On 18/12/14 16:19, Germ van Eck wrote:> Not sure about the high CPU load, but you have the [netlogon] share > twice in your smb.conf. Your first matches mine, have you added the > second yourself? > The second one looks weird with 2 path definitions. > Cj Tibbetts schreef op do 18-12-2014 om 08:59 [-0700]: >> New to linux and new to Samba so any direction in troubleshooting would be >> helpful. Here is what I have so far. >> >> Within a half an hour of a reboot of the server my cpu reaches high numbers >> and becomes slow to respond on all actions. With my limited understanding I >> have used vmstat to observe the system. I noticed is that the numbers of >> forks grows from 1-2k to 43k within 30 minutes after reboot. I saw a dns >> error in a log file at one point but now I don?t remember where. I am >> running samba 4.1.9 compiled with internal dns. I have 2 other DC?s that >> are not properly replicating and a third that is completely silent even >> when the FSMO is crashing. Here are some logs and smb.conf to get started. >> >> [2014/12/16 07:47:59.925907, 2] >> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >> >> Not authoritative for 'cdn.beanstock.com', forwarding >> >> [2014/12/16 07:47:59.929961, 2] >> ../source4/dns_server/dns_update.c:764(dns_server_process_update) >> >> Got a dns update request. >> >> [2014/12/16 07:47:59.931044, 2] >> ../source4/dns_server/dns_update.c:721(dns_update_allowed) >> >> Update not allowed for unsigned packet. >> >> [2014/12/16 07:48:00.197341, 1] >> ../source4/dns_server/dns_query.c:526(handle_tkey) >> >> Tkey handshake completed >> >> [2014/12/16 07:48:00.198457, 2] >> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >> >> Not authoritative for 'helix.beanstock.co', forwarding >> >> [2014/12/16 07:48:00.199562, 2] >> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >> >> Not authoritative for 'loadm.exelator.com', forwarding >> >> [2014/12/16 07:48:00.199884, 2] >> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >> >> Not authoritative for 'mpp.vindicosuite.com', forwarding >> >> [2014/12/16 07:48:02.128537, 3] >> ../lib/ldb-samba/ldb_wrap.c:320(ldb_wrap_connect) >> >> ldb_wrap open of secrets.ldb >> >> [2014/12/16 07:48:02.284734, 2] >> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >> >> Not authoritative for 'p.raasnet.com', forwarding >> >> [2014/12/16 07:48:02.285459, 3] >> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >> >> Terminating connection - 'dns_tcp_call_loop: tstream_read_pdu_blob_recv() >> - NT_STATUS_CONNECTION_DISCONNECTED' >> >> [2014/12/16 07:48:02.285767, 3] >> ../source4/smbd/process_single.c:114(single_terminate) >> >> single_terminate: reason[dns_tcp_call_loop: tstream_read_pdu_blob_recv() >> - NT_STATUS_CONNECTION_DISCONNECTED] >> >> [2014/12/16 07:48:02.286168, 2] >> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >> >> Not authoritative for 'adadvisor.net', forwarding >> >> [2014/12/16 07:48:02.286615, 2] >> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >> >> Not authoritative for 'sync.teads.tv', forwarding >> >> [2014/12/16 07:48:03.535189, 0] >> ../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect) >> >> Failed to connect host 10.2.10.10 on port 135 - >> NT_STATUS_CONNECTION_REFUSED >> >> [2014/12/16 07:48:03.599416, 0] >> ../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket) >> >> Failed to connect host 10.2.10.10 (75566c2f-274e-485c-809a-b63fd5a29b11._ >> msdcs.ad.ha.net) on port 135 - NT_STATUS_CONNECTION_REFUSED. >> >> [2014/12/16 07:48:03.862288, 2] >> ../source4/dns_server/dns_update.c:764(dns_server_process_update) >> >> Got a dns update request. >> >> [2014/12/16 07:48:03.863345, 2] >> ../source4/dns_server/dns_update.c:721(dns_update_allowed) >> >> Update not allowed for unsigned packet. >> >> [2014/12/16 07:48:04.324020, 1] >> ../source4/dns_server/dns_query.c:526(handle_tkey) >> >> Tkey handshake completed >> >> [2014/12/16 07:48:04.770196, 0] >> ../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect) >> >> Failed to connect host 10.2.10.10 on port 135 - >> NT_STATUS_CONNECTION_REFUSED >> >> [2014/12/16 07:48:04.770671, 0] >> ../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket) >> >> Failed to connect host 10.2.10.10 (75566c2f-274e-485c-809a-b63fd5a29b11._ >> msdcs.ad.ha.net) on port 135 - NT_STATUS_CONNECTION_REFUSED. >> >> [2014/12/16 07:48:05.781269, 2] >> ../source4/dns_server/dns_update.c:764(dns_server_process_update) >> >> Got a dns update request. >> >> [2014/12/16 07:48:08.091355, 3] >> ../libcli/auth/schannel_state_tdb.c:181(schannel_fetch_session_key_tdb) >> >> schannel_fetch_session_key_tdb: restored schannel info key >> SECRETS/SCHANNEL/HASERVER1 >> >> [2014/12/16 07:48:08.091672, 3] >> ../source4/auth/ntlm/auth.c:270(auth_check_password_send) >> >> auth_check_password_send: Checking password for unmapped user >> [A0218]\[Teacher]@[A0218] >> >> auth_check_password_send: mapped user is: [AD]\[Teacher]@[A0218] >> >> [2014/12/16 07:48:08.094254, 3] >> ../source4/auth/ntlm/auth_sam.c:61(authsam_search_account) >> >> sam_search_user: Couldn't find user [Teacher] in samdb, under >> DC=ad,DC=ha,DC=net >> >> [2014/12/16 07:48:08.094435, 2] >> ../source4/auth/ntlm/auth.c:420(auth_check_password_recv) >> >> auth_check_password_recv: sam_ignoredomain authentication for user >> [AD\Teacher] FAILED with error NT_STATUS_NO_SUCH_USER >> >> [2014/12/16 07:48:08.095864, 3] >> ../source4/rpc_server/dcerpc_server.c:963(dcesrv_request) >> >> [2014/12/16 07:48:08.376870, 2] >> ../source4/dns_server/dns_update.c:398(handle_one_update) >> >> Looking at record: >> >> [2014/12/16 07:48:08.377765, 2] >> ../source4/dns_server/dns_update.c:399(handle_one_update) >> >> [2014/12/16 07:48:08.377821, 1] ../librpc/ndr/ndr.c:296(ndr_print_debug) >> >> discard_const(update): struct dns_res_rec >> >> name : 'A3003.ad.ha.net' >> >> rr_type : DNS_QTYPE_A (0x1) >> >> rr_class : DNS_QCLASS_ANY (0xFF) >> >> ttl : 0x00000000 (0) >> >> length : 0x0000 (0) >> >> rdata : union dns_rdata(case 0x1) >> >> ipv4_record : (null) >> >> unexpected : DATA_BLOB length=0 >> >> [2014/12/16 07:48:08.384693, 0] >> ../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect) >> >> Failed to connect host 10.2.10.10 on port 135 - >> NT_STATUS_CONNECTION_REFUSED >> >> [2014/12/16 07:48:08.385357, 0] >> ../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket) >> >> Failed to connect host 10.2.10.10 (75566c2f-274e-485c-809a-b63fd5a29b11._ >> msdcs.ad.ha.net) on port 135 - NT_STATUS_CONNECTION_REFUSED. >> >> [2014/12/16 07:48:08.704073, 3] >> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >> >> Terminating connection - 'ldapsrv_call_loop: tstream_read_pdu_blob_recv() >> - NT_STATUS_CONNECTION_DISCONNECTED' >> >> [2014/12/16 07:48:08.704509, 3] >> ../source4/smbd/process_single.c:114(single_terminate) >> >> single_terminate: reason[ldapsrv_call_loop: