Andrew Bartlett abartlet at samba.org
Sat Nov 26 07:04:30 GMT 2005

On Thu, 2005-11-24 at 11:49 +0100, Daniel Wilson wrote:
> Hi List,
> The last couple of days we have been having intermittent problems with 
> our samba domain.
> We have 3.0.14a (from source) on a Suse Linux box.
> Samba has been working great since we used it but now we seem to get the 
> issue of some people not being able to connect to a share ,this is the 
> error:
> [2005/11/24 11:30:00, 0] auth/auth_sam.c:check_sam_security(324)
>    check_sam_security: make_server_info_sam() failed with 
> [2005/11/24 11:30:00, 2] auth/auth.c:check_ntlm_password(312)
>    check_ntlm_password:  Authentication for user [wq0mjo] -> [wq0mjo] 
> [2005/11/24 11:30:00, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2580)
>    Returning domain sid for domain UNI-STAFF -> 
> S-1-5-21-82148923-2461359520-1342846908
> [2005/11/24 11:30:00, 2] lib/smbldap.c:smbldap_open_connection(692)
>    smbldap_open_connection: connection opened
> The weird thing is, 2 minutes later it works, then doesnt?!!
> Could this be a local network probelm we are having, we have a large 
> flat class B network!

My guess is that you have problems with nss_ldap, which is sometimes
(and sometimes not) resolving the userids.  Take a sniff and look
closely at the ldap traffic.

You can reduce the load on the LDAP server by setting
'ldapsam:trusted=yes', but read up the comments and documentation of
this smb.conf parameter, as every user you want to have Samba use
(including the guest account) must be in LDAP for both nss (posix) and
Samba parts.

Andrew Bartlett

Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20051126/f32df1b2/attachment.bin

More information about the samba mailing list