[Samba] security = server & Win2k PDC

Andrew Bartlett abartlet at samba.org
Tue Aug 13 04:04:01 GMT 2002

Ryan Defelice wrote:
> Hi,
> I'm having a problem with the smbd process losing its connection to the password
> server.
> Smbd can successfully authenticate a user upon initial connection.  Then after
> some time (within a matter of 10-20 minutes) if the user tries to use the mapped
> drive, he sometimes gets prompted with an authentication dialog box.  Nothing
> that is typed into this box will be accepted, and the user cannot use the mapped
> drive.
> This seems to only occur on Citrix servers where multiple users are connecting
> from the same host.

Don't use 'security=server' when you have a real PDC.  That's what
security=domain is for.  Furthermore, due to bugs only (possilby)
corrected in Win2k SP3 you must use Samba 2.2.5 or above, as the PDC
will otherwise randomly refuse authenticaion.

Andrew Bartlett

Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net

More information about the samba mailing list