problem with password server

Andrew Bartlett abartlet at samba.org
Fri May 9 22:48:45 GMT 2003


On Sat, 2003-05-10 at 06:53, David Bear wrote:
> I'm running samba 2.2.8a on freebsd.  I'm using 
> security = server
> password server = "WIN2000"  
> 
> The system runs smoothly for a couple of days, then suddenly, certain
> users -- NOT ALL USERS -- get rejected when attempting to use a share. 
> 
> It looked like an authentication issue so I set debug level = 8 and
> watched the log files.
> 
> Here's what was generated.
> [2003/05/09 13:14:13, 3] smbd/sec_ctx.c:set_sec_ctx(329)
>   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2003/05/09 13:14:13, 5] smbd/uid.c:change_to_root_user(217)
>   change_to_root_user: now uid=(0,0) gid=(0,0)
> [2003/05/09 13:14:13, 3] smbd/reply.c:reply_sesssetup_and_X(880)
>   Domain=[PP086187]  NativeOS=[Windows 2000 2195]
> NativeLanMan=[Windows 2000 5.0]
> [2003/05/09 13:14:13, 3] smbd/reply.c:reply_sesssetup_and_X(890)
>   sesssetupX:name=[tasha1]
> [2003/05/09 13:14:13, 1] smbd/password.c:server_validate(1102)
>   password server  is not connected
> 
> After this it begins looking through local passwd file but of course
> the search fails.  I don't understand why the system just says:
> 
> password server is not connected
> 
> What reason could there be for this?  The password server is still
> alive and I know it functions because other samba servers are using it
> without complaint.  Is there some other place to look into why samba
> is not connecting back to the password server?

What has happened is that the password server *was* there, and now
isn't.  Due to the nature of the SMB protocol, particularly in Samba
2.2, the connection to the password server must be maintained for the
life of the connection to Samba.  This frequently fails, and then there
is nothing we can do.

Use security=domain, it really is a *much* better solution.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20030510/590cf76e/attachment.bin


More information about the samba-technical mailing list