Windows 2000 sp2 with Terminal Services and Citrix 1.8 Metaframe as
'client'.
---
Problem starts at 40 to 50 users logged on. 7-9 shares mapped at login. Effect
is
'access denied' on accessing directories restricted by group access even
though
user has valid unix /etc/group access.
---
Machine SunFire 880
Samba 2.2.4
Configured with "-without-winbind"
Solaris 8 (release july 2001)
Gcc 3.0.1 from the companion package
Veritas Filesystem
Precompile adjustments done due to W2Ks 'feature' of just making one
connection
to the samba server thus making only one process per Terminal Server.
Smbd/conn.c: #define MAX_CONNECTIONS 128
to
Smbd/conn.c: #define MAX_CONNECTIONS 768
#> plimit 17155
17155: /usr/local/samba/bin/smbd -D
resource current maximum
time(seconds) unlimited unlimited
file(blocks) unlimited unlimited
data(kbytes) unlimited unlimited
stack(kbytes) 8192 unlimited
coredump(blocks) unlimited unlimited
nofiles(descriptors) 10010 10010
vmemory(kbytes) unlimited unlimited
/etc/system
rlim_fd_max = 4096
rlim_fd_cur = 2048
Log entries possibly related to this problem(?):
When we are in the period when the errors occurs and a user logs in we get this
in
the log:
Æ2002/05/08 11:30:03, 0Å lib/debug.c:reopen_logs(349)
Unable to open new log file /usr/local/samba/var/log.smbd: Too many open files
In lib/debug.c
if (append_log)
new_dbf = sys_fopen( debugf, "a" );
else
new_dbf = sys_fopen( debugf, "w" );
if (!new_dbf) æ
log_overflow = True;
DEBUG(0, ("Unable to open new log file %s: %sØn", debugf,
strerror(errno)));
log_overflow = False;
Which means that sys_fopen fails. I cant fnd any documentation on sys_fopen.
When users try to access shares where they would need their group-access rights
to get in there is a 'access denied' message. In the log (log level 3)
it shows:
Æ2002/05/13 12:52:49, 3Å smbd/sec_ctx.c:set_sec_ctx(319)
1 user groups:
661
This is wrong! There should be at least 10 group Ids in the list for that user.
The
group the user need to enter the directory is not in the list somehow!
Note that this error happens only with shares connected with the W2K TS
machine and then only after a certain amount of users have logged on.
Typically some sort of limit has been reached.. but which?
Our migration to W2K depends on this! *grins*
Regards
Per Kjetil Grotnes
---
IT-Seksjonen, Plan- og bygningsetaten, Oslo Kommune
Tlf: 22 66 26 61, Fax: 22 66 26 65
take me out of this List Allan Bertoluci Matsuyama Departamento de Tecnologia C-Events.com 3255-1955 allan@c-events.com ----- Original Message ----- From: "Per Kjetil Grotnes" <perkjetil.grotnes@pbe.oslo.kommune.no> To: <samba@lists.samba.org> Sent: Monday, May 13, 2002 8:19 AM Subject: [Samba] lib/debug.c:reopen_logs(349)> Windows 2000 sp2 with Terminal Services and Citrix 1.8 Metaframe as'client'.> > --- > Problem starts at 40 to 50 users logged on. 7-9 shares mapped at login.Effect is> 'access denied' on accessing directories restricted by group access eventhough> user has valid unix /etc/group access. > --- > > Machine SunFire 880 > Samba 2.2.4 > Configured with "-without-winbind" > Solaris 8 (release july 2001) > Gcc 3.0.1 from the companion package > Veritas Filesystem > > Precompile adjustments done due to W2Ks 'feature' of just making oneconnection> to the samba server thus making only one process per Terminal Server. > > Smbd/conn.c: #define MAX_CONNECTIONS 128 > to > Smbd/conn.c: #define MAX_CONNECTIONS 768 > > #> plimit 17155 > 17155: /usr/local/samba/bin/smbd -D > resource current maximum > time(seconds) unlimited unlimited > file(blocks) unlimited unlimited > data(kbytes) unlimited unlimited > stack(kbytes) 8192 unlimited > coredump(blocks) unlimited unlimited > nofiles(descriptors) 10010 10010 > vmemory(kbytes) unlimited unlimited > > /etc/system > rlim_fd_max = 4096 > rlim_fd_cur = 2048 > > Log entries possibly related to this problem(?): > > When we are in the period when the errors occurs and a user logs in we getthis in> the log: > ?2002/05/08 11:30:03, 0? lib/debug.c:reopen_logs(349) > Unable to open new log file /usr/local/samba/var/log.smbd: Too many openfiles> > In lib/debug.c > if (append_log) > new_dbf = sys_fopen( debugf, "a" ); > else > new_dbf = sys_fopen( debugf, "w" ); > if (!new_dbf) ? > log_overflow = True; > DEBUG(0, ("Unable to open new log file %s: %s?n", debugf,strerror(errno)));> log_overflow = False; > > Which means that sys_fopen fails. I cant fnd any documentation onsys_fopen.