[Samba] winbind problem

prasaanna rao prasanna_rao_u at yahoo.com
Fri Sep 2 08:41:59 GMT 2005


Hi,

I recently upgraded samba from 3.0.11 3.0.20. It's
integrated with squid 2.5 STABLE 7 with patches for
NTLM bugs.

I am facing problem with NTLM authentication. The
browser hangs  and I get following error in
log.winbindd

[2005/09/02 13:53:10, 0]
nsswitch/winbindd.c:process_loop(803)
  winbindd: Exceeding 200 client connections, no idle
connection found
[2005/09/02 13:53:10, 0]
nsswitch/winbindd.c:process_loop(803)
  winbindd: Exceeding 200 client connections, no idle
connection found
[2005/09/02 13:53:10, 0]
nsswitch/winbindd.c:process_loop(803)
  winbindd: Exceeding 200 client connections, no idle
connection found
[2005/09/02 13:53:10, 0]
nsswitch/winbindd.c:process_loop(803)
  winbindd: Exceeding 200 client connections, no idle
connection found
[2005/09/02 13:53:10, 0]
nsswitch/winbindd.c:process_loop(803)
  winbindd: Exceeding 200 client connections, no idle
connection found


The errors in squid cache.log 
FATAL: authenticateNTLMHandleReply: called with no
result string