tstream_read_pdu_blob_recv() >> - NT_STATUS_CONNECTION_DISCONNECTED] >> >> [2014/12/16 07:48:09.211098, 3] >> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >> >> Terminating connection - 'ldapsrv_call_loop: tstream_read_pdu_blob_recv() >> - NT_STATUS_CONNECTION_DISCONNECTED' >> >> [2014/12/16 07:48:09.211753, 3] >> ../source4/smbd/process_single.c:114(single_terminate) >> >> single_terminate: reason[ldapsrv_call_loop: tstream_read_pdu_blob_recv() >> - NT_STATUS_CONNECTION_DISCONNECTED] >> >> [2014/12/16 07:48:09.654492, 3] >> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >> >> Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED' >> >> [2014/12/16 07:48:09.655160, 3] >> ../source4/smbd/process_single.c:114(single_terminate) >> >> single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED] >> >> [2014/12/16 07:48:09.655573, 3] >> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >> >> Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED' >> >> [2014/12/16 07:48:09.655906, 3] >> ../source4/smbd/process_single.c:114(single_terminate) >> >> single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED] >> >> [2014/12/16 07:48:10.979974, 0] >> ../source4/dsdb/dns/dns_update.c:294(dnsupdate_nameupdate_done) >> >> ../source4/dsdb/dns/dns_update.c:294: Failed DNS update - >> NT_STATUS_IO_TIMEOUT >> >> [2014/12/16 07:48:12.915321, 2] >> ../source4/dns_server/dns_update.c:398(handle_one_update) >> >> Looking at record: >> >> [2014/12/16 07:48:12.915515, 2] >> ../source4/dns_server/dns_update.c:399(handle_one_update) >> >> [2014/12/16 07:48:12.915557, 1] ../librpc/ndr/ndr.c:296(ndr_print_debug) >> >> discard_const(update): struct dns_res_rec >> >> name : 'A3003.ad.ha.net' >> >> rr_type : DNS_QTYPE_A (0x1) >> >> rr_class : DNS_QCLASS_IN (0x1) >> >> ttl : 0x000004b0 (1200) >> >> length : 0x0004 (4) >> >> rdata : union dns_rdata(case 0x1) >> >> ipv4_record : 10.3.12.100 >> >> unexpected : DATA_BLOB length=0 >> >> >> >> smb.conf >> >> # Global parameters >> >> [global] >> >> workgroup = AD >> >> realm = AD.HA.NET >> >> netbios name = HAM1 >> >> server role = active directory domain controller >> >> dns forwarder = 8.8.8.8 >> >> # dns forwarder = 10.1.254.2 >> >> idmap_ldb:use rfc2307 = yes >> >> # added 20141215 to quash printer status errors >> >> printing = bsd >> >> printcap name = /dev/null >> >> log level = 3 >> >> >> >> [netlogon] >> >> path = /usr/local/samba/var/locks/sysvol/ad.ha.net/scripts >> >> read only = No >> >> >> >> [sysvol] >> >> path = /usr/local/samba/var/locks/sysvol el = 3 read only = No >> [netlogon] >> >> path = /usr/local/samba/var/locks/sysvol/ad.ha.net/scripts >> >> read only = No [sysvol] >> >> path = /usr/local/samba/var/locks/sysvol >> >> read only = No >He has also got [sysvol] twice and just what is 'el =3' ? either it is a very bad 'cut & paste' error or he needs to remove the extra shares. Rowland
On Thu, Dec 18, 2014 at 10:39 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: > > On 18/12/14 16:19, Germ van Eck wrote: > >> Not sure about the high CPU load, but you have the [netlogon] share >> twice in your smb.conf. Your first matches mine, have you added the >> second yourself? >> The second one looks weird with 2 path definitions. >> Cj Tibbetts schreef op do 18-12-2014 om 08:59 [-0700]: >> >>> New to linux and new to Samba so any direction in troubleshooting would >>> be >>> helpful. Here is what I have so far. >>> >>> Within a half an hour of a reboot of the server my cpu reaches high >>> numbers >>> and becomes slow to respond on all actions. With my limited >>> understanding I >>> have used vmstat to observe the system. I noticed is that the numbers of >>> forks grows from 1-2k to 43k within 30 minutes after reboot. I saw a dns >>> error in a log file at one point but now I don?t remember where. I am >>> running samba 4.1.9 compiled with internal dns. I have 2 other DC?s that >>> are not properly replicating and a third that is completely silent even >>> when the FSMO is crashing. Here are some logs and smb.conf to get >>> started. >>> >>> [2014/12/16 07:47:59.925907, 2] >>> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>> >>> Not authoritative for 'cdn.beanstock.com', forwarding >>> >>> [2014/12/16 07:47:59.929961, 2] >>> ../source4/dns_server/dns_update.c:764(dns_server_process_update) >>> >>> Got a dns update request. >>> >>> [2014/12/16 07:47:59.931044, 2] >>> ../source4/dns_server/dns_update.c:721(dns_update_allowed) >>> >>> Update not allowed for unsigned packet. >>> >>> [2014/12/16 07:48:00.197341, 1] >>> ../source4/dns_server/dns_query.c:526(handle_tkey) >>> >>> Tkey handshake completed >>> >>> [2014/12/16 07:48:00.198457, 2] >>> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>> >>> Not authoritative for 'helix.beanstock.co', forwarding >>> >>> [2014/12/16 07:48:00.199562, 2] >>> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>> >>> Not authoritative for 'loadm.exelator.com', forwarding >>> >>> [2014/12/16 07:48:00.199884, 2] >>> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>> >>> Not authoritative for 'mpp.vindicosuite.com', forwarding >>> >>> [2014/12/16 07:48:02.128537, 3] >>> ../lib/ldb-samba/ldb_wrap.c:320(ldb_wrap_connect) >>> >>> ldb_wrap open of secrets.ldb >>> >>> [2014/12/16 07:48:02.284734, 2] >>> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>> >>> Not authoritative for 'p.raasnet.com', forwarding >>> >>> [2014/12/16 07:48:02.285459, 3] >>> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >>> >>> Terminating connection - 'dns_tcp_call_loop: >>> tstream_read_pdu_blob_recv() >>> - NT_STATUS_CONNECTION_DISCONNECTED' >>> >>> [2014/12/16 07:48:02.285767, 3] >>> ../source4/smbd/process_single.c:114(single_terminate) >>> >>> single_terminate: reason[dns_tcp_call_loop: >>> tstream_read_pdu_blob_recv() >>> - NT_STATUS_CONNECTION_DISCONNECTED] >>> >>> [2014/12/16 07:48:02.286168, 2] >>> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>> >>> Not authoritative for 'adadvisor.net', forwarding >>> >>> [2014/12/16 07:48:02.286615, 2] >>> ../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>> >>> Not authoritative for 'sync.teads.tv', forwarding >>> >>> [2014/12/16 07:48:03.535189, 0] >>> ../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect) >>> >>> Failed to connect host 10.2.10.10 on port 135 - >>> NT_STATUS_CONNECTION_REFUSED >>> >>> [2014/12/16 07:48:03.599416, 0] >>> ../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket) >>> >>> Failed to connect host 10.2.10.10 (75566c2f-274e-485c-809a- >>> b63fd5a29b11._ >>> msdcs.ad.ha.net) on port 135 - NT_STATUS_CONNECTION_REFUSED. >>> >>> [2014/12/16 07:48:03.862288, 2] >>> ../source4/dns_server/dns_update.c:764(dns_server_process_update) >>> >>> Got a dns update request. >>> >>> [2014/12/16 07:48:03.863345, 2] >>> ../source4/dns_server/dns_update.c:721(dns_update_allowed) >>> >>> Update not allowed for