> > When users try to access shares where they would need their group-accessrights> to get in there is a 'access denied' message. In the log (log level 3) itshows:> > ?2002/05/13 12:52:49, 3? smbd/sec_ctx.c:set_sec_ctx(319) > 1 user groups: > 661 > > This is wrong! There should be at least 10 group Ids in the list for thatuser. The> group the user need to enter the directory is not in the list somehow! > > Note that this error happens only with shares connected with the W2K TS > machine and then only after a certain amount of users have logged on. > > Typically some sort of limit has been reached.. but which? > > Our migration to W2K depends on this! *grins* > > Regards > Per Kjetil Grotnes > > --- > IT-Seksjonen, Plan- og bygningsetaten, Oslo Kommune > Tlf: 22 66 26 61, Fax: 22 66 26 65 > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba
Have you tried to check the hard and soft limits for the maaximum number of file descriptors associated with the account which have all the shares doing the map? Per Kjetil Grotnes wrote:>Windows 2000 sp2 with Terminal Services and Citrix 1.8 Metaframe as 'client'. > >--- >Problem starts at 40 to 50 users logged on. 7-9 shares mapped at login. Effect is >'access denied' on accessing directories restricted by group access even though >user has valid unix /etc/group access. >--- > >Machine SunFire 880 >Samba 2.2.4 >Configured with "-without-winbind" >Solaris 8 (release july 2001) >Gcc 3.0.1 from the companion package >Veritas Filesystem > >Precompile adjustments done due to W2Ks 'feature' of just making one connection >to the samba server thus making only one process per Terminal Server. > >Smbd/conn.c: #define MAX_CONNECTIONS 128 >to >Smbd/conn.c: #define MAX_CONNECTIONS 768 > >#> plimit 17155 >17155: /usr/local/samba/bin/smbd -D > resource current maximum > time(seconds) unlimited unlimited > file(blocks) unlimited unlimited > data(kbytes) unlimited unlimited > stack(kbytes) 8192 unlimited > coredump(blocks) unlimited unlimited > nofiles(descriptors) 10010 10010 > vmemory(kbytes) unlimited unlimited > >/etc/system >rlim_fd_max = 4096 >rlim_fd_cur = 2048 > >Log entries possibly related to this problem(?): > >When we are in the period when the errors occurs and a user logs in we get this in >the log: >?2002/05/08 11:30:03, 0? lib/debug.c:reopen_logs(349) > Unable to open new log file /usr/local/samba/var/log.smbd: Too many open files > >In lib/debug.c > if (append_log) > new_dbf = sys_fopen( debugf, "a" ); > else > new_dbf = sys_fopen( debugf, "w" ); > if (!new_dbf) ? > log_overflow = True; >DEBUG(0, ("Unable to open new log file %s: %s?n", debugf, strerror(errno))); > log_overflow = False; > >Which means that sys_fopen fails. I cant fnd any documentation on sys_fopen. > >When users try to access shares where they would need their group-access rights >to get in there is a 'access denied' message. In the log (log level 3) it shows: > >?2002/05/13 12:52:49, 3? smbd/sec_ctx.c:set_sec_ctx(319) > 1 user groups: > 661 > >This is wrong! There should be at least 10 group Ids in the list for that user. The >group the user need to enter the directory is not in the list somehow! > >Note that this error happens only with shares connected with the W2K TS >machine and then only after a certain amount of users have logged on. > >Typically some sort of limit has been reached.. but which? > >Our migration to W2K depends on this! *grins* > >Regards >Per Kjetil Grotnes > >--- >IT-Seksjonen, Plan- og bygningsetaten, Oslo Kommune >Tlf: 22 66 26 61, Fax: 22 66 26 65 >-- Joseph Loo jloo@acm.org
> >Note that this error happens only with shares connected with the W2K TS > >machine and then only after a certain amount of users have logged on. > >Typically some sort of limit has been reached.. but which?> Have you tried to check the hard and soft limits for the maaximum number > of file descriptors associated with the account which have all the > shares doing the map?You mean this? /etc/system rlim_fd_max = 4096 rlim_fd_cur = 2048 I am not sure what you mean by "the account which have all the shares doing the map?". Other than the limits i wrote in the previous mail I am not sure what to adjust. Maybe some Veritas File System parameter? Or maybe I need to compile samba into a 64 bits application? Regards Per Kjetil Grotnes --- IT-Seksjonen, Plan- og bygningsetaten, Oslo Kommune Tlf: 22 66 26 61, Fax: 22 66 26 65