[Samba] Samba authentication slow after upgrade to Samba 3

[Mansell, Gary]

This is really frustrating me - I cannot seem to resolve the problem.

Some users can connect no problem and others take a long time. The users
that take a long time leave lots of entries in the messages file:

Jun  5 13:00:33 dfgsrv2 smbd[9148]: [2007/06/05 13:00:33, 0]
auth/pampass.c:smb_pam_passcheck(810) 
Jun  5 13:00:33 dfgsrv2 smbd[9148]:   smb_pam_passcheck: PAM:
smb_pam_auth failed - Rejecting User rma ! 
Jun  5 13:00:34 dfgsrv2 smbd[10665]: [2007/06/05 13:00:34, 0]
auth/pampass.c:smb_pam_passcheck(810) 
Jun  5 13:00:34 dfgsrv2 smbd[10665]:   smb_pam_passcheck: PAM:
smb_pam_auth failed - Rejecting User amcq ! 
Jun  5 13:00:36 dfgsrv2 smbd[9148]: [2007/06/05 13:00:36, 0]
auth/pampass.c:smb_pam_passcheck(810) 
Jun  5 13:00:36 dfgsrv2 smbd[9148]:   smb_pam_passcheck: PAM:
smb_pam_auth failed - Rejecting User rma ! 
Jun  5 13:00:36 dfgsrv2 smbd[10670]: [2007/06/05 13:00:36, 0]
auth/pampass.c:smb_pam_passcheck(810) 
Jun  5 13:00:36 dfgsrv2 smbd[10670]:   smb_pam_passcheck: PAM:
smb_pam_auth failed - Rejecting User amcq ! 
Jun  5 13:00:38 dfgsrv2 smbd[9148]: [2007/06/05 13:00:38, 0]
auth/pampass.c:smb_pam_passcheck(810) 
Jun  5 13:00:38 dfgsrv2 smbd[9148]:   smb_pam_passcheck: PAM:
smb_pam_auth failed - Rejecting User rma ! 
Jun  5 13:00:38 dfgsrv2 smbd[10671]: [2007/06/05 13:00:38, 0]
auth/pampass.c:smb_pam_passcheck(810) 
Jun  5 13:00:38 dfgsrv2 smbd[10671]:   smb_pam_passcheck: PAM:
smb_pam_auth failed - Rejecting User amcq ! 
Jun  5 13:00:40 dfgsrv2 smbd[9148]: [2007/06/05 13:00:40, 0]
auth/pampass.c:smb_pam_passcheck(810) 
Jun  5 13:00:40 dfgsrv2 smbd[9148]:   smb_pam_passcheck: PAM:
smb_pam_auth failed - Rejecting User rma ! 
Jun  5 13:00:43 dfgsrv2 smbd[9148]: [2007/06/05 13:00:43, 0]
auth/pampass.c:smb_pam_passcheck(810) 
Jun  5 13:00:43 dfgsrv2 smbd[9148]:   smb_pam_passcheck: PAM:
smb_pam_auth failed - Rejecting User rma ! 
Jun  5 13:00:45 dfgsrv2 smbd[9148]: [2007/06/05 13:00:45, 0]
auth/pampass.c:smb_pam_passcheck(810) 
Jun  5 13:00:45 dfgsrv2 smbd[9148]:   smb_pam_passcheck: PAM:
smb_pam_auth failed - Rejecting User rma ! 
Jun  5 13:00:47 dfgsrv2 smbd[9148]: [2007/06/05 13:00:47, 0]
auth/pampass.c:smb_pam_passcheck(810) 
Jun  5 13:00:47 dfgsrv2 smbd[9148]:   smb_pam_passcheck: PAM:
smb_pam_auth failed - Rejecting User rma ! 
Jun  5 13:00:50 dfgsrv2 smbd[9148]: [2007/06/05 13:00:50, 0]
auth/pampass.c:smb_pam_passcheck(810) 
Jun  5 13:00:50 dfgsrv2 smbd[9148]:   smb_pam_passcheck: PAM:
smb_pam_auth failed - Rejecting User rma ! 
Jun  5 13:00:51 dfgsrv2 smbd[10681]: [2007/06/05 13:00:51, 0]
auth/pampass.c:smb_pam_passcheck(810) 
Jun  5 13:00:51 dfgsrv2 smbd[10681]:   smb_pam_passcheck: PAM:
smb_pam_auth failed - Rejecting User amcq ! 



