[Samba] Some strange errors in logs

Fri Nov 10 10:36:18 UTC 2017

On Fri, 10 Nov 2017 02:55:44 -0700 (MST)
Mariusz80 via samba <samba at lists.samba.org> wrote:

> Hello there. 
> I need consultation and any advice about my log file.
> 
> I have some strange errors in my log file about "invalid zone
> operation" and "pad length mismatch. Calculated 44  got 0" on my DC1
> and DC2 samba Version 4.5.12-Debian
> smb.conf:
> [global]
>         workgroup = !!!
>         realm = !!!
>         netbios name = !!!
>         server role = active directory domain controller
>         server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
> drepl, winbindd, ntp_signd, kcc, dnsupdate
>         idmap_ldb:use rfc2307 = yes
> 
> load printers = no
> printing = bsd
> printcap name = /dev/null
> disable spoolss = yes
> 
> log level = 1
> max log size = 1000
> log file = /var/log/samba/%m.log
> 
> lm announce = no
> client lanman auth = no
> 
> ntlm auth = yes
> lanman auth = no
> client ntlmv2 auth = yes
> 
> [netlogon]
>         path = /var/lib/samba/sysvol/dfm.biz.pl/scripts
>         read only = No
> 
> [sysvol]
>         path = /var/lib/samba/sysvol
>         read only = No
> 
> Sample log:
> [2017/11/09 11:22:46.190213,  0]
> ../source4/rpc_server/dnsserver/dcerpc_dnsserver.c:1085(dnsserver_query_zone)
>   dnsserver: Invalid zone operation IsSigneddnsserver: Invalid zone
> operation IsSigneddnsserver: Invalid zone operation IsSigneddnsserver:
> Invalid zone operation IsSigneddnsserver: Invalid zone operation
> IsSigneddnsserver: Invalid zone operation IsSigneddnsserver: Invalid
> zone operation IsSigneddnsserver: Invalid zone operation
> IsSigneddnsserver: Invalid zone operation IsSigneddnsserver: Invalid
> zone operation IsSigned../librpc/rpc/dcerpc_util.c:227: ERROR: pad
> length mismatch. Calculated 44  got 0
> [2017/11/09 12:11:58.968226,  1]
> ../librpc/rpc/dcerpc_util.c:227(dcerpc_pull_auth_trailer)
>   ../librpc/rpc/dcerpc_util.c:227: ERROR: pad length mismatch.
> Calculated 44 got 0
> [2017/11/09 12:28:13.768393,  0]
> ../source4/rpc_server/dnsserver/dcerpc_dnsserver.c:1085(dnsserver_query_zone)
>   dnsserver: Invalid zone operation IsSigneddnsserver: Invalid zone
> operation IsSigned../librpc/rpc/dcerpc_util.c:227: ERROR: pad length
> mismatch. Calculated 44  got 0
> [2017/11/09 14:54:39.320660,  1]
> ../librpc/rpc/dcerpc_util.c:227(dcerpc_pull_auth_trailer)
>   ../librpc/rpc/dcerpc_util.c:227: ERROR: pad length mismatch.
> Calculated 44 got 0
> [2017/11/09 15:02:11.878768,  1]
> ../librpc/rpc/dcerpc_util.c:227(dcerpc_pull_auth_trailer)
>   ../librpc/rpc/dcerpc_util.c:227: ERROR: pad length mismatch.
> Calculated 44 got 0
> [2017/11/09 15:04:38.500247,  1]
> ../librpc/rpc/dcerpc_util.c:227(dcerpc_pull_auth_trailer)
>   ../librpc/rpc/dcerpc_util.c:227: ERROR: pad length mismatch.
> Calculated 44 got 0
> [2017/11/09 15:28:39.928914,  0]
> ../source4/rpc_server/dnsserver/dcerpc_dnsserver.c:1085(dnsserver_query_zone)
