[Samba] Many strange errors in logs

[Proskurin Kirill]

Hello all.

What we have:
samba-3.0.32_1
FreeBSD-6.3

PDC + BDC + LDAP.

All seems work mostly fine, but today I can`t add computer to domain. 
Error says what domain not exist or cant be reached (im don`t know how 
it says in english windows - im translate from russian)

Im start to read logs and found many errors in differrent logs:

tdb_chainlock_with_timeout_internal: alarm (10) timed out for key DC in 
tdb /usr/local/etc/samba/secrets.tdb

log.172.16.1.2:  domain_client_validate: unable to validate password for 
user ilyin-vy in domain HQ to Domain controller DC. Error was 
NT_STATUS_IO_TIMEOUT.
log.172.16.1.2:  cli_rpc_pipe_close: cli_close failed on pipe \NETLOGON, 
fnum 0x7485 to machine DC.  Error was Call timed out: server did not 
respond after 10000 milliseconds

repeated million times..

What does it mean?


testparm on PDC:

%testparm
Load smb config files from /usr/local/etc/smb.conf
Processing section "[homes]"
Processing section "[netlogon]"
Processing section "[mail]"
Loaded services file OK.
'winbind separator = +' might cause problems with group membership.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

[global]
         dos charset = cp866
         unix charset = koi8-r
         display charset = koi8-r
         workgroup = HQ
         server string = DC Server
         security = DOMAIN
         passdb backend = ldapsam:ldap://localhost/
         log file = /var/log/samba/log.%m
         max log size = 500
         time server = Yes
         add user script = /usr/local/sbin/ldapadduser '%u' users
         rename user script = /usr/local/sbin/ldaprenameuser '%uold' '%unew'
         delete user script = /usr/local/sbin/ldapdeleteuser '%u'
         add group script = /usr/local/sbin/ldapaddgroup '%g'
         delete group script = /usr/local/sbin/ldapdeletegroup '%g'
         add user to group script = /usr/local/sbin/ldapaddusertogroup 
'%u' '%g'
         delete user from group script = 
/usr/local/sbin/ldapdeleteuserfromgroup '%u' '%g'
         set primary group script = /usr/local/sbin/ldapsetprimarygroup 
'%u' '%g'
         add machine script = /usr/local/sbin/ldapaddmachine '%u' computers
         logon path =
         os level = 64
         preferred master = Yes
         domain master = Yes
         dns proxy = No
         wins support = Yes
         ldap admin dn = "cn=root,dc=fxclub,dc=org"
         ldap group suffix = ou=Groups
         ldap machine suffix = ou=Computers
         ldap suffix = ou=Samba,dc=fxclub,dc=org
         ldap ssl = no
         ldap user suffix = ou=Users
         winbind separator = +
         winbind use default domain = Yes
         admin users = admin
         inherit acls = Yes
         hosts allow = 172.16.1., 192.168.1., 127.
         map acl inherit = Yes

[homes]
         comment = Home Directories
         valid users = %S
         read only = No
         browseable = No

[netlogon]
         comment = Network Logon Service
         path = /var/db/samba/netlogon
         guest ok = Yes
         browseable = No
         share modes = No

[mail]
         comment = temp
         path = /tmp/mail
         read only = No
         create mask = 0777
         guest ok = Yes
         browseable = No

-- 
Best regards,
Proskurin Kirill