[Samba] Windows 2003 AD <-> Samba 3.0.23c

[Jean-Vincent BAYARRI]

Hi,

a tcpdump shows the 2 last packets before the timeout:

10:25:41.167529 IP MYCLIENTIP.4473 > MYSERVERIP.445: . ack 222
win 65315
10:25:41.368769 IP MYCLIENTIP.4457 > MYSERVERIP.445: . ack 7807
win 65343


Those packet occur simultanously with the log msg:

[2006/11/14 10:25:44, 2] auth/auth.c:check_ntlm_password(309)
  check_ntlm_password:  authentication for user [bayarri] -> [bayarri]
  -> [PARIS\bayarri] succeeded


A few seconds later the timeouts occurs and the windows client displays
an error indicating my server is not avalable. And exactly at the same
moment, the samba log displays:

  MYCLIENT (MYCLIENTIP) connect to service MYSERVICE initially as
  user PARIS\bayarri  (pid 47542)
  [2006/11/14 10:26:05, 2] smbd/reply.c:reply_tcon_and_X(711)

Strange!

NB : I don't know if there's a connection, but my samba log is full of
lines like this:

[2006/11/14 10:33:00, 0] nsswitch/winbindd.c:request_len_recv(517)
  request_len_recv: Invalid request size received: 1840

My samba install is fresh from the ports, with
ADS/WINBIND/LDAP/ACL/FAM/SYSLOG/QUOTAS/UTMP/MSDFS/EXP_MODULES options.
Samba itself is working in ADS authentification (net ads join succeeded
and wbinfo -XX makes no timeout)



Le Mon, Nov 13, 2006 at 08:01:30AM -0800, Gerald (Jerry) Carter a écrit :
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Jean-Vincent BAYARRI wrote:
> > Hi,
> > 
> > I have exactly the same problem between a W2003 AD and a FreeBSD box
> > running Samba 3.0.23c : authentification timeouts when the login/pw are
> > correct, although wbinfo -u / -g work perfectly.
> > 
> > Le Mon, Nov 13, 2006 at 11:05:46AM +0100, db at trunet.dk a écrit :
> >> Hi all
> >>
> >> I have a network with a Windows 2003 AD (10.10.10.5) and 
> >> a Samba 3.0.23c (10.10.10.8). I want Samba to join the
> >> domain and get it's user/group/permission info from my
> >> Windows 2003 server. I have followed
> >> http://samba.org/samba/docs/man/Samba-Guide/unixclients.html#ch9-adsdc
> >>
> >> And it seams to join and work with wbinfo/getent/"net ads
> >> join/info/status". When I try to login with a wrong password it get's
> >> rejected, but when I type the correct password it timeout.
> ...
> >> smb_vwv[ 3]=  217 (0xD9)
> >> smb_bcc=281
> >> [snip]
> >> SPNEGO login failed: NT_STATUS_IO_TIMEOUT
> >> lang_tdb_init: /usr/lib/samba/en_US.UTF-8.msg: No such file or directory
> >> session setup failed: Call timed out: server did not respond after 20000
> >> milliseconds
> 
> I suggest that you get wireshark and get a trace to see what
> the last packet is.
> 
> 
> 
> 
> 
> cheers, jerry
> =====================================================================
> Samba                                    ------- http://www.samba.org
> Centeris                         -----------  http://www.centeris.com
> "What man is a man who does not make the world better?"      --Balian
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2 (GNU/Linux)
> Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org
> 
> iD8DBQFFWJbaIR7qMdg1EfYRAuNDAJwI5Kjpg/nqUv18ubHU+hFcQPy0YACg5Avc
> yAZr3GEbGj66Chn3fhl30W4=
> =NwSE
> -----END PGP SIGNATURE-----