[Samba] There are no currently logon servers available when mappingwith "net use"

Tue Mar 19 13:59:42 MDT 2013

Just a thought - you say its an intermittent problem and you have 2 DCs,
right? It isn't just going wrong when it uses one server but not the other
to log on is it? Try forcing it to log on to each server individually (eg
unplug ethernet on each as you log on for a moment when no-one is using
network)

I don't like the look of the backslash in your [netlogon] admin users
either. Why not just leave the entire line out?

Jim

On 18 March 2013 17:56, Marcio Oli <marcio.oli.df at gmail.com> wrote:

> Hi TMason, Jim and Daniel. I don't know what more to do.
>
> Follow the informations to all you help me if possible.
>
> 1)
>
> ..................................................................................................................
> PDC, BDC and domain member have the same version of linux, but just the
> domain member has a different version of samba.
>
> pdc
> Linux 2.6.32-220.17.1.el6.x86_64 x86_64 GNU/Linux
> Red Hat Enterprise Linux Server release 6.2 (Santiago)
> Samba: Version 3.5.10-116.el6_2
>
>
> bdc
> Linux 2.6.32-220.17.1.el6.x86_64 x86_64 GNU/Linux
> Red Hat Enterprise Linux Server release 6.2 (Santiago)
> Samba: Version 3.5.10-116.el6_2
>
>
> member of domain
> Linux 2.6.32-220.17.1.el6.x86_64 GNU/Linux
> Red Hat Enterprise Linux Server release 6.2 (Santiago)
> Samba: Version 3.5.6-86.el6_1.4
>
> 2)
>
> ..................................................................................................................
> - About windows registry (client windows7 professional) and gpedit.msc, I
> altered these ones:
>
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
> "DomainCompatibilityMode"=dword:00000001
> "DNSNameResolutionRequired"=dword:00000000
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
> "SlowLinkDetectEnabled"=dword:00000000
> "DeleteRoamingCache"=dword:00000001
> "WaitForNetwork"=dword:00000050
> "CompatibleRUPSecurity"=dword:00000001
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\System]
> "SlowLinkDetectEnabled"=dword:00000000
> "DeleteRoamingCache"=dword:00000001
> "WaitForNetwork"=dword:00000050
> "CompatibleRUPSecurity"=dword:00000001
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
> "SyncForegroundPolicy"=dword:00000001
> [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows
> NT\CurrentVersion\Winlogon]
> "SyncForegroundPolicy"=dword:00000001
> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
> NT\CurrentVersion\Winlogon]
> "SyncForegroundPolicy"=dword:00000001
>
> [HotKeyLocalMachine\System\CurrentControlSet\Services\Netlogon\Parameters]
> DWORD RequireSignOrSeal = 1
> DWORD RequireStrongKey = 1
>
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
> “RunLogonScriptSync”=dword:00000001
>
> [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters]
> "ExpectedDialupDelay"=dword:0000001e
> "NegativeCachePeriod"=dword:00014a78
>
>
> [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters]
> "MaxPacketSize"=dword:00000001
>
> [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters]
> "DisableDHCPMediaSense"=dword:00000001
>
> 3)
>
> ..................................................................................................................
> - Dfs and dfs proxy are with default values of samba.
>
> 4)
>
> ..................................................................................................................
> Yes, I use wins. My wins server is the PDC.
>
> 5)
>
> ..................................................................................................................
> "Look at the authentication of your member server, does the server
> authenticate right against your PDC/BDC?"
>
> So, how do I verify this?
>
> 6)
>
> ..................................................................................................................
> Sometimes, but not always, at user's log of samba appears (on the logon
> moment):
>
> # tail -f log.marcio.oliveira
>