unsigned packet. >>> >>> [2014/12/16 07:48:04.324020, 1] >>> ../source4/dns_server/dns_query.c:526(handle_tkey) >>> >>> Tkey handshake completed >>> >>> [2014/12/16 07:48:04.770196, 0] >>> ../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect) >>> >>> Failed to connect host 10.2.10.10 on port 135 - >>> NT_STATUS_CONNECTION_REFUSED >>> >>> [2014/12/16 07:48:04.770671, 0] >>> ../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket) >>> >>> Failed to connect host 10.2.10.10 (75566c2f-274e-485c-809a- >>> b63fd5a29b11._ >>> msdcs.ad.ha.net) on port 135 - NT_STATUS_CONNECTION_REFUSED. >>> >>> [2014/12/16 07:48:05.781269, 2] >>> ../source4/dns_server/dns_update.c:764(dns_server_process_update) >>> >>> Got a dns update request. >>> >>> [2014/12/16 07:48:08.091355, 3] >>> ../libcli/auth/schannel_state_tdb.c:181(schannel_fetch_session_key_tdb) >>> >>> schannel_fetch_session_key_tdb: restored schannel info key >>> SECRETS/SCHANNEL/HASERVER1 >>> >>> [2014/12/16 07:48:08.091672, 3] >>> ../source4/auth/ntlm/auth.c:270(auth_check_password_send) >>> >>> auth_check_password_send: Checking password for unmapped user >>> [A0218]\[Teacher]@[A0218] >>> >>> auth_check_password_send: mapped user is: [AD]\[Teacher]@[A0218] >>> >>> [2014/12/16 07:48:08.094254, 3] >>> ../source4/auth/ntlm/auth_sam.c:61(authsam_search_account) >>> >>> sam_search_user: Couldn't find user [Teacher] in samdb, under >>> DC=ad,DC=ha,DC=net >>> >>> [2014/12/16 07:48:08.094435, 2] >>> ../source4/auth/ntlm/auth.c:420(auth_check_password_recv) >>> >>> auth_check_password_recv: sam_ignoredomain authentication for user >>> [AD\Teacher] FAILED with error NT_STATUS_NO_SUCH_USER >>> >>> [2014/12/16 07:48:08.095864, 3] >>> ../source4/rpc_server/dcerpc_server.c:963(dcesrv_request) >>> >>> [2014/12/16 07:48:08.376870, 2] >>> ../source4/dns_server/dns_update.c:398(handle_one_update) >>> >>> Looking at record: >>> >>> [2014/12/16 07:48:08.377765, 2] >>> ../source4/dns_server/dns_update.c:399(handle_one_update) >>> >>> [2014/12/16 07:48:08.377821, 1] ../librpc/ndr/ndr.c:296(ndr_ >>> print_debug) >>> >>> discard_const(update): struct dns_res_rec >>> >>> name : 'A3003.ad.ha.net' >>> >>> rr_type : DNS_QTYPE_A (0x1) >>> >>> rr_class : DNS_QCLASS_ANY (0xFF) >>> >>> ttl : 0x00000000 (0) >>> >>> length : 0x0000 (0) >>> >>> rdata : union dns_rdata(case 0x1) >>> >>> ipv4_record : (null) >>> >>> unexpected : DATA_BLOB length=0 >>> >>> [2014/12/16 07:48:08.384693, 0] >>> ../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect) >>> >>> Failed to connect host 10.2.10.10 on port 135 - >>> NT_STATUS_CONNECTION_REFUSED >>> >>> [2014/12/16 07:48:08.385357, 0] >>> ../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket) >>> >>> Failed to connect host 10.2.10.10 (75566c2f-274e-485c-809a- >>> b63fd5a29b11._ >>> msdcs.ad.ha.net) on port 135 - NT_STATUS_CONNECTION_REFUSED. >>> >>> [2014/12/16 07:48:08.704073, 3] >>> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >>> >>> Terminating connection - 'ldapsrv_call_loop: >>> tstream_read_pdu_blob_recv() >>> - NT_STATUS_CONNECTION_DISCONNECTED' >>> >>> [2014/12/16 07:48:08.704509, 3] >>> ../source4/smbd/process_single.c:114(single_terminate) >>> >>> single_terminate: reason[ldapsrv_call_loop: >>> tstream_read_pdu_blob_recv() >>> - NT_STATUS_CONNECTION_DISCONNECTED] >>> >>> [2014/12/16 07:48:09.211098, 3] >>> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >>> >>> Terminating connection - 'ldapsrv_call_loop: >>> tstream_read_pdu_blob_recv() >>> - NT_STATUS_CONNECTION_DISCONNECTED' >>> >>> [2014/12/16 07:48:09.211753, 3] >>> ../source4/smbd/process_single.c:114(single_terminate) >>> >>> single_terminate: reason[ldapsrv_call_loop: >>> tstream_read_pdu_blob_recv() >>> - NT_STATUS_CONNECTION_DISCONNECTED] >>> >>> [2014/12/16 07:48:09.654492, 3] >>> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >>> >>> Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED' >>> >>> [2014/12/16 07:48:09.655160, 3] >>> ../source4/smbd/process_single.c:114(single_terminate) >>> >>> single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED] >>> >>> [2014/12/16 07:48:09.655573, 3] >>> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >>> >>> Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED' >>> >>> [2014/12/16 07:48:09.655906, 3] >>> ../source4/smbd/process_single.c:114(single_terminate) >>> >>> single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED] >>> >>> [2014/12/16 07:48:10.979974, 0] >>> ../source4/dsdb/dns/dns_update.c:294(dnsupdate_nameupdate_done) >>> >>> ../source4/dsdb/dns/dns_update.c:294: Failed DNS update - >>> NT_STATUS_IO_TIMEOUT >>> >>> [2014/12/16 07:48:12.915321, 2] >>> ../source4/dns_server/dns_update.c:398(handle_one_update) >>> >>> Looking at record: >>> >>> [2014/12/16 07:48:12.915515, 2] >>> ../source4/dns_server/dns_update.c:399(handle_one_update) >>> >>> [2014/12/16 07:48:12.915557, 1] ../librpc/ndr/ndr.c:296(ndr_ >>> print_debug) >>> >>> discard_const(update): struct dns_res_rec >>> >>> name : 'A3003.ad.ha.net' >>> >>> rr_type : DNS_QTYPE_A (0x1) >>> >>> rr_class : DNS_QCLASS_IN (0x1) >>> >>> ttl : 0x000004b0 (1200) >>> >>> length : 0x0004 (4) >>> >>> rdata : union dns_rdata(case 0x1) >>> >>> ipv4_record : 10.3.12.100 >>> >>> unexpected : DATA_BLOB length=0 >>> >>> >>> >>> smb.conf >>> >>> # Global parameters >>> >>> [global] >>> >>> workgroup = AD >>> >>> realm = AD.HA.NET >>> >>> netbios name = HAM1 >>> >>> server role = active directory domain controller >>> >>> dns forwarder = 8.8.8.8 >>> >>> # dns forwarder = 10.1.254.2 >>> >>> idmap_ldb:use rfc2307 = yes >>> >>> # added 20141215 to quash printer status errors >>> >>> printing = bsd >>> >>> printcap name = /dev/null >>> >>> log level = 3 >>> >>> >>> >>> [netlogon] >>> >>> path = /usr/local/samba/var/locks/sysvol/ad.ha.net/scripts >>> >>> read only = No >>> >>> >>> >>> [sysvol] >>> >>> path = /usr/local/samba/var/locks/sysvol el = 3 read only = No >>> [netlogon] >>> >>> path = /usr/local/samba/var/locks/sysvol/ad.ha.net/scripts >>> >>> read only = No [sysvol] >>> >>> path = /usr/local/samba/var/locks/sysvol >>> >>> read only = No >>> >> >> > He has also got [sysvol] twice and just what is 'el =3' ? > > either it is a very bad 'cut & paste' error or he needs to remove the > extra shares. > > Rowland > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >CJ, can you give us the exact output from "samba-tool testparm --suppress-prompt"? You mentioned you were having dns issues, does "samba-tool dbcheck --cross-ncs" show any errors? I'd also be interested in seeing the output from ps_mem.py ran every 5 mins. You can do this by downloading the script, doing crontab -e, and putting in a line like */5 * * * * date >> /root/memusage.txt && /path/to/ps_mem.py | grep "samba\|mbd" >> /root/memusage.txt && echo -e "\n\n\n" >> /root/memusage.txt You can download ps_mem at https://raw.githubusercontent.com/pixelb/ps_mem/master/ps_mem.py This will give you a file named /root/memusage.txt and it will add lines every 5 mins with the total memory usage of samba. Ricky