Squid Cache (Version 2.5.STABLE7): Terminated
abnormally.
CPU Usage: 65238.530 seconds = 13687.180 user +
51551.350 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 24735
Memory usage for squid via mallinfo():
        total space in arena:  437924 KB
        Ordinary blocks:       435653 KB 109298 blks
        Small blocks:               0 KB      0 blks
        Holding blocks:         20584 KB     23 blks
        Free Small blocks:          0 KB
        Free Ordinary blocks:    2270 KB
        Total in use:          456237 KB 104%
        Total free:              2270 KB 1%
2005/09/02 10:19:59| Starting Squid Cache version
2.5.STABLE7 for i686-pc-linux-
gnu...
2005/09/02 10:19:59| Process ID 21027
2005/09/02 10:19:59| With 32768 file descriptors
available
2005/09/02 10:19:59| Performing DNS Tests...
2005/09/02 10:19:59| Successful DNS name lookup
tests...
2005/09/02 10:19:59| DNS Socket created at 0.0.0.0,
port 36573, FD 4
2005/09/02 10:19:59| Adding nameserver 10.203.193.25
from squid.conf
2005/09/02 10:19:59| Adding nameserver 202.56.250.5
from squid.conf
2005/09/02 10:19:59| Adding nameserver 202.56.230.5
from squid.conf
2005/09/02 10:19:59| Adding nameserver 202.56.230.6
from squid.conf
2005/09/02 10:19:59| helperOpenServers: Starting 200
'WsRedtor' processes
2005/09/02 10:20:06| helperStatefulOpenServers:
Starting 250 'ntlm_auth' process
es
2005/09/02 10:20:15| helperOpenServers: Starting 10
'ntlm_auth' processes
2005/09/02 10:20:16| Unlinkd pipe opened on FD 469
2005/09/02 10:20:16| Swap maxSize 102400000 KB,
estimated 7876923 objects
2005/09/02 10:20:16| Target number of buckets: 393846
2005/09/02 10:20:16| Using 524288 Store buckets
2005/09/02 10:20:16| Max Mem  size: 81920 KB
2005/09/02 10:20:16| Max Swap size: 102400000 KB
2005/09/02 10:20:16| Store logging disabled
2005/09/02 10:20:16| Rebuilding storage in
/home1/cache1 (CLEAN)
2005/09/02 10:20:16| Rebuilding storage in
/home1/cache2 (CLEAN)
2005/09/02 10:20:16| Rebuilding storage in
/home1/cache3 (CLEAN)
2005/09/02 10:20:16| Rebuilding storage in
/home1/cache4 (CLEAN)
2005/09/02 10:20:16| Rebuilding storage in
/home1/cache5 (CLEAN)
2005/09/02 10:20:16| Rebuilding storage in
/home1/cache6 (CLEAN)
2005/09/02 10:20:16| Rebuilding storage in
/home1/cache7 (CLEAN)
2005/09/02 10:20:16| Rebuilding storage in
/home1/cache8 (CLEAN)
2005/09/02 10:20:16| Rebuilding storage in
/home1/cache9 (CLEAN)
2005/09/02 10:20:16| Rebuilding storage in
/home1/cache (CLEAN)
2005/09/02 10:20:16| Using Least Load store dir
selection
2005/09/02 10:20:16| Set Current Directory to
/usr/local/squid/var/cache
2005/09/02 10:20:16| Loaded Icons.
2005/09/02 10:20:23| Accepting HTTP connections at
0.0.0.0, port 80, FD 488.
2005/09/02 10:20:23| Accepting ICP messages at
0.0.0.0, port 3130, FD 489.
2005/09/02 10:20:23| Accepting SNMP messages on port
3401, FD 490.
2005/09/02 10:20:23| WCCP Disabled.
2005/09/02 10:20:23| WCCP Disabled.
2005/09/02 10:20:23| Ready to serve requests.
2005/09/02 10:20:24| parseHttpRequest: Unsupported
method 'CONNECT'
2005/09/02 10:20:24| clientReadRequest: FD 579 Invalid
Request
2005/09/02 10:20:24| parseHttpRequest: Unsupported
method 'CONNECT'
2005/09/02 10:20:24| clientReadRequest: FD 592 Invalid
Request
2005/09/02 10:20:25| parseHttpRequest: Unsupported
method 'CONNECT'
2005/09/02 10:20:25| clientReadRequest: FD 630 Invalid
Request
2005/09/02 10:20:26| parseHttpRequest: Unsupported
method 'CONNECT'
2005/09/02 10:20:26| clientReadRequest: FD 664 Invalid
Request
2005/09/02 10:20:26| Store rebuilding is  1.6%
complete
2005/09/02 10:20:26| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:29| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:29| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:29| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:29| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:29| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:29| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:29| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:29| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:29| urlParse: Illegal character in
hostname 'google.com''
2005/09/02 10:20:30| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:30| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:30| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:30| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:30| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:30| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:30| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:30| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:20:41| Store rebuilding is  4.9%
complete
2005/09/02 10:20:55| parseHttpRequest: Unsupported
method 'CONNECT'
2005/09/02 10:20:55| clientReadRequest: FD 1266
Invalid Request
2005/09/02 10:20:56| Store rebuilding is 11.3%
complete
2005/09/02 10:20:58| parseHttpRequest: Unsupported
method 'CONNECT'
2005/09/02 10:20:58| clientReadRequest: FD 1304
Invalid Request
2005/09/02 10:21:02| parseHttpRequest: Unsupported
method 'CONNECT'
2005/09/02 10:21:02| clientReadRequest: FD 1315
Invalid Request
2005/09/02 10:21:03| WARNING: All ntlmauthenticator
processes are busy.
2005/09/02 10:21:03| WARNING: up to 250 pending
requests queued
2005/09/02 10:21:07| parseHttpRequest: Unsupported
method 'CONNECT'
2005/09/02 10:21:07| clientReadRequest: FD 1361
Invalid Request
2005/09/02 10:21:14| Store rebuilding is 17.6%
complete
2005/09/02 10:21:16| parseHttpRequest: Unsupported
method 'CONNECT'
2005/09/02 10:21:16| clientReadRequest: FD 1401
Invalid Request
2005/09/02 10:21:23| parseHttpRequest: Unsupported
method 'CONNECT'
2005/09/02 10:21:23| clientReadRequest: FD 1384
Invalid Request
2005/09/02 10:21:27| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:21:27| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:21:27| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:21:27| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:21:27| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:21:27| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:21:27| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:21:27| urlParse: Illegal character in
hostname 'us.i1.yimg.com%2fu
s.yimg.com'
2005/09/02 10:21:32| Store rebuilding is 24.0%
complete
2005/09/02 10:21:33| WARNING: All ntlmauthenticator
processes are busy.
2005/09/02 10:21:33| WARNING: up to 394 pending
requests queued
2005/09/02 10:21:33| Consider increasing the number of
ntlmauthenticator process
es to at least 644 in your config file.
2005/09/02 10:21:48| Store rebuilding is 30.3%
complete
2005/09/02 10:21:51| parseHttpRequest: Unsupported
method 'CONNECT'
2005/09/02 10:21:51| clientReadRequest: FD 817 Invalid
Request
[2005/09/02 10:22:01, 1]
utils/ntlm_auth.c:check_plaintext_auth(286)
  Reading winbind reply failed! (0x01)
2005/09/02 10:22:03| WARNING: All ntlmauthenticator
processes are busy.
2005/09/02 10:22:03| WARNING: up to 521 pending
requests queued
2005/09/02 10:22:03| Consider increasing the number of
ntlmauthenticator process
es to at least 771 in your config file.
2005/09/02 10:22:03| Store rebuilding is 36.7%
complete
2005/09/02 10:22:07| parseHttpRequest: Unsupported
method 'CONNECT'
2005/09/02 10:22:07| clientReadRequest: FD 944 Invalid
Request
[2005/09/02 10:22:09, 1]
utils/ntlm_auth.c:check_plaintext_auth(286)
  Reading winbind reply failed! (0x01)


plz help in resolving this

regards
prasanna




		
____________________________________________________
Start your day with Yahoo! - make it your home page 
http://www.yahoo.com/r/hs 
 


More information about the samba mailing list