>   dnsserver: Invalid zone operation IsSigneddnsserver: Invalid zone
> operation IsSigneddnsserver: Invalid zone operation IsSigneddnsserver:
> Invalid zone operation IsSigned../librpc/rpc/dcerpc_util.c:227:
> ERROR: pad length mismatch. Calculated 44  got 0
> [2017/11/09 16:05:31.014135,  1]
> ../librpc/rpc/dcerpc_util.c:227(dcerpc_pull_auth_trailer)
>   ../librpc/rpc/dcerpc_util.c:227: ERROR: pad length mismatch.
> Calculated 44 got 0
> [2017/11/09 21:53:03.428512,  1]
> ../librpc/rpc/dcerpc_util.c:227(dcerpc_pull_auth_trailer)
>   ../librpc/rpc/dcerpc_util.c:227: ERROR: pad length mismatch.
> Calculated 44 got 0
> [2017/11/10 06:58:00.225241,  1]
> ../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
>   Doing a full scan on DC=ForestDnsZones,DC=dfm,DC=biz,DC=pl and
> looking for deleted objects
> [2017/11/10 06:58:00.228111,  1]
> ../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
>   Doing a full scan on DC=DomainDnsZones,DC=dfm,DC=biz,DC=pl and
> looking for deleted objects
> [2017/11/10 06:58:00.236321,  1]
> ../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
>   Doing a full scan on CN=Configuration,DC=dfm,DC=biz,DC=pl and
> looking for deleted objects
> [2017/11/10 06:58:00.287988,  1]
> ../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
>   Doing a full scan on DC=dfm,DC=biz,DC=pl and looking for deleted
> objects [2017/11/10 07:59:55.958736,  1]
> ../librpc/rpc/dcerpc_util.c:227(dcerpc_pull_auth_trailer)
>   ../librpc/rpc/dcerpc_util.c:227: ERROR: pad length mismatch.
> Calculated 44 got 0
> [2017/11/10 08:07:18.247157,  1]
> ../librpc/rpc/dcerpc_util.c:227(dcerpc_pull_auth_trailer)
>   ../librpc/rpc/dcerpc_util.c:227: ERROR: pad length mismatch.
> Calculated 44 got 0
> [2017/11/10 08:18:51.026675,  1]
> ../librpc/rpc/dcerpc_util.c:227(dcerpc_pull_auth_trailer)
>   ../librpc/rpc/dcerpc_util.c:227: ERROR: pad length mismatch.
> Calculated 44 got 0
> [2017/11/10 08:18:51.026990,  1]
> ../librpc/rpc/dcerpc_util.c:227(dcerpc_pull_auth_trailer)
>   ../librpc/rpc/dcerpc_util.c:227: ERROR: pad length mismatch.
> Calculated 44 got 0
> [2017/11/10 09:26:40.073870,  1]
> ../librpc/rpc/dcerpc_util.c:227(dcerpc_pull_auth_trailer)
>   ../librpc/rpc/dcerpc_util.c:227: ERROR: pad length mismatch.
> Calculated 44 got 0
> [2017/11/10 09:26:40.074160,  1]
> ../librpc/rpc/dcerpc_util.c:227(dcerpc_pull_auth_trailer)
>   ../librpc/rpc/dcerpc_util.c:227: ERROR: pad length mismatch.
> Calculated 44 got 0
> [2017/11/10 09:46:51.945841,  0]
> ../source4/rpc_server/dnsserver/dcerpc_dnsserver.c:1085(dnsserver_query_zone)
> 
> I have also strange thing with SOA record. It is changing onself to
> DC2 and later during the day or next day back to DC1. Is it normal
> behaviour ? What do you think about that ?
> ---
> Mariusz
> Thanks
> 
> 
> 
> --
> Sent from:
> http://samba.2283325.n4.nabble.com/Samba-General-f2403709.html
> 

Can you post all your BIND named.conf files

Rowland