>>> I am running samba 4.1.9 compiled with internal dns.Please upgrade first to the latest samba version before be can investigate whats going on. The lastest is 4.1.14 now and lots have happend in betweeen. Greetz, Louis>-----Oorspronkelijk bericht----- >Van: ricky.nance at gmail.com >[mailto:samba-bounces at lists.samba.org] Namens Ricky Nance >Verzonden: donderdag 18 december 2014 23:48 >Aan: Rowland Penny >CC: samba at lists.samba.org >Onderwerp: Re: [Samba] Samba4 on Ubuntu server > >On Thu, Dec 18, 2014 at 10:39 AM, Rowland Penny ><rowlandpenny at googlemail.com >> wrote: >> >> On 18/12/14 16:19, Germ van Eck wrote: >> >>> Not sure about the high CPU load, but you have the [netlogon] share >>> twice in your smb.conf. Your first matches mine, have you added the >>> second yourself? >>> The second one looks weird with 2 path definitions. >>> Cj Tibbetts schreef op do 18-12-2014 om 08:59 [-0700]: >>> >>>> New to linux and new to Samba so any direction in >troubleshooting would >>>> be >>>> helpful. Here is what I have so far. >>>> >>>> Within a half an hour of a reboot of the server my cpu reaches high >>>> numbers >>>> and becomes slow to respond on all actions. With my limited >>>> understanding I >>>> have used vmstat to observe the system. I noticed is that >the numbers of >>>> forks grows from 1-2k to 43k within 30 minutes after >reboot. I saw a dns >>>> error in a log file at one point but now I don?t remember >where. I am >>>> running samba 4.1.9 compiled with internal dns. I have 2 >other DC?s that >>>> are not properly replicating and a third that is >completely silent even >>>> when the FSMO is crashing. Here are some logs and smb.conf to get >>>> started. >>>> >>>> [2014/12/16 07:47:59.925907, 2] >>>> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>>> >>>> Not authoritative for 'cdn.beanstock.com', forwarding >>>> >>>> [2014/12/16 07:47:59.929961, 2] >>>> ../source4/dns_server/dns_update.c:764(dns_server_process_update) >>>> >>>> Got a dns update request. >>>> >>>> [2014/12/16 07:47:59.931044, 2] >>>> ../source4/dns_server/dns_update.c:721(dns_update_allowed) >>>> >>>> Update not allowed for unsigned packet. >>>> >>>> [2014/12/16 07:48:00.197341, 1] >>>> ../source4/dns_server/dns_query.c:526(handle_tkey) >>>> >>>> Tkey handshake completed >>>> >>>> [2014/12/16 07:48:00.198457, 2] >>>> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>>> >>>> Not authoritative for 'helix.beanstock.co', forwarding >>>> >>>> [2014/12/16 07:48:00.199562, 2] >>>> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>>> >>>> Not authoritative for 'loadm.exelator.com', forwarding >>>> >>>> [2014/12/16 07:48:00.199884, 2] >>>> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>>> >>>> Not authoritative for 'mpp.vindicosuite.com', forwarding >>>> >>>> [2014/12/16 07:48:02.128537, 3] >>>> ../lib/ldb-samba/ldb_wrap.c:320(ldb_wrap_connect) >>>> >>>> ldb_wrap open of secrets.ldb >>>> >>>> [2014/12/16 07:48:02.284734, 2] >>>> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>>> >>>> Not authoritative for 'p.raasnet.com', forwarding >>>> >>>> [2014/12/16 07:48:02.285459, 3] >>>> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >>>> >>>> Terminating connection - 'dns_tcp_call_loop: >>>> tstream_read_pdu_blob_recv() >>>> - NT_STATUS_CONNECTION_DISCONNECTED' >>>> >>>> [2014/12/16 07:48:02.285767, 3] >>>> ../source4/smbd/process_single.c:114(single_terminate) >>>> >>>> single_terminate: reason[dns_tcp_call_loop: >>>> tstream_read_pdu_blob_recv() >>>> - NT_STATUS_CONNECTION_DISCONNECTED] >>>> >>>> [2014/12/16 07:48:02.286168, 2] >>>> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>>> >>>> Not authoritative for 'adadvisor.net', forwarding >>>> >>>> [2014/12/16 07:48:02.286615, 2] >>>> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send) >>>> >>>> Not authoritative for 'sync.teads.tv', forwarding >>>> >>>> [2014/12/16 07:48:03.535189, 0] >>>> ../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect) >>>> >>>> Failed to connect host 10.2.10.10 on port 135 - >>>> NT_STATUS_CONNECTION_REFUSED >>>> >>>> [2014/12/16 07:48:03.599416, 0] >>>> ../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket) >>>> >>>> Failed to connect host 10.2.10.10 (75566c2f-274e-485c-809a- >>>> b63fd5a29b11._ >>>> msdcs.ad.ha.net) on port 135 - NT_STATUS_CONNECTION_REFUSED. >>>> >>>> [2014/12/16 07:48:03.862288, 2] >>>> ../source4/dns_server/dns_update.c:764(dns_server_process_update) >>>> >>>> Got a dns update request. >>>> >>>> [2014/12/16 07:48:03.863345, 2] >>>> ../source4/dns_server/dns_update.c:721(dns_update_allowed) >>>> >>>> Update not allowed for unsigned packet. >>>> >>>> [2014/12/16 07:48:04.324020, 1] >>>> ../source4/dns_server/dns_query.c:526(handle_tkey) >>>> >>>> Tkey handshake completed >>>> >>>> [2014/12/16 07:48:04.770196, 0] >>>> ../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect) >>>> >>>> Failed to connect host 10.2.10.10 on port 135 - >>>> NT_STATUS_CONNECTION_REFUSED >>>> >>>> [2014/12/16 07:48:04.770671, 0] >>>> ../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket) >>>> >>>> Failed to connect host 10.2.10.10 (75566c2f-274e-485c-809a- >>>> b63fd5a29b11._ >>>> msdcs.ad.ha.net) on port 135 - NT_STATUS_CONNECTION_REFUSED. >>>> >>>> [2014/12/16 07:48:05.781269, 2] >>>> ../source4/dns_server/dns_update.c:764(dns_server_process_update) >>>> >>>> Got a dns update request. >>>> >>>> [2014/12/16 07:48:08.091355, 3] >>>> >../libcli/auth/schannel_state_tdb.c:181(schannel_fetch_session_key_tdb) >>>> >>>> schannel_fetch_session_key_tdb: restored schannel info key >>>> SECRETS/SCHANNEL/HASERVER1 >>>> >>>> [2014/12/16 07:48:08.091672, 3] >>>> ../source4/auth/ntlm/auth.c:270(auth_check_password_send) >>>> >>>> auth_check_password_send: Checking password for unmapped user >>>> [A0218]\[Teacher]@[A0218] >>>> >>>> auth_check_password_send: mapped user is: [AD]\[Teacher]@[A0218] >>>> >>>> [2014/12/16 07:48:08.094254, 3] >>>> ../source4/auth/ntlm/auth_sam.c:61(authsam_search_account) >>>> >>>> sam_search_user: Couldn't find user [Teacher] in samdb, under >>>> DC=ad,DC=ha,DC=net >>>> >>>> [2014/12/16 07:48:08.094435, 2] >>>> ../source4/auth/ntlm/auth.c:420(auth_check_password_recv) >>>> >>>> auth_check_password_recv: sam_ignoredomain >authentication for user >>>> [AD\Teacher] FAILED with error NT_STATUS_NO_SUCH_USER >>>> >>>> [2014/12/16 07:48:08.095864, 3] >>>> ../source4/rpc_server/dcerpc_server.c:963(dcesrv_request) >>>> >>>> [2014/12/16 07:48:08.376870, 2] >>>> ../source4/dns_server/dns_update.c:398(handle_one_update) >>>> >>>> Looking at record: >>>> >>>> [2014/12/16 07:48:08.377765, 2] >>>> ../source4/dns_server/dns_update.c:399(handle_one_update) >>>> >>>> [2014/12/16 07:48:08.377821, 