[Samba] security = server & Win2k PDC

[Andrew Bartlett]

Ryan Defelice wrote:
> 
> Hi,
> 
> I'm having a problem with the smbd process losing its connection to the password
> server.
> 
> Smbd can successfully authenticate a user upon initial connection.  Then after
> some time (within a matter of 10-20 minutes) if the user tries to use the mapped
> drive, he sometimes gets prompted with an authentication dialog box.  Nothing
> that is typed into this box will be accepted, and the user cannot use the mapped
> drive.
> 
> This seems to only occur on Citrix servers where multiple users are connecting
> from the same host.

Don't use 'security=server' when you have a real PDC.  That's what
security=domain is for.  Furthermore, due to bugs only (possilby)
corrected in Win2k SP3 you must use Samba 2.2.5 or above, as the PDC
will otherwise randomly refuse authenticaion.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net