[samba] FAILED with error NT_STATUS_UNSUCCESSFUL

[Andrew Bartlett]

On Thu, 2005-11-24 at 11:49 +0100, Daniel Wilson wrote:
> Hi List,
> 
> The last couple of days we have been having intermittent problems with 
> our samba domain.
> 
> We have 3.0.14a (from source) on a Suse Linux box.
> 
> Samba has been working great since we used it but now we seem to get the 
> issue of some people not being able to connect to a share ,this is the 
> error:
> 
> [2005/11/24 11:30:00, 0] auth/auth_sam.c:check_sam_security(324)
>    check_sam_security: make_server_info_sam() failed with 
> 'NT_STATUS_UNSUCCESSFUL'
> [2005/11/24 11:30:00, 2] auth/auth.c:check_ntlm_password(312)
>    check_ntlm_password:  Authentication for user [wq0mjo] -> [wq0mjo] 
> FAILED with error NT_STATUS_UNSUCCESSFUL
> [2005/11/24 11:30:00, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2580)
>    Returning domain sid for domain UNI-STAFF -> 
> S-1-5-21-82148923-2461359520-1342846908
> [2005/11/24 11:30:00, 2] lib/smbldap.c:smbldap_open_connection(692)
>    smbldap_open_connection: connection opened
> 
> 
> The weird thing is, 2 minutes later it works, then doesnt?!!
> 
> Could this be a local network probelm we are having, we have a large 
> flat class B network!

My guess is that you have problems with nss_ldap, which is sometimes
(and sometimes not) resolving the userids.  Take a sniff and look
closely at the ldap traffic.

You can reduce the load on the LDAP server by setting
'ldapsam:trusted=yes', but read up the comments and documentation of
this smb.conf parameter, as every user you want to have Samba use
(including the guest account) must be in LDAP for both nss (posix) and
Samba parts.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20051126/f32df1b2/attachment.bin