[Samba] samba 3 keeps trying to authenticate with the nt4 pdc using port 445

[JAMIE CRAWFORD]

Hello,
I'm running redhat enterprise as 3.2 with the included samba
3.0.2-6.3E.  I'm trying to make this a domain member server in a nt4
domain.  I've successfully joined the domain only after using the net
join -p 139 option to force samba to use port 139, otherwise it kept
trying to communicate over port 445. (I was watching the syn packets
with tethereal).  Typing wbinfo -g comes back with "Error looking up
domain groups". smbd, nmbd, and winbind all all running with no errors.
I tried to use the "smb ports = 139" option in the smb.conf to try to
get the server to communicate only with 139, but it seems that it does
not work, maybe from xp client to samba server, but not from samba
server to nt4 pdc. Is there anyway to force samba to do communicate with
my pdc using 139?????

Thanks in advance,
jamie


CAPTURE OF DATA BETWEEN SAMBA SERVER AND PDC

2004-05-23 21:55:05.580707 IP OF SAMBA SERVER -> IP OF PDC TCP 32770 >
445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=14036 TSER=0 WS=0
2004-05-23 21:55:12.917997 IP OF SAMBA SERVER -> IP OF PDC NBNS Name
query NBSTAT CENTRAL<1c>
2004-05-23 21:55:12.919868 IP OF PDC -> IP OF SAMBA SERVER NBNS Name
query response NBSTAT
2004-05-23 21:55:12.920274 IP OF SAMBA SERVER -> IP OF PDC TCP 32771 >
445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=14769 TSER=0 WS=0
2004-05-23 21:55:15.910702 IP OF SAMBA SERVER -> IP OF PDC TCP 32771 >
445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=15069 TSER=0 WS=0
2004-05-23 21:55:21.910705 IP OF SAMBA SERVER -> IP OF PDC TCP 32771 >
445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=15669 TSER=0 WS=0
2004-05-23 21:55:33.910707 IP OF SAMBA SERVER -> IP OF PDC TCP 32771 >
445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=16869 TSER=0 WS=0
2004-05-23 21:55:53.580710 IP OF SAMBA SERVER -> IP OF PDC TCP 32770 >
445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=18836 TSER=0 WS=0
2004-05-23 21:55:57.910703 IP OF SAMBA SERVER -> IP OF PDC TCP 32771 >
445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=19269 TSER=0 WS=0

SMB.CONF FILE

[global]

winbind separator = +
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
smb ports = 139 
workgroup = mydomain
server string = Samba Server
printcap name = /etc/printcap
load printers = yes
log file = /var/log/samba/%m.log
max log size = 50
security = domain
password server = nameofpdc
encrypt passwords = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = no 

#============================ Share Definitions
==============================
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
# Set public = yes to allow user 'guest account' to print
   guest ok = no
   writable = no
   printable = yes


NSSWITCH.CONF FILE

#
# /etc/nsswitch.conf
#
# An example Name Service Switch config file. This file should be
# sorted with the most-used services at the beginning.
#
# The entry '[NOTFOUND=return]' means that the search for an
# entry should stop if the search in the previous entry turned
# up nothing. Note that if the search failed due to some other reason
# (like no NIS server responding) then the search continues with the
# next entry.
#
# Legal entries are:
#
#	nisplus or nis+		Use NIS+ (NIS version 3)
#	nis or yp		Use NIS (NIS version 2), also called YP
#	dns			Use DNS (Domain Name Service)
#	files			Use the local files
#	db			Use the local database (.db) files
#	compat			Use NIS on compat mode
#	hesiod			Use Hesiod for user lookups
#	[NOTFOUND=return]	Stop searching if not found so far
#

# To use db, put the "db" in front of "files" for entries you want to
be
# looked up first in the databases
#
# Example:
#passwd:    db files nisplus nis
#shadow:    db files nisplus nis
#group:     db files nisplus nis

passwd:     files winbind
shadow:     files
group:      files winbind

#hosts:     db files nisplus nis dns
hosts:      files dns

# Example - obey only what nisplus tells us...
#services:   nisplus [NOTFOUND=return] files
#networks:   nisplus [NOTFOUND=return] files
#protocols:  nisplus [NOTFOUND=return] files
#rpc:        nisplus [NOTFOUND=return] files
#ethers:     nisplus [NOTFOUND=return] files
#netmasks:   nisplus [NOTFOUND=return] files     

bootparams: nisplus [NOTFOUND=return] files

ethers:     files
netmasks:   files
networks:   files
protocols:  files
rpc:        files
services:   files

netgroup:   files

publickey:  nisplus

automount:  files
aliases:    files nisplus