[Samba] internal error occurs while domain users try to access file servers

Shunichi Ikuta sikuta2 at yahoo.co.jp
Thu Apr 22 12:07:58 GMT 2004

Hello experts,

I have installed Samba3.0.1 for "Account Domain Controller(PDC)" and 
openLDAP2.2.6 for backend database which stores user accounts. 
There is Windows2000 Server for "Resource Domain controller" that 
has a trust relationship with Samba "Account Domain Controller".
WINS service is running on "Resource Domain Controller" Windows2000 
Server machine as well. A file server (Windows2000 Server) is prepared 
and its machine account is registered to "Resource Domain Controller".

The problem I have is 

 "domain users are not able to access the file server machine(Windows 
  2000 Server)". 

This file server is NOT Samba, it is Windows 2000 Server.

Below is the description of the Samba + LDAP environment.

== Operation System(OS) and installed software description ===

Machine No 1. 
 OS: Redhat Linux 9
 Software: Samba3.0.1
 Use: Samba PDC Account Domain Controller

Machine No 2. 
 OS: Solaris 8
 Software: OpenLDAP2.2.6
 Use: user and machine account directory server

Machine No 3.
 OS: Windows 2000 Server
 Use: Resource Domain Controller

Machine No 4. 
 OS: Windows 2000 Server
 Use: Resource Domain Controller & WINS Server

Machine No 5.
 OS: Windows 2000 Server
 Use: File Server

Machine No 6.
 OS: Windows 2000 Pro
 Use: Client machine for domain users

== Windows Domain Model description =====

 1. The model is "Single Master Domain Model"
 2. "Resource Domain" trusts "Account Domain" 
    (Established a trust relationship)
 3. Machine accounts for file server(Machine No 5) 
    and client(Machine No 6) are registered to "Resource 
 4. A "Domain User" is registered to "Account Domain Controller"

== Other information ====================

 1. The value of "Primary WINS server" for all the machines is 
    set to Machine No 4.  The value of the attribute, "wins server" 
    in smb.conf for Samba is also set to Machine No 4. 

== Problem description =================

The problem, which I have with above environment, is that an error 
occurs when domain users try to access file server machine.
Because of that error, domain users are not able to access to 
file server.

Following is the procedure for reproducing the problem.

 Step 1. Log on a "Domain User" to "Account Domain(Samba PDC)" 
         using the client machine(Machine No 6)
 Step 2. Open "Explorer". Go to "My Network Places" -> 
         "Entire Network" -> "Microsoft Windows Network" ->
         "Resource Domain".
 Step 3. You will see the file server machine icon(Machine 
         No 5). Double click the icon to browse its shared 
         directories and files.
 Stop 4. Problem occurs! Unable to access the file server
         (Machine No 5) and an error dialog pops up. The
         message of the error dialog was 
         "Unable to access machine No 5.
          Windows 2000 Internal Error has Occurred"

The problem occurs irregularly which makes me difficult to 
determine the cause of the problem. 

== Samba Configuration - smb.conf 
   (Some parameters cannot be displayed) ======

# Samba config file created using SWAT
# from 172.XXX.XXX.XXX.
# Date: YYYY/MM/DD hh:mm:ss

# Global parameters
	security = user
	encrypt passwords = Yes
	dos charset = UTF8
	display charset = UTF8
	workgroup = (TEST DOMAIN NAME)
	passdb backend = ldapsam:"ldap://(LDAP SERVER)" smbpasswd
	ldap passwd sync = Yes
	ldap ssl = start tls
	log level = 100
	log file = /var/samba/log/smb.log.%m
	logon path =
	logon home =
	os level = 32
	domain logons = Yes
	domain master = Yes
	preferred master = Yes
	local master = Yes
	wins support = no
	wins server = 172.XXX.XXX.XXX # IPAddress for WINS Server
	ldap suffix = dc=XXX,dc=XXX
	ldap machine suffix = ou=People
	ldap user suffix = ou=People
	ldap group suffix = ou=Group
	ldap admin dn = cn=Manager,dc=XXX,dc=XXX
	browseable = no
	writeable  = no
	guest account = guest
	deadtime = 15
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
	lm announce = Yes

	path = /var/samba/share
	browseable = yes
	writeable  = yes
	guest ok   = no

	path = /var/samba/netlogon
	browseable  = yes
	writable    = yes
	guest ok    = no
	share modes = yes

	path = /var/samba/homes
	browseable = yes
	writeable  = yes
	guest ok   = no

	path = /var/samba/profiles
	browseable = no
	writeable  = no
	guest ok   = no

== Log ==============

smb log for Resource Domain Controller
[YYYY/MM/DD 09:10:14, 5] rpc_parse/parse_prs.c:prs_ntstatus(665)
      0194 status      : NT_STATUS_OK
[YYYY/MM/DD 09:10:14, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549)
  api_rpcTNP: called NETLOGON successfully
[YYYY/MM/DD 09:10:14, 10] rpc_server/srv_pipe.c:api_rpcTNP(1560)
  api_rpcTNP: rpc input buffer underflow (parse error?)
[YYYY/MM/DD 09:10:14, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
  0172 : 00 00 8a e3 13 71 02 f4 36 71 02 40 28 00 44 06 0e 00 60 cb 60 0d
[YYYY/MM/DD 09:10:14, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
  free_pipe_context: destroying talloc pool of size 4906
[YYYY/MM/DD 09:10:14, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
  write_to_pipe: data_used = 432
[YYYY/MM/DD 09:10:14, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
  writeX-IPC pnum=7778 nwritten=448

smb log for Resource Domain Controller
[YYYY/MM/DD 09:10:13, 5] passdb/secrets.c:secrets_fetch_trusted_domain_password
  secrets_fetch failed!
[YYYY/MM/DD 09:10:13, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (999, 514) - sec_ctx_stack_ndx = 0
[YYYY/MM/DD 09:10:13, 10] lib/gencache.c:gencache_get(286)
  Cache entry with key = TDOM/Account_Domain couldn't be found
[YYYY/MM/DD 09:10:13, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(172)
  no entry for trusted domain Account_Domain found.
[YYYY/MM/DD 09:10:13, 5] auth/auth_util.c:make_user_info(132)
  attempting to make a user_info for Domain_User (Domain_User)
[YYYY/MM/DD 09:10:13, 5] auth/auth_util.c:make_user_info(142)
  making strings for Domain_User's user_info struct
[YYYY/MM/DD 09:10:13, 5] auth/auth_util.c:make_user_info(184)
  making blobs for Domain_User's user_info struct

=== Questions ===========

 Q1) It there any possibility that the error log above could be the 
     cause of the problem which I have described ? I would like to 
     know whether the error log relates to my problem or not.
 Q2) Is there any reported bugs that might be causing the problem 
     which I have described ? 
     (Is there any possible bug causing a problem accessing file 
      server from windows client machine ?)
 Q3) Although I tried to explain the problem in detail but the description 
     above could be vague and is not so specific. 
     Is there anything I can do to provide more valuable 
     information to make this problem more specific and accurate ? 
     (Is there anything I can do to break down this problem ?)
 Q4) What do these error log messages below mean and how do they possibly 
     occur ?
     Error message 1 - api_rpcTNP: rpc input buffer underflow (parse 
     Error message 2 - secrets_fetch failed!
     Error message 3 - no entry for trusted domain Account_Domain found.

Any advice or comment will be appreciated.

More information about the samba mailing list