Shunichi Ikuta
2004-Apr-22 12:11 UTC
[Samba] internal error occurs while domain users try to access file servers
Hello experts, I have installed Samba3.0.1 for "Account Domain Controller(PDC)" and openLDAP2.2.6 for backend database which stores user accounts. There is Windows2000 Server for "Resource Domain controller" that has a trust relationship with Samba "Account Domain Controller". WINS service is running on "Resource Domain Controller" Windows2000 Server machine as well. A file server (Windows2000 Server) is prepared and its machine account is registered to "Resource Domain Controller". The problem I have is "domain users are not able to access the file server machine(Windows 2000 Server)". This file server is NOT Samba, it is Windows 2000 Server. Below is the description of the Samba + LDAP environment. == Operation System(OS) and installed software description == Machine No 1. OS: Redhat Linux 9 Software: Samba3.0.1 Use: Samba PDC Account Domain Controller Machine No 2. OS: Solaris 8 Software: OpenLDAP2.2.6 Use: user and machine account directory server Machine No 3. OS: Windows 2000 Server Use: Resource Domain Controller Machine No 4. OS: Windows 2000 Server Use: Resource Domain Controller & WINS Server Machine No 5. OS: Windows 2000 Server Use: File Server Machine No 6. OS: Windows 2000 Pro Use: Client machine for domain users == Windows Domain Model description ==== 1. The model is "Single Master Domain Model" 2. "Resource Domain" trusts "Account Domain" (Established a trust relationship) 3. Machine accounts for file server(Machine No 5) and client(Machine No 6) are registered to "Resource Domain" 4. A "Domain User" is registered to "Account Domain Controller" == Other information =================== 1. The value of "Primary WINS server" for all the machines is set to Machine No 4. The value of the attribute, "wins server" in smb.conf for Samba is also set to Machine No 4. == Problem description ================ The problem, which I have with above environment, is that an error occurs when domain users try to access file server machine. Because of that error, domain users are not able to access to file server. Following is the procedure for reproducing the problem. Step 1. Log on a "Domain User" to "Account Domain(Samba PDC)" using the client machine(Machine No 6) Step 2. Open "Explorer". Go to "My Network Places" -> "Entire Network" -> "Microsoft Windows Network" -> "Resource Domain". Step 3. You will see the file server machine icon(Machine No 5). Double click the icon to browse its shared directories and files. Stop 4. Problem occurs! Unable to access the file server (Machine No 5) and an error dialog pops up. The message of the error dialog was "Unable to access machine No 5. Windows 2000 Internal Error has Occurred" The problem occurs irregularly which makes me difficult to determine the cause of the problem. == Samba Configuration - smb.conf (Some parameters cannot be displayed) ===== # Samba config file created using SWAT # from 172.XXX.XXX.XXX. # Date: YYYY/MM/DD hh:mm:ss # Global parameters [global] security = user encrypt passwords = Yes dos charset = UTF8 display charset = UTF8 workgroup = (TEST DOMAIN NAME) passdb backend = ldapsam:"ldap://(LDAP SERVER)" smbpasswd ldap passwd sync = Yes ldap ssl = start tls log level = 100 log file = /var/samba/log/smb.log.%m logon path logon home os level = 32 domain logons = Yes domain master = Yes preferred master = Yes local master = Yes wins support = no wins server = 172.XXX.XXX.XXX # IPAddress for WINS Server ldap suffix = dc=XXX,dc=XXX ldap machine suffix = ou=People ldap user suffix = ou=People ldap group suffix = ou=Group ldap admin dn = cn=Manager,dc=XXX,dc=XXX browseable = no writeable = no guest account = guest deadtime = 15 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 lm announce = Yes [share] path = /var/samba/share browseable = yes writeable = yes guest ok = no [netlogon] path = /var/samba/netlogon browseable = yes writable = yes guest ok = no share modes = yes [homes] path = /var/samba/homes browseable = yes writeable = yes guest ok = no [profiles] path = /var/samba/profiles browseable = no writeable = no guest ok = no == Log ============= smb log for Resource Domain Controller $B!J(B/var/samba/log/smb.log.machine_no_3$B!K(B *********************************************************************** [YYYY/MM/DD 09:10:14, 5] rpc_parse/parse_prs.c:prs_ntstatus(665) 0194 status : NT_STATUS_OK [YYYY/MM/DD 09:10:14, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549) api_rpcTNP: called NETLOGON successfully [YYYY/MM/DD 09:10:14, 10] rpc_server/srv_pipe.c:api_rpcTNP(1560) api_rpcTNP: rpc input buffer underflow (parse error?) [YYYY/MM/DD 09:10:14, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 0172 : 00 00 8a e3 13 71 02 f4 36 71 02 40 28 00 44 06 0e 00 60 cb 60 0d [YYYY/MM/DD 09:10:14, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 4906 [YYYY/MM/DD 09:10:14, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 432 [YYYY/MM/DD 09:10:14, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=7778 nwritten=448 smb log for Resource Domain Controller $B!J(B/var/samba/log/smb.log.machine_no_3$B!K(B *********************************************************************** [YYYY/MM/DD 09:10:13, 5] passdb/secrets.c:secrets_fetch_trusted_domain_password (299) secrets_fetch failed! [YYYY/MM/DD 09:10:13, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (999, 514) - sec_ctx_stack_ndx = 0 [YYYY/MM/DD 09:10:13, 10] lib/gencache.c:gencache_get(286) Cache entry with key = TDOM/Account_Domain couldn't be found [YYYY/MM/DD 09:10:13, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(172) no entry for trusted domain Account_Domain found. [YYYY/MM/DD 09:10:13, 5] auth/auth_util.c:make_user_info(132) attempting to make a user_info for Domain_User (Domain_User) [YYYY/MM/DD 09:10:13, 5] auth/auth_util.c:make_user_info(142) making strings for Domain_User's user_info struct [YYYY/MM/DD 09:10:13, 5] auth/auth_util.c:make_user_info(184) making blobs for Domain_User's user_info struct === Questions ========== Q1) It there any possibility that the error log above could be the cause of the problem which I have described ? I would like to know whether the error log relates to my problem or not. Q2) Is there any reported bugs that might be causing the problem which I have described ? (Is there any possible bug causing a problem accessing file server from windows client machine ?) Q3) Although I tried to explain the problem in detail but the description above could be vague and is not so specific. Is there anything I can do to provide more valuable information to make this problem more specific and accurate ? (Is there anything I can do to break down this problem ?) Q4) What do these error log messages below mean and how do they possibly occur ? Error message 1 - api_rpcTNP: rpc input buffer underflow (parse error?) Error message 2 - secrets_fetch failed! Error message 3 - no entry for trusted domain Account_Domain found. Any advice or comment will be appreciated.