1] ../librpc/ndr/ndr.c:296(ndr_ >>>> print_debug) >>>> >>>> discard_const(update): struct dns_res_rec >>>> >>>> name : 'A3003.ad.ha.net' >>>> >>>> rr_type : DNS_QTYPE_A (0x1) >>>> >>>> rr_class : DNS_QCLASS_ANY (0xFF) >>>> >>>> ttl : 0x00000000 (0) >>>> >>>> length : 0x0000 (0) >>>> >>>> rdata : union dns_rdata(case 0x1) >>>> >>>> ipv4_record : (null) >>>> >>>> unexpected : DATA_BLOB length=0 >>>> >>>> [2014/12/16 07:48:08.384693, 0] >>>> ../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect) >>>> >>>> Failed to connect host 10.2.10.10 on port 135 - >>>> NT_STATUS_CONNECTION_REFUSED >>>> >>>> [2014/12/16 07:48:08.385357, 0] >>>> ../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket) >>>> >>>> Failed to connect host 10.2.10.10 (75566c2f-274e-485c-809a- >>>> b63fd5a29b11._ >>>> msdcs.ad.ha.net) on port 135 - NT_STATUS_CONNECTION_REFUSED. >>>> >>>> [2014/12/16 07:48:08.704073, 3] >>>> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >>>> >>>> Terminating connection - 'ldapsrv_call_loop: >>>> tstream_read_pdu_blob_recv() >>>> - NT_STATUS_CONNECTION_DISCONNECTED' >>>> >>>> [2014/12/16 07:48:08.704509, 3] >>>> ../source4/smbd/process_single.c:114(single_terminate) >>>> >>>> single_terminate: reason[ldapsrv_call_loop: >>>> tstream_read_pdu_blob_recv() >>>> - NT_STATUS_CONNECTION_DISCONNECTED] >>>> >>>> [2014/12/16 07:48:09.211098, 3] >>>> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >>>> >>>> Terminating connection - 'ldapsrv_call_loop: >>>> tstream_read_pdu_blob_recv() >>>> - NT_STATUS_CONNECTION_DISCONNECTED' >>>> >>>> [2014/12/16 07:48:09.211753, 3] >>>> ../source4/smbd/process_single.c:114(single_terminate) >>>> >>>> single_terminate: reason[ldapsrv_call_loop: >>>> tstream_read_pdu_blob_recv() >>>> - NT_STATUS_CONNECTION_DISCONNECTED] >>>> >>>> [2014/12/16 07:48:09.654492, 3] >>>> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >>>> >>>> Terminating connection - 'dcesrv: >NT_STATUS_CONNECTION_DISCONNECTED' >>>> >>>> [2014/12/16 07:48:09.655160, 3] >>>> ../source4/smbd/process_single.c:114(single_terminate) >>>> >>>> single_terminate: reason[dcesrv: >NT_STATUS_CONNECTION_DISCONNECTED] >>>> >>>> [2014/12/16 07:48:09.655573, 3] >>>> ../source4/smbd/service_stream.c:66(stream_terminate_connection) >>>> >>>> Terminating connection - 'dcesrv: >NT_STATUS_CONNECTION_DISCONNECTED' >>>> >>>> [2014/12/16 07:48:09.655906, 3] >>>> ../source4/smbd/process_single.c:114(single_terminate) >>>> >>>> single_terminate: reason[dcesrv: >NT_STATUS_CONNECTION_DISCONNECTED] >>>> >>>> [2014/12/16 07:48:10.979974, 0] >>>> ../source4/dsdb/dns/dns_update.c:294(dnsupdate_nameupdate_done) >>>> >>>> ../source4/dsdb/dns/dns_update.c:294: Failed DNS update - >>>> NT_STATUS_IO_TIMEOUT >>>> >>>> [2014/12/16 07:48:12.915321, 2] >>>> ../source4/dns_server/dns_update.c:398(handle_one_update) >>>> >>>> Looking at record: >>>> >>>> [2014/12/16 07:48:12.915515, 2] >>>> ../source4/dns_server/dns_update.c:399(handle_one_update) >>>> >>>> [2014/12/16 07:48:12.915557, 1] ../librpc/ndr/ndr.c:296(ndr_ >>>> print_debug) >>>> >>>> discard_const(update): struct dns_res_rec >>>> >>>> name : 'A3003.ad.ha.net' >>>> >>>> rr_type : DNS_QTYPE_A (0x1) >>>> >>>> rr_class : DNS_QCLASS_IN (0x1) >>>> >>>> ttl : 0x000004b0 (1200) >>>> >>>> length : 0x0004 (4) >>>> >>>> rdata : union dns_rdata(case 0x1) >>>> >>>> ipv4_record : 10.3.12.100 >>>> >>>> unexpected : DATA_BLOB length=0 >>>> >>>> >>>> >>>> smb.conf >>>> >>>> # Global parameters >>>> >>>> [global] >>>> >>>> workgroup = AD >>>> >>>> realm = AD.HA.NET >>>> >>>> netbios name = HAM1 >>>> >>>> server role = active directory domain controller >>>> >>>> dns forwarder = 8.8.8.8 >>>> >>>> # dns forwarder = 10.1.254.2 >>>> >>>> idmap_ldb:use rfc2307 = yes >>>> >>>> # added 20141215 to quash printer status errors >>>> >>>> printing = bsd >>>> >>>> printcap name = /dev/null >>>> >>>> log level = 3 >>>> >>>> >>>> >>>> [netlogon] >>>> >>>> path = /usr/local/samba/var/locks/sysvol/ad.ha.net/scripts >>>> >>>> read only = No >>>> >>>> >>>> >>>> [sysvol] >>>> >>>> path = /usr/local/samba/var/locks/sysvol el = 3 >read only = No >>>> [netlogon] >>>> >>>> path = /usr/local/samba/var/locks/sysvol/ad.ha.net/scripts >>>> >>>> read only = No [sysvol] >>>> >>>> path = /usr/local/samba/var/locks/sysvol >>>> >>>> read only = No >>>> >>> >>> >> He has also got [sysvol] twice and just what is 'el =3' ? >> >> either it is a very bad 'cut & paste' error or he needs to remove the >> extra shares. >> >> Rowland >> >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> > > >CJ, can you give us the exact output from "samba-tool testparm >--suppress-prompt"? You mentioned you were having dns issues, does >"samba-tool dbcheck --cross-ncs" show any errors? > >I'd also be interested in seeing the output from ps_mem.py ran every 5 >mins. You can do this by downloading the script, doing crontab -e, and >putting in a line like > >*/5 * * * * date >> /root/memusage.txt && /path/to/ps_mem.py | grep >"samba\|mbd" >> /root/memusage.txt && echo -e "\n\n\n" >> >/root/memusage.txt > >You can download ps_mem at >https://raw.githubusercontent.com/pixelb/ps_mem/master/ps_mem.py >This will give you a file named /root/memusage.txt and it will >add lines >every 5 mins with the total memory usage of samba. > >Ricky >-- >To unsubscribe from this list go to the following URL and read the >instructions: https://lists.samba.org/mailman/options/samba >
@Ricky
I ran the first 2 commands and here is what I have so far.
samba-tool testparm --suppress-prompt
# Global parameters
[global]
workgroup = AD
realm = AD.HA.NET
netbios name = HAM1
server role = active directory domain controller
log level = 3
printcap name = /dev/null
dns forwarder = 10.1.254.2
idmap_ldb:use rfc2307 = yes
[netlogon]
path = /usr/local/samba/var/locks/sysvol/ad.ha.net/scripts
read only = No
[sysvol]
path = /usr/local/samba/var/locks/sysvol
read only = No
samba-tool dbcheck --cross-ncs
root at ham1:/usr/local/samba/bin# time ./samba-tool dbcheck --cross-ncs
Checking 212546 objects
The last command of dbcheck is still running after 7 hrs. In a seperate
terminal I ran top and it showed using cpu.
Was I supposed to have samba running or not for this command?
I ran samba-tool dbcheck (without --cross-ncs) first and it came back after
a few minutes.
@L.P.H van Belle
I do want to upgrade. In fact I want to switch to binary packages to better
ease the upgrade proccess. Do you have any upgrade documentation that I can
read specifically for a samba compiled package? I am concerned that my FSMO
will not survive and take my 1100 users on 300 devices offline completely.
I have no secondary DC properly running. How can I ascertain if the upgrade
will solve the problem or make it worse? Again any insight is welcomed.
On Fri, Dec 19, 2014 at 12:44 AM, L.P.H. van Belle <belle at bazuin.nl>
wrote:>
> >>> I am running samba 4.1.9 compiled with internal dns.
