[Samba] Sporadic Logon Issues from Windows 2003

Tony Sullivan tony at exquisiteimages.com
Tue Mar 22 12:13:11 MDT 2011

I have a Samba server (3.0.37) acting as a domain controller for several
computers running Linux, Windows XP, Windows 7, and just recently a Windows
2003 server that replaced a Windows NT server.

A couple times a day, the Windows 2003 server generates an error like the
one below for everyone that attempts to connect to it. Throughout the rest
of the day, there is no issue at all, but several times it will just refuse
Event Type:	Failure Audit
Event Source:	Security
Event Category:	Logon/Logoff 
Event ID:	537
Date:		3/22/2011
Time:		2:01:54 PM
Computer:	FLEX1
Logon Failure:
 	Reason:		An error occurred during logon
 	User Name:	John.Smith
 	Logon Type:	3
 	Logon Process:	NtLmSsp 
 	Authentication Package:	NTLM
 	Workstation Name:	CWS133
 	Status code:	0xC000005E
 	Substatus code:	0x0
 	Caller User Name:	-
 	Caller Domain:	-
 	Caller Logon ID:	-
 	Caller Process ID:	-
 	Transited Services:	-
 	Source Network Address:
 	Source Port:	2621

For more information, see Help and Support Center at

I have checked my Samba logs for the same time period and I don't see any
kind of error entries and googling the status code and event ID together
hasn't produced anything useful so far.

Can anyone give me an idea of how I would go about debugging this situation?

View this message in context: http://samba.2283325.n4.nabble.com/Sporadic-Logon-Issues-from-Windows-2003-tp3397295p3397295.html
Sent from the Samba - General mailing list archive at Nabble.com.

More information about the samba mailing list