I have upgraded my version of Samba to the latest one for RHEL 4 -
samba-3.0.10-1.4E.12.2

Anyone got any ideas?

On Fri, 2007-06-01 at 08:32 +0100, Mansell, Gary wrote: 

> Hi,
> 
> I have just upgraded a server from Samba 2 to Samba 3 and some of the
> Windows clients are taking a long time to authenticate shares (1 or 2
> minutes). Eventually the username/password box appears and then when you
> enter a correct password, all is fine - it is just the initial
> authentication.
> 
> This is a simple UNIX password Samba server (with NIS) and I have set it
> to not use encrypted passwords.
> 
> I get these errors, repeatedly, in the messages file:
> 
> [2007/06/01 08:29:26, 2] auth/pampass.c:smb_pam_auth(514)
>   smb_pam_auth: PAM: Athentication Error for user mcr3
> [2007/06/01 08:29:26, 2] auth/pampass.c:smb_pam_error_handler(73)
>   smb_pam_error_handler: PAM: Authentication Failure : Authentication
> failure
> [2007/06/01 08:29:26, 0] auth/pampass.c:smb_pam_passcheck(810)
>   smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User mcr3 !
> 
> 
> Here is my testparm output:
> 
> # Global parameters
> [global]
>         workgroup = DFGSRV
>         server string = dfgsrv Samba Server %v
>         encrypt passwords = No
>         password level = 8
>         username level = 8
>         log level = 2
>         log file = /var/log/samba/%m.log
>         max log size = 200
>         deadtime = 30
>         socket options = SO_KEEPALIVE SO_BROADCAST TCP_NODELAY
> IPTOS_THROUGHPUT
>         dns proxy = No
>         idmap uid = 16777216-33554431
>         idmap gid = 16777216-33554431
>         cups options = raw
>         oplocks = No
>         level2 oplocks = No
> 
> [homes]
>         comment = Home Directories
>         read only = No
>         create mask = 0664
>         directory mask = 0775
> 
> Any help gladly received as it is taking some of my users half an hour
> to disconnect from their previously mapped shares and to reconnect to
> them.
> 
> The problem persists if a user logs out and back in again and after a
> Windows client machine reboot.
> 
> Regards
> 
> Gary
> 
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed.If you have received this e-mail in error please notify the sender immediately and delete this e-mail from your system.Please note that any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of Ricardo (save for reports and other documentation formally approved and signed for release to the intended recipient).Only Directors are authorised to enter into legally binding obligations on behalf of Ricardo. Ricardo may monitor outgoing and incoming e-mails and other telecommunications systems.
> By replying to this e-mail you give consent to such monitoring.The recipient should check e-mail and any attachments for the presence of viruses. Ricardo accepts no liability for any damage caused by any virus transmitted by this e-mail. "Ricardo" means Ricardo plc and its subsidiary companies.
> Ricardo plc is a public limited company registered in England with registered number 00222915.
> The registered office of Ricardo plc is Shoreham Technical Centre, Shoreham-by Sea, West Sussex, BN43 5FG.
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 

-- 
------------------------------------------------------------------------------------ 
Gary Mansell 
Team Leader - Technical Computing 
Ricardo UK Ltd. 
Shoreham Technical Centre, Shoreham-By-Sea, West Sussex, BN43 5FG 
Email : Gary.Mansell at ricardo.com
Dial : +44 (0)1273 794485 | Fax :+44 (0)1273 794699  
A subsidiary of Ricardo plc. - www.ricardo.com
------------------------------------------------------------------------------------