>
> Please upgrade first to the latest samba version before be can investigate
> whats going on.
>
> The lastest is 4.1.14 now and lots have happend in betweeen.
>
> Greetz,
>
> Louis
>
>
> >-----Oorspronkelijk bericht-----
> >Van: ricky.nance at gmail.com
> >[mailto:samba-bounces at lists.samba.org] Namens Ricky Nance
> >Verzonden: donderdag 18 december 2014 23:48
> >Aan: Rowland Penny
> >CC: samba at lists.samba.org
> >Onderwerp: Re: [Samba] Samba4 on Ubuntu server
> >
> >On Thu, Dec 18, 2014 at 10:39 AM, Rowland Penny
> ><rowlandpenny at googlemail.com
> >> wrote:
> >>
> >> On 18/12/14 16:19, Germ van Eck wrote:
> >>
> >>> Not sure about the high CPU load, but you have the [netlogon]
share
> >>> twice in your smb.conf. Your first matches mine, have you
added the
> >>> second yourself?
> >>> The second one looks weird with 2 path definitions.
> >>> Cj Tibbetts schreef op do 18-12-2014 om 08:59 [-0700]:
> >>>
> >>>> New to linux and new to Samba so any direction in
> >troubleshooting would
> >>>> be
> >>>> helpful. Here is what I have so far.
> >>>>
> >>>> Within a half an hour of a reboot of the server my cpu
reaches high
> >>>> numbers
> >>>> and becomes slow to respond on all actions. With my
limited
> >>>> understanding I
> >>>> have used vmstat to observe the system. I noticed is that
> >the numbers of
> >>>> forks grows from 1-2k to 43k within 30 minutes after
> >reboot. I saw a dns
> >>>> error in a log file at one point but now I don?t remember
> >where. I am
> >>>> running samba 4.1.9 compiled with internal dns. I have 2
> >other DC?s that
> >>>> are not properly replicating and a third that is
> >completely silent even
> >>>> when the FSMO is crashing. Here are some logs and
smb.conf to get
> >>>> started.
> >>>>
> >>>> [2014/12/16 07:47:59.925907, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'cdn.beanstock.com',
forwarding
> >>>>
> >>>> [2014/12/16 07:47:59.929961, 2]
> >>>>
../source4/dns_server/dns_update.c:764(dns_server_process_update)
> >>>>
> >>>> Got a dns update request.
> >>>>
> >>>> [2014/12/16 07:47:59.931044, 2]
> >>>> ../source4/dns_server/dns_update.c:721(dns_update_allowed)
> >>>>
> >>>> Update not allowed for unsigned packet.
> >>>>
> >>>> [2014/12/16 07:48:00.197341, 1]
> >>>> ../source4/dns_server/dns_query.c:526(handle_tkey)
> >>>>
> >>>> Tkey handshake completed
> >>>>
> >>>> [2014/12/16 07:48:00.198457, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'helix.beanstock.co',
forwarding
> >>>>
> >>>> [2014/12/16 07:48:00.199562, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'loadm.exelator.com',
forwarding
> >>>>
> >>>> [2014/12/16 07:48:00.199884, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'mpp.vindicosuite.com',
forwarding
> >>>>
> >>>> [2014/12/16 07:48:02.128537, 3]
> >>>> ../lib/ldb-samba/ldb_wrap.c:320(ldb_wrap_connect)
> >>>>
> >>>> ldb_wrap open of secrets.ldb
> >>>>
> >>>> [2014/12/16 07:48:02.284734, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'p.raasnet.com',
forwarding
> >>>>
> >>>> [2014/12/16 07:48:02.285459, 3]
> >>>>
../source4/smbd/service_stream.c:66(stream_terminate_connection)
> >>>>
> >>>> Terminating connection - 'dns_tcp_call_loop:
> >>>> tstream_read_pdu_blob_recv()
> >>>> - NT_STATUS_CONNECTION_DISCONNECTED'
> >>>>
> >>>> [2014/12/16 07:48:02.285767, 3]
> >>>> ../source4/smbd/process_single.c:114(single_terminate)
> >>>>
> >>>> single_terminate: reason[dns_tcp_call_loop:
> >>>> tstream_read_pdu_blob_recv()
> >>>> - NT_STATUS_CONNECTION_DISCONNECTED]
> >>>>
> >>>> [2014/12/16 07:48:02.286168, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'adadvisor.net',
forwarding
> >>>>
> >>>> [2014/12/16 07:48:02.286615, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'sync.teads.tv',
forwarding
> >>>>
> >>>> [2014/12/16 07:48:03.535189, 0]
> >>>>
../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect)
> >>>>
> >>>> Failed to connect host 10.2.10.10 on port 135 -
> >>>> NT_STATUS_CONNECTION_REFUSED
> >>>>
> >>>> [2014/12/16 07:48:03.599416, 0]
> >>>>
../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket)
> >>>>
> >>>> Failed to connect host 10.2.10.10
(75566c2f-274e-485c-809a-
> >>>> b63fd5a29b11._
> >>>> msdcs.ad.ha.net) on port 135 -
NT_STATUS_CONNECTION_REFUSED.
> >>>>
> >>>> [2014/12/16 07:48:03.862288, 2]
> >>>>
../source4/dns_server/dns_update.c:764(dns_server_process_update)
> >>>>
> >>>> Got a dns update request.
> >>>>
> >>>> [2014/12/16 07:48:03.863345, 2]
> >>>> ../source4/dns_server/dns_update.c:721(dns_update_allowed)
> >>>>
> >>>> Update not allowed for unsigned packet.
> >>>>
> >>>> [2014/12/16 07:48:04.324020, 1]
> >>>> ../source4/dns_server/dns_query.c:526(handle_tkey)
> >>>>
> >>>> Tkey handshake completed
> >>>>
> >>>> [2014/12/16 07:48:04.770196, 0]
> >>>>
../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect)
> >>>>
> >>>> Failed to connect host 10.2.10.10 on port 135 -
> >>>> NT_STATUS_CONNECTION_REFUSED
> >>>>
> >>>> [2014/12/16 07:48:04.770671, 0]
> >>>>
../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket)
> >>>>
> >>>> Failed to connect host 10.2.10.10
(75566c2f-274e-485c-809a-
> >>>> b63fd5a29b11._
> >>>> msdcs.ad.ha.net) on port 135 -
NT_STATUS_CONNECTION_REFUSED.
> >>>>
> >>>> [2014/12/16 07:48:05.781269, 2]
> >>>>
../source4/dns_server/dns_update.c:764(dns_server_process_update)
> >>>>
> >>>> Got a dns update request.
