[Samba] Samba on Solaris filing

[Shane Henry]

G'day all,

I've been getting some strange things happening with my samba setup. At
the moment we've got a SAMBA/LDAP setup to provide single sign/roaming
profiles for our Windows machines. We've got 1 PDC & 3 BDC's all running
Solaris 10 on Sun-Fire-V440's.

The problem is that the system seems to run fine for about a day or two
(users login/logout, etc), but then for no apparent reason users can't
log in.

If I run 'smbclient -L RAVEN' on the PDC, I get the following error:
session request to RAVEN failed (Call timed out: server did not respond
after 20000 milliseconds)
session request to *SMBSERVER failed (Call timed out: server did not
respond after 20000 milliseconds)

Having run the same command the night before, it all worked fine.

I can restart the SAMBA daemons (and the LDAP daemons), but nothing
seems to fix it. The only fix that seems to work is to reboot the
server. Once the system is rebooted, it all seems to work fine for a day
or two, then it just stops working again.

I've looked through the logs and can't seem to find anything that
indicates the problem. I've also searched the net for answers, but as of
yet, I've found no answer but to reboot the servers.

At the moment we're running samba 3.0.23b on Solaris 10.

Any suggestions about where to go from here would be greatly
appreciated.

Thanks in advance,
Shane


smb.conf:
# Global parameters
[global]
	workgroup = SCADA
	netbios name = RAVEN
	server string = Samba Server %v
	interfaces = 159.73.160.13/255.255.255.0
159.73.161.13/255.255.255.0 lo0
	bind interfaces only = Yes
	hosts allow = 159.73.160.0/255.255.255.0
159.73.161.0/255.255.255.0 127.0.0.1
	passdb backend = ldapsam:ldap://127.0.0.1/
	enable privileges = Yes
	username map = /etc/samba/smbusers
	security = user
	log level = 3
	log file = /var/log/samba/samba.log
	max log size = 0
	encrypt passwords = Yes
	unix password sync = Yes
	# smbldap-passwdNT is a hacked script to make it work for us
	passwd program = /usr/local/sbin/smbldap-passwdNT "%u"
	passwd chat = "Changing UNIX and samba passwords for*\nNew
password*" %n\n "*Retype new password*" %n\n "*Password*changed*"
	passwd chat timeout = 10
	passwd chat debug = No
	smb ports = 139
	name resolve order = wins bcast hosts
	time server = Yes
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        preserve case = yes
        short preserve case = yes
        case sensitive = no

        add user script = /usr/local/sbin/smbldap-useradd -m "%u"
        delete user script = /usr/local/sbin/smbldap-userdel "%u"
        add group script = /usr/local/sbin/smbldap-groupadd "%g" 
        delete group script = /usr/local/sbin/smbldap-groupdel "%g"
        add user to group script = /usr/local/sbin/smbldap-groupmod -m
"%u" "%g"
        delete user from group script = /usr/local/sbin/smbldap-groupmod
-x "%u" "%g"
	set primary group script = /usr/local/sbin/smbldap-usermod -g
"%g" "%u"
        add machine script = /usr/local/sbin/smbldap-useradd -w "%u"

	logon script = logon.bat
        logon path = \\%L\profiles\%U
	logon drive = H:
        logon home = \\%L\%U

	domain logons = Yes
	domain master = Yes
	wins support = yes
	preferred master = Yes
	os level = 99

	ldap suffix = dc=scada,dc=ie,dc=com,dc=au
        ldap machine suffix = ou=People
        ldap user suffix = ou=People
        ldap group suffix = ou=Group
	ldap idmap suffix = ou=Idmap
	ldap admin dn = cn=Manager,dc=scada,dc=ie,dc=com,dc=au
	map acl inherit = Yes
	ldap ssl = no
	ldap passwd sync = Yes

	idmap backend = ldap:ldap://127.0.0.1
	idmap uid = 15000-20000
	idmap gid = 15000-20000


[netlogon]
	comment = Network Logon Service
	path = /export/home/samba/netlogon/
	guest ok = Yes
	locking = No

[profiles]
	comment = Profile Share
	path = /export/home/samba/profiles/
	read only = No
	profile acls = Yes

[doc]
	path = /export/home/samba/doc/
	read only = yes
	create mask = 0750
	guest ok = no
	write list = @ie

[homes]
	comment = Home Directories
	valid users = %U
	read only = no
	create mask = 0644
	directory mask = 0775
	browseable = No



**********************************************************************
Please consider our environment before printing this email.

NOTICE - This communication contains information which is confidential and the copyright of Integral Energy Australia or a third party.

If you are not the intended recipient of this communication please delete and destroy all copies and telephone Integral Energy on 131081 immediately. If you are the intended recipient of this communication you should not copy, disclose  or distribute this communication without the authority of Integral Energy.

Any views expressed in this Communication are those of the individual sender, except where the sender specifically states them to be the views of Integral Energy.

Except as required at law, Integral Energy does not represent, warrant and/or guarantee that the integrity of this communication has been maintained nor that the communication is free of errors, virus, interception or inference.
**********************************************************************