> [2013/03/15 19:14:11.779186,  1] smbd/service.c:1070(make_connection_snum)
>   pgt019874 (::ffff:10.0.3.16) connect to service netlogon initially as
> user marcio.oliveira (uid=0, gid=1001) (pid 10342)
> [2013/03/15 19:14:13.073811,  0]
> passdb/pdb_ldap.c:4642(ldapuser2displayentry)
>   sid S-1-5-21-4007841154-2593654838-2170425582-2998 does not belong to our
> domain
> [2013/03/15 19:15:06.379204,  1] smbd/service.c:1251(close_cnum)
>   pgt019874 (::ffff:10.0.3.16) closed connection to service netlogon
>
>
> Thanks,
> Marcio Oliveira
>
>
> 2013/3/18 Daniel Müller <mueller at tropenklinik.de>
>
> > Look at the authentication of your member server, does the server
> > authenticate right against your PDC/BDC? Which version of
> > Samba? what about using dfs or dfs proxy on your PDC/BDC to map the
> share?
> > Do you use WINS?
> >
> > -----------------------------------------------
> > EDV Daniel Müller
> >
> > Leitung EDV
> > Tropenklinik Paul-Lechler-Krankenhaus
> > Paul-Lechler-Str. 24
> > 72076 Tübingen
> >
> > Tel.: 07071/206-463, Fax: 07071/206-499
> > eMail: mueller at tropenklinik.de
> > Internet: www.tropenklinik.de
> > -----------------------------------------------
> > -----Ursprüngliche Nachricht-----
> > Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org
> ]
> > Im
> > Auftrag von Jim Potter
> > Gesendet: Sonntag, 17. März 2013 21:33
> > An: c.koeber at live.com
> > Cc: samba at lists.samba.org
> > Betreff: Re: [Samba] There are no currently logon servers available when
> > mappingwith "net use"
> >
> > Hi,
> >
> > There is a setting in gpedit.msc somewhere to tell the PC to wait for
> > network connectivity before showing the login box. (no idea where - find
> it
> > yourself - sorry)
> >
> >   Anothe option - I have one user woth a similar problem. She keeps
> getting
> > 'duplicate machine name exists' popups appearing regardless of what I
> name
> > her machine. The laptop caches her user details so she can log in fine,
> but
> > generally has weird problems connecting to new shares.
> > You might see the behaviour you are getting if there were machines with
> > duplicate names - one would join the domain properly, wheras the other's
> > trust account would fail but could log in with cached credentials and
> then
> > have problems connecting to domain repated stuff.
> >
> > hope that helps
> >
> > Jim
> >
> > On 15/03/2013 23:26, TMason wrote:
> > > "Marcio Oli"  wrote in message
> > > news:CANpJy9WD=CLxbB=BQhgS==
> 1mt-rkTXT0hVMi6muymZ5RKXMktg at mail.gmail.com.
> > ..
> > >
> > > Hi people, I have a problem and I need so much of your help.
> > >
> > > I have a login script in \\server1\netlogon\script.bat (on my PDC and
> > > BDC)
> > > that runs "net use" commands to map some shares in time of the logon.
> > > This login tries to map share in another server (samba member of
> > > domain \\server2).
> > >
> > > So, I put the result at a log and appears these lines:
> > > "
> > > System error 1311 has occurred.
> > > There are currently no logon servers available to service the logon
> > > request.
> > > "
> > >
> > > This is a recurrent problem, but neither always this happens.
> > > Sometimes, everything is wonderful and works very well mapping all
> > > shares, but is unstable.
> > >
> > >
> > > ----------------------------------------------------------------------
> > > ----------
> > >
> > >
> > > Windows clients have this problem regardless of the type of PDC/BDC
> > > you have (Windows or Samba). The problem is that Windows is generally
> > > ready to let people log in before all of the network services are
> > > ready and as such people can't log in.
> > >
> > > Are your servers on static IPs? Also, what kind of DNS/DHCP server do
> > > you have?
> > >
> > > This will help in troubleshooting.
> > >
> > > TMason
> > >
> > >
> > >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
>
>
>
> --
> Marcio Oliveira.
> "Tudo concorre para o bem daqueles que amam à Deus." (Rom 8,28)
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>