> >>>>
> >>>> [2014/12/16 07:48:08.091355, 3]
> >>>>
> >../libcli/auth/schannel_state_tdb.c:181(schannel_fetch_session_key_tdb)
> >>>>
> >>>> schannel_fetch_session_key_tdb: restored schannel info
key
> >>>> SECRETS/SCHANNEL/HASERVER1
> >>>>
> >>>> [2014/12/16 07:48:08.091672, 3]
> >>>> ../source4/auth/ntlm/auth.c:270(auth_check_password_send)
> >>>>
> >>>> auth_check_password_send: Checking password for
unmapped user
> >>>> [A0218]\[Teacher]@[A0218]
> >>>>
> >>>> auth_check_password_send: mapped user is:
[AD]\[Teacher]@[A0218]
> >>>>
> >>>> [2014/12/16 07:48:08.094254, 3]
> >>>> ../source4/auth/ntlm/auth_sam.c:61(authsam_search_account)
> >>>>
> >>>> sam_search_user: Couldn't find user [Teacher] in
samdb, under
> >>>> DC=ad,DC=ha,DC=net
> >>>>
> >>>> [2014/12/16 07:48:08.094435, 2]
> >>>> ../source4/auth/ntlm/auth.c:420(auth_check_password_recv)
> >>>>
> >>>> auth_check_password_recv: sam_ignoredomain
> >authentication for user
> >>>> [AD\Teacher] FAILED with error NT_STATUS_NO_SUCH_USER
> >>>>
> >>>> [2014/12/16 07:48:08.095864, 3]
> >>>> ../source4/rpc_server/dcerpc_server.c:963(dcesrv_request)
> >>>>
> >>>> [2014/12/16 07:48:08.376870, 2]
> >>>> ../source4/dns_server/dns_update.c:398(handle_one_update)
> >>>>
> >>>> Looking at record:
> >>>>
> >>>> [2014/12/16 07:48:08.377765, 2]
> >>>> ../source4/dns_server/dns_update.c:399(handle_one_update)
> >>>>
> >>>> [2014/12/16 07:48:08.377821, 1]
../librpc/ndr/ndr.c:296(ndr_
> >>>> print_debug)
> >>>>
> >>>> discard_const(update): struct dns_res_rec
> >>>>
> >>>> name :
'A3003.ad.ha.net'
> >>>>
> >>>> rr_type : DNS_QTYPE_A (0x1)
> >>>>
> >>>> rr_class : DNS_QCLASS_ANY
(0xFF)
> >>>>
> >>>> ttl : 0x00000000 (0)
> >>>>
> >>>> length : 0x0000 (0)
> >>>>
> >>>> rdata : union dns_rdata(case
0x1)
> >>>>
> >>>> ipv4_record : (null)
> >>>>
> >>>> unexpected : DATA_BLOB length=0
> >>>>
> >>>> [2014/12/16 07:48:08.384693, 0]
> >>>>
../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect)
> >>>>
> >>>> Failed to connect host 10.2.10.10 on port 135 -
> >>>> NT_STATUS_CONNECTION_REFUSED
> >>>>
> >>>> [2014/12/16 07:48:08.385357, 0]
> >>>>
../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket)
> >>>>
> >>>> Failed to connect host 10.2.10.10
(75566c2f-274e-485c-809a-
> >>>> b63fd5a29b11._
> >>>> msdcs.ad.ha.net) on port 135 -
NT_STATUS_CONNECTION_REFUSED.
> >>>>
> >>>> [2014/12/16 07:48:08.704073, 3]
> >>>>
../source4/smbd/service_stream.c:66(stream_terminate_connection)
> >>>>
> >>>> Terminating connection - 'ldapsrv_call_loop:
> >>>> tstream_read_pdu_blob_recv()
> >>>> - NT_STATUS_CONNECTION_DISCONNECTED'
> >>>>
> >>>> [2014/12/16 07:48:08.704509, 3]
> >>>> ../source4/smbd/process_single.c:114(single_terminate)
> >>>>
> >>>> single_terminate: reason[ldapsrv_call_loop:
> >>>> tstream_read_pdu_blob_recv()
> >>>> - NT_STATUS_CONNECTION_DISCONNECTED]
> >>>>
> >>>> [2014/12/16 07:48:09.211098, 3]
> >>>>
../source4/smbd/service_stream.c:66(stream_terminate_connection)
> >>>>
> >>>> Terminating connection - 'ldapsrv_call_loop:
> >>>> tstream_read_pdu_blob_recv()
> >>>> - NT_STATUS_CONNECTION_DISCONNECTED'
> >>>>
> >>>> [2014/12/16 07:48:09.211753, 3]
> >>>> ../source4/smbd/process_single.c:114(single_terminate)
> >>>>
> >>>> single_terminate: reason[ldapsrv_call_loop:
> >>>> tstream_read_pdu_blob_recv()
> >>>> - NT_STATUS_CONNECTION_DISCONNECTED]
> >>>>
> >>>> [2014/12/16 07:48:09.654492, 3]
> >>>>
../source4/smbd/service_stream.c:66(stream_terminate_connection)
> >>>>
> >>>> Terminating connection - 'dcesrv:
> >NT_STATUS_CONNECTION_DISCONNECTED'
> >>>>
> >>>> [2014/12/16 07:48:09.655160, 3]
> >>>> ../source4/smbd/process_single.c:114(single_terminate)
> >>>>
> >>>> single_terminate: reason[dcesrv:
> >NT_STATUS_CONNECTION_DISCONNECTED]
> >>>>
> >>>> [2014/12/16 07:48:09.655573, 3]
> >>>>
../source4/smbd/service_stream.c:66(stream_terminate_connection)
> >>>>
> >>>> Terminating connection - 'dcesrv:
> >NT_STATUS_CONNECTION_DISCONNECTED'
> >>>>
> >>>> [2014/12/16 07:48:09.655906, 3]
> >>>> ../source4/smbd/process_single.c:114(single_terminate)
> >>>>
> >>>> single_terminate: reason[dcesrv:
> >NT_STATUS_CONNECTION_DISCONNECTED]
> >>>>
> >>>> [2014/12/16 07:48:10.979974, 0]
> >>>>
../source4/dsdb/dns/dns_update.c:294(dnsupdate_nameupdate_done)
> >>>>
> >>>> ../source4/dsdb/dns/dns_update.c:294: Failed DNS update
-
> >>>> NT_STATUS_IO_TIMEOUT
> >>>>
> >>>> [2014/12/16 07:48:12.915321, 2]
> >>>> ../source4/dns_server/dns_update.c:398(handle_one_update)
> >>>>
> >>>> Looking at record:
> >>>>
> >>>> [2014/12/16 07:48:12.915515, 2]
> >>>> ../source4/dns_server/dns_update.c:399(handle_one_update)
> >>>>
> >>>> [2014/12/16 07:48:12.915557, 1]
../librpc/ndr/ndr.c:296(ndr_
> >>>> print_debug)
> >>>>
> >>>> discard_const(update): struct dns_res_rec
> >>>>
> >>>> name :
'A3003.ad.ha.net'
> >>>>
> >>>> rr_type : DNS_QTYPE_A (0x1)
> >>>>
> >>>> rr_class : DNS_QCLASS_IN (0x1)
> >>>>
> >>>> ttl : 0x000004b0 (1200)
> >>>>
> >>>> length : 0x0004 (4)
> >>>>
> >>>> rdata : union dns_rdata(case
0x1)
> >>>>
> >>>> ipv4_record : 10.3.12.100
> >>>>
> >>>> unexpected : DATA_BLOB length=0
> >>>>
> >>>>
> >>>>
> >>>> smb.conf
> >>>>
> >>>> # Global parameters
> >>>>
> >>>> [global]
> >>>>
> >>>> workgroup = AD
> >>>>
> >>>> realm = AD.HA.NET
> >>>>
> >>>> netbios name = HAM1
> >>>>
> >>>> server role = active directory domain controller
> >>>>
> >>>> dns forwarder = 8.8.8.8
> >>>>
> >>>> # dns forwarder = 10.1.254.2
> >>>>
> >>>> idmap_ldb:use rfc2307 = yes
> >>>>
> >>>> # added 20141215 to quash printer status errors
> >>>>
> >>>> printing = bsd
> >>>>
> >>>> printcap name = /dev/null
> >>>>
> >>>> log level = 3
> >>>>
> >>>>
> >>>>
> >>>> [netlogon]
> >>>>
> >>>> path =
/usr/local/samba/var/locks/sysvol/ad.ha.net/scripts
> >>>>
> >>>> read only = No
> >>>>
> >>>>
> >>>>
> >>>> [sysvol]
> >>>>
> >>>> path = /usr/local/samba/var/locks/sysvol el = 3
> >read only = No
> >>>> [netlogon]
> >>>>
> >>>> path =
/usr/local/samba/var/locks/sysvol/ad.ha.net/scripts
> >>>>
> >>>> read only = No [sysvol]
> >>>>
> >>>> path = /usr/local/samba/var/locks/sysvol
> >>>>
> >>>> read only = No
> >>>>
> >>>
> >>>
> >> He has also got [sysvol] twice and just what is 'el =3' ?
> >>
> >> either it is a very bad 'cut & paste' error or he
needs to remove the
> >> extra shares.
> >>
> >> Rowland
> >>
> >>
> >> --
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions: https://lists.samba.org/mailman/options/samba
> >>
> >
> >
> >CJ, can you give us the exact output from "samba-tool testparm
> >--suppress-prompt"? You mentioned you were having dns issues, does
> >"samba-tool dbcheck --cross-ncs" show any errors?
