[Samba] Mutex lock contention against Active directory domain controllers causing authentication failures

Bell D. D.Bell at soton.ac.uk
Thu Jul 19 15:27:52 MDT 2012


Hello,

(Sorry for top posting - forced to use Outlook).

Thanks for your suggestion. Sadly, as we're on Solaris, we immediately hit the following problem when testing on our test system:

http://www.sunmanagers.org/pipermail/sunmanagers/2011-September/049451.html

With logs such as:

[2012/07/19 22:04:13.304260,  3] smbd/vfs.c:128(vfs_init_custom)
  Initialising custom vfs hooks from [/[Default VFS]/]
[2012/07/19 22:04:13.305462,  0] lib/util.c:1117(smb_panic)
  PANIC (pid 21463): sys_setgroups failed
[2012/07/19 22:04:13.305769,  0] lib/util.c:1271(log_stack_trace)
  unable to produce a stack trace on this platform
[2012/07/19 22:04:13.306084,  0] lib/fault.c:358(dump_core)
  Can not dump core: corepath not set up

Although our systems do have the patched kernel, we're unsure of going down the winbind route as we've had some bad experiences when using winbind in the past, and we'd probably have to reboot the live system after changing /etc/system. We'll keep investigating to see if we can get it to work for us.

Thanks,

David
________________________________________
From: Volker Lendecke [Volker.Lendecke at SerNet.DE]
Sent: 19 July 2012 20:54
To: Bell D.
Cc: samba at lists.samba.org
Subject: Re: [Samba] Mutex lock contention against Active directory domain controllers causing authentication failures

On Thu, Jul 19, 2012 at 03:39:46PM +0000, Bell D. wrote:
> We are using Samba 3.4.6 (packaged by opencsw.org) against
> Active Directory 2003 on our primary University filestore.
> The operating system is Solaris 10 Update 10. We have a
> number of domain controllers. For the past two days on our
> main filestore has been failing connections from a number
> of clients.

Try running winbind. You don't need id mapping or nsswitch,
but winbind serving as a proxy to the DC might help you.

Volker

--
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de


More information about the samba mailing list