[Samba] Samba 3.4 authentication suddenly very slow.

[Volker Lendecke]

On Wed, Jan 04, 2012 at 05:18:11PM -0800, Don Krause wrote:
> Some additional info, I'm starting to believe that this is caused by an MS patch that was applied to our AD servers.
> 
> I've unarchived the original VMWare image of the test linux installation that we used to verify that 2008r2 AD and Samba would work with win7 clients, it behaves exactly the same way.
> 
> From windows, run \\test7 and it immediately returns the full list of available shares, however, click on a share, and it takes more than 1 full minute before access is granted.
> 
> Then, I set up a new VM, this time used Cent 6.2, with samba 3.5. Configured, joined the domain, etc.
> 
> net ads testjoin works, wbinfo works, kinit works, everything checks out, but this case, the problem is worse.
> 
> running \\test12 immediately brings up a list of all shares, attempting to click on any causes the > 1 min what, but then access is denied.
> 
> Odd, the logs appear to say that access is granted.
> 
> [2012/01/04 16:14:40.004734,  3] lib/access.c:392(check_access)
>   check_access: no hostnames in host allow/deny list.
> [2012/01/04 16:14:40.004933,  2] lib/access.c:409(check_access)
>   Allowed connection from  (::ffff:172.24.143.3)
> [2012/01/04 16:14:40.004981, 10] smbd/share_access.c:238(user_ok_token)
>   user_ok_token: share scully is ok for unix user dkrause
> 
> But win7 says that access is denied.
> 
> Losing my hair here…
> 
> Thanks!

Full debug logs and a network trace might be helpful. For
creating useful network traces, see

http://wiki.samba.org/index.php/Capture_Packets

Thanks,

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de