> >
> >I'd also be interested in seeing the output from ps_mem.py ran
every 5
> >mins. You can do this by downloading the script, doing crontab -e, and
> >putting in a line like
> >
> >*/5 * * * * date >> /root/memusage.txt &&
/path/to/ps_mem.py | grep
> >"samba\|mbd" >> /root/memusage.txt && echo -e
"\n\n\n" >>
> >/root/memusage.txt
> >
> >You can download ps_mem at
> >https://raw.githubusercontent.com/pixelb/ps_mem/master/ps_mem.py
> >This will give you a file named /root/memusage.txt and it will
> >add lines
> >every 5 mins with the total memory usage of samba.
> >
> >Ricky
> >--
> >To unsubscribe from this list go to the following URL and read the
> >instructions: https://lists.samba.org/mailman/options/samba
> >
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
Here is the information requested
it took 3 days before results came
samba-tool dbcheck finished with this error
root at ham1:/usr/local/samba/bin# time ./samba-tool dbcheck --cross-ncs
Checking 212687 objects
ERROR(<type 'exceptions.MemoryError'>): uncaught exception -
File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
line 175, in _run
return self.run(*args, **kwargs)
File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/dbcheck.py",
line 136, in run
controls=controls, attrs=attrs)
File
"/usr/local/samba/lib/python2.7/site-packages/samba/dbchecker.py",
line 128, in check_database
error_count += self.check_object(object.dn, attrs=attrs)
File
"/usr/local/samba/lib/python2.7/site-packages/samba/dbchecker.py",
line 1005, in check_object
attrs=attrs)
Segmentation fault (core dumped)
real 1980m21.023s
user 1408m48.304s
sys 11m43.788s
On Fri, Dec 19, 2014 at 12:44 AM, L.P.H. van Belle <belle at bazuin.nl>
wrote:
> >>> I am running samba 4.1.9 compiled with internal dns.
>
> Please upgrade first to the latest samba version before be can investigate
> whats going on.
>
> The lastest is 4.1.14 now and lots have happend in betweeen.
>
> Greetz,
>
> Louis
>
>
> >-----Oorspronkelijk bericht-----
> >Van: ricky.nance at gmail.com
> >[mailto:samba-bounces at lists.samba.org] Namens Ricky Nance
> >Verzonden: donderdag 18 december 2014 23:48
> >Aan: Rowland Penny
> >CC: samba at lists.samba.org
> >Onderwerp: Re: [Samba] Samba4 on Ubuntu server
> >
> >On Thu, Dec 18, 2014 at 10:39 AM, Rowland Penny
> ><rowlandpenny at googlemail.com
> >> wrote:
> >>
> >> On 18/12/14 16:19, Germ van Eck wrote:
> >>
> >>> Not sure about the high CPU load, but you have the [netlogon]
share
> >>> twice in your smb.conf. Your first matches mine, have you
added the
> >>> second yourself?
> >>> The second one looks weird with 2 path definitions.
> >>> Cj Tibbetts schreef op do 18-12-2014 om 08:59 [-0700]:
> >>>
> >>>> New to linux and new to Samba so any direction in
> >troubleshooting would
> >>>> be
> >>>> helpful. Here is what I have so far.
> >>>>
> >>>> Within a half an hour of a reboot of the server my cpu
reaches high
> >>>> numbers
> >>>> and becomes slow to respond on all actions. With my
limited
> >>>> understanding I
> >>>> have used vmstat to observe the system. I noticed is that
> >the numbers of
> >>>> forks grows from 1-2k to 43k within 30 minutes after
> >reboot. I saw a dns
> >>>> error in a log file at one point but now I don?t remember
> >where. I am
> >>>> running samba 4.1.9 compiled with internal dns. I have 2
> >other DC?s that
> >>>> are not properly replicating and a third that is
> >completely silent even
> >>>> when the FSMO is crashing. Here are some logs and
smb.conf to get
> >>>> started.
> >>>>
> >>>> [2014/12/16 07:47:59.925907, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'cdn.beanstock.com',
forwarding
> >>>>
> >>>> [2014/12/16 07:47:59.929961, 2]
> >>>>
../source4/dns_server/dns_update.c:764(dns_server_process_update)
> >>>>
> >>>> Got a dns update request.
> >>>>
> >>>> [2014/12/16 07:47:59.931044, 2]
> >>>> ../source4/dns_server/dns_update.c:721(dns_update_allowed)
> >>>>
> >>>> Update not allowed for unsigned packet.
> >>>>
> >>>> [2014/12/16 07:48:00.197341, 1]
> >>>> ../source4/dns_server/dns_query.c:526(handle_tkey)
> >>>>
> >>>> Tkey handshake completed
> >>>>
> >>>> [2014/12/16 07:48:00.198457, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'helix.beanstock.co',
forwarding
> >>>>
> >>>> [2014/12/16 07:48:00.199562, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'loadm.exelator.com',
forwarding
> >>>>
> >>>> [2014/12/16 07:48:00.199884, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'mpp.vindicosuite.com',
forwarding
> >>>>
> >>>> [2014/12/16 07:48:02.128537, 3]
> >>>> ../lib/ldb-samba/ldb_wrap.c:320(ldb_wrap_connect)
> >>>>
> >>>> ldb_wrap open of secrets.ldb
> >>>>
> >>>> [2014/12/16 07:48:02.284734, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'p.raasnet.com',
forwarding
> >>>>
> >>>> [2014/12/16 07:48:02.285459, 3]
> >>>>
../source4/smbd/service_stream.c:66(stream_terminate_connection)
> >>>>
> >>>> Terminating connection - 'dns_tcp_call_loop:
> >>>> tstream_read_pdu_blob_recv()
> >>>> - NT_STATUS_CONNECTION_DISCONNECTED'
> >>>>
> >>>> [2014/12/16 07:48:02.285767, 3]
> >>>> ../source4/smbd/process_single.c:114(single_terminate)
> >>>>
> >>>> single_terminate: reason[dns_tcp_call_loop:
> >>>> tstream_read_pdu_blob_recv()
> >>>> - NT_STATUS_CONNECTION_DISCONNECTED]
> >>>>
> >>>> [2014/12/16 07:48:02.286168, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'adadvisor.net',
forwarding
> >>>>
> >>>> [2014/12/16 07:48:02.286615, 2]
> >>>>
> >../source4/dns_server/dns_query.c:629(dns_server_process_query_send)
> >>>>
> >>>> Not authoritative for 'sync.teads.tv',
forwarding
> >>>>
> >>>> [2014/12/16 07:48:03.535189, 0]
> >>>>
../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect)
> >>>>
> >>>> Failed to connect host 10.2.10.10 on port 135 -
> >>>> NT_STATUS_CONNECTION_REFUSED
> >>>>
> >>>> [2014/12/16 07:48:03.599416, 0]
> >>>>
../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket)
> >>>>
> >>>> Failed to connect host 10.2.10.10
(75566c2f-274e-485c-809a-
> >>>> b63fd5a29b11._
> >>>> msdcs.ad.ha.net) on port 135 -
NT_STATUS_CONNECTION_REFUSED.
> >>>>
> >>>> [2014/12/16 07:48:03.862288, 2]
> >>>>
../source4/dns_server/dns_update.c:764(dns_server_process_update)
> >>>>
> >>>> Got a dns update request.
> >>>>
> >>>> [2014/12/16 07:48:03.863345, 2]
> >>>> ../source4/dns_server/dns_update.c:721(dns_update_allowed)
> >>>>
> >>>> Update not allowed for unsigned packet.
> >>>>
> >>>> [2014/12/16 07:48:04.324020, 1]
> >>>> ../source4/dns_server/dns_query.c:526(handle_tkey)
> >>>>
> >>>> Tkey handshake completed
> >>>>
> >>>> [2014/12/16 07:48:04.770196, 0]
> >>>>
../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect)
> >>>>
> >>>> Failed to connect host 10.2.10.10 on port 135 -
> >>>> NT_STATUS_CONNECTION_REFUSED
> >>>>
> >>>> [2014/12/16 07:48:04.770671, 0]
> >>>>
../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket)
> >>>>
> >>>> Failed to connect host 10.2.10.10
(75566c2f-274e-485c-809a-
> >>>> b63fd5a29b11._
> >>>> msdcs.ad.ha.net) on port 135 -
NT_STATUS_CONNECTION_