[Samba] Cross-subnet browsing, interfaces

[Christopher Swingley]

Greetings,

I recently upgraded my Samba server and am now running Debian sid's 
samba-2.999+3.0.alpha20-4.  I have the following domain / workgroup / 
browsing options set in /etc/samba/smb.conf:

   interfaces = eth0 192.168.54.0/24 192.168.52.0/24

   os level = 65
   local master = yes
   domain master = yes 
   domain logons = no 
   preferred master = yes
   enhanced browsing = yes
   wins support = yes
   dns proxy = yes 
   name resolve order = wins lmhosts

As far as I know my Samba server is the only master browser serving this 
particular workgroup, and each of my Windows clients have this server 
assigned as the only WINS server.  All clients are assigned to the 
workgroup that this server is the master for, and all clients use local 
authentication which is sync-ed to the passwords (passwd / smbpasswd) on 
the Samba server.

I can communicate between subnets 52 and 54, but the browse lists on 
clients don't show the computers from the other subnet (i.e. a subnet 52 
client only sees subnet 52 computers, despite being able to access the 
Samba server running on subnet 54).

I'm also seeing things in the system logs that I don't recall seeing 
before:

    Dec 27 07:05:05 foobar nmbd[3845]:     192.168.54.20   192.168.54.20
        0.0.0.0  192.168.52.102  192.168.52.102  192.168.52.102  
        192.168.54.196  192.168.54.196   192.168.54.66   192.168.54.66
        192.168.54.66  192.168.52.112  192.168.52.112   192.168.54.58
    Dec 27 07:05:05 foobar nmbd[3845]:  +> 

and:

    Dec 27 08:20:50 foobar smbd[4833]: [2002/12/27 08:19:38, 0] 
        lib/access.c:check_access(333)
    Dec 27 08:20:50 foobar smbd[4833]: [2002/12/27 08:19:38, 0] 
        lib/util_sock.c:get_socket_addr(958)  
    Dec 27 08:20:50 foobar smbd[4833]:   getpeername failed. Error was 
        Transport endpoint is not connected  
    Dec 27 08:20:50 foobar smbd[4833]:   Denied connection from 
        0.0.0.0 (0.0.0.0)  

Anyway, so far I haven't had any reports of problems, but the log 
entries and the lack of cross-subnet browse lists make me nervous.  Am I 
doing something wrong here?  What is the significance of 0.0.0.0 
(0.0.0.0)?

Thanks very much,

Chris
-- 
Christopher S. Swingley           email: cswingle at iarc.uaf.edu
IARC -- Frontier Program          Please use encryption.  GPG key at:
University of Alaska Fairbanks    www.frontier.iarc.uaf.edu/~cswingle