samba - Nov 2008 - Why does the server want to connect to a client

Hi,

I have 5 of 140 Windows XP SP2/SP3 machines that make problems when printing. 
The client open the printer dialog and it takes a long time (up to 1 minute) 
before it appears. Printing is slow, too. Meanwhile I see the following 
messages (repeating several times) in the client log:

[2008/11/21 08:17:28, 1] lib/util_sock.c:open_socket_out(888)
   timeout connecting to 10.1.0.253:445
[2008/11/21 08:17:37, 1] lib/util_sock.c:open_socket_out(888)
   timeout connecting to 10.1.0.253:139
[2008/11/21 08:17:37, 1] libsmb/cliconnect.c:cli_connect(1505)
   Error connecting to 10.1.0.253 (Operation already in progress)
[2008/11/21 08:17:37, 1] libsmb/cliconnect.c:cli_start_connection(1568)
   cli_start_connection: failed to connect to IT-09<20> (10.1.0.253).
Error
NT_STATUS_ACCESS_DENIED

Why does the server tries to open a connection to these clients? On one of the 
5 PCs if I disable the XP firewall, the problem disappers. The log entries 
above are from a client with enabled XP firewall (unchanged standard 
settings), but there are no changes when I disable it. Some of problem clients 
only show the "timeout connection to..." messages.

I used samba 3.0.22 until yesterday, but the problem still exist after 
upgrading to 3.0.32.

Any suggestions?

Regards
Marc

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Marc Muehlfeld wrote:
> Hi,
> 
> I have 5 of 140 Windows XP SP2/SP3 machines that make problems when
> printing. The client open the printer dialog and it takes a long time
> (up to 1 minute) before it appears. Printing is slow, too. Meanwhile I
> see the following messages (repeating several times) in the client log:
> 
> [2008/11/21 08:17:28, 1] lib/util_sock.c:open_socket_out(888)
>   timeout connecting to 10.1.0.253:445
> [2008/11/21 08:17:37, 1] lib/util_sock.c:open_socket_out(888)
>   timeout connecting to 10.1.0.253:139
> [2008/11/21 08:17:37, 1] libsmb/cliconnect.c:cli_connect(1505)
>   Error connecting to 10.1.0.253 (Operation already in progress)
> [2008/11/21 08:17:37, 1] libsmb/cliconnect.c:cli_start_connection(1568)
>   cli_start_connection: failed to connect to IT-09<20> (10.1.0.253).
> Error NT_STATUS_ACCESS_DENIED
> 
> Why does the server tries to open a connection to these clients? On one
> of the 5 PCs if I disable the XP firewall, the problem disappers. The
> log entries above are from a client with enabled XP firewall (unchanged
> standard settings), but there are no changes when I disable it. Some of
> problem clients only show the "timeout connection to..."
messages.
> 
> I used samba 3.0.22 until yesterday, but the problem still exist after
> upgrading to 3.0.32.
It's how MS designed the WINdows print notification mechanism.
Set your firewall to reject instead of drop those packets.




cheers, jerry
- --
====================================================================Samba       
------- http://www.samba.org
Likewise Software          ---------  http://www.likewisesoftware.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJJvktIR7qMdg1EfYRAkCqAKDPXNU0bHAKMPpf0pYKnv48SFTm9ACg4zpv
rL7Wd7dJAouz8vJbSwrnF/s=oLf8
-----END PGP SIGNATURE-----

On Fri, Nov 21, 2008 at 2:40 AM, Marc Muehlfeld
<Marc.Muehlfeld@medizinische-genetik.de> wrote:
> Hi,
>
> I have 5 of 140 Windows XP SP2/SP3 machines that make problems when
> printing. The client open the printer dialog and it takes a long time (up
to
> 1 minute) before it appears. Printing is slow, too. Meanwhile I see the
> following messages (repeating several times) in the client log:
>
When this delay happens is there what seems like a very large amount
of packets being sent by the windows machines that exhibit these
problems?

John