_socket(12,48) wrote 48
rpc_api_pipe_req: data_end: 72 and offset 54 wrong
rpc_con_pipe_req FAILED
cli_nt_setup_creds: request challenge failed
domain_client_validate: credentials failed (\\.)
SMB LM/NT Password did not match!
Rejecting user 'brb': authentication failed
32 bit error packet at line 493 cmd=115 (SMBsesssetupX) eclass=c000006d
[Error: Unknown error (109,49152)]
error string = No such file or directory
size=35
smb_com=0x73
smb_rcls=109
smb_reh=0
smb_err=49152
smb_flg=136
smb_flg2=16384
smb_tid=0
smb_pid=65279
smb_uid=0
smb_mid=1792
smt_wct=0
smb_bcc=0
-------------- next part --------------
[global]
debug level = 100
interfaces = eth0
#NetBIOS name isn't needed if it's the same as the hostname
netbios name = ISIS
workgroup = ISILVER
#flat files that map Unix groups to NT type groups.
#these files take the form unix_group = `Windows NT group''
domain group map = /usr/local/samba/private/domaingroup.map
domain alias map = /usr/local/samba/private/domainalias.map
#Domain controllers use user security and we need encrypted
#passwords (see ENCRYPTION.txt)
security = user
domain logons = yes
encrypt passwords = yes
#And in order for us to be *sure* to win browser elections
os level = 65
domain master = yes
preferred master = yes
local master = yes
#WINS is the equivalent of DNS for NetBIOS.
wins support = yes
time server = yes
#the next lines are equivalent to the various profile details
#found in NT's User Manager
logon script = login.bat
logon drive = U:
logon home = \\ISIS\%U
logon path = \\ISIS\profile\%U
#share all home directories
[homes]
browseable = no
writable = yes
comment = Users' home directories
#set up netlogon share for system policies and login scripts
[netlogon]
path = /usr/local/samba/netlogon
writable = no
guest ok = no
comment = PDC netlogon share
browseable = no
#the profiles share
#to create automatic subdirs for the different users
#chmod 1777 /opt/samba-tng/profile
[profile]
path = /usr/local/samba/profile
writeable = yes
comment = User profiles
create mode = 0600
directory mode = 0700
browsable = no
#a public share
[public]
path = /usr/local/samba/public
browseable = yes
public = yes
comment = Public share
More information about the samba-ntdom
mailing list