[Samba] Samba 3.4 authentication suddenly very slow.

[Don Krause]

On Jan 5, 2012, at 12:21 AM, Volker Lendecke wrote:

> On Wed, Jan 04, 2012 at 05:18:11PM -0800, Don Krause wrote:
>> Some additional info, I'm starting to believe that this is caused by an MS patch that was applied to our AD servers.
>> 
>> I've unarchived the original VMWare image of the test linux installation that we used to verify that 2008r2 AD and Samba would work with win7 clients, it behaves exactly the same way.
>> 
>> From windows, run \\test7 and it immediately returns the full list of available shares, however, click on a share, and it takes more than 1 full minute before access is granted.
>> 
>> Then, I set up a new VM, this time used Cent 6.2, with samba 3.5. Configured, joined the domain, etc.
>> 
>> net ads testjoin works, wbinfo works, kinit works, everything checks out, but this case, the problem is worse.
>> 
>> running \\test12 immediately brings up a list of all shares, attempting to click on any causes the > 1 min what, but then access is denied.
>> 
>> Odd, the logs appear to say that access is granted.
>> 
>> [2012/01/04 16:14:40.004734,  3] lib/access.c:392(check_access)
>>  check_access: no hostnames in host allow/deny list.
>> [2012/01/04 16:14:40.004933,  2] lib/access.c:409(check_access)
>>  Allowed connection from  (::ffff:172.24.143.3)
>> [2012/01/04 16:14:40.004981, 10] smbd/share_access.c:238(user_ok_token)
>>  user_ok_token: share scully is ok for unix user dkrause
>> 
>> But win7 says that access is denied.
>> 
>> Losing my hair here…
>> 
>> Thanks!
> 
> Full debug logs and a network trace might be helpful. For
> creating useful network traces, see
> 
> http://wiki.samba.org/index.php/Capture_Packets
> 
> Thanks,
> 
> Volker
> 

Thanks Volker,

Things are magically working again this morning, after being slow for the last 3 days.

But, that hasn't solved my access issue on the new CentOS test box, but now that the panic has subsided, I'll
do a more careful job of looking into that one, and I'll post later if there's a real problem.

Thanks again!

--
Don Krause                                                                   
Head Systems Geek, 
Waver of Deceased Chickens.
Optivus Proton Therapy, Inc.
P.O. Box 608
Loma Linda, California 92354
909.799.8327 Tel
909.799.8366 Fax
dkrause at optivus.com
www.optivus.com
"This message represents the official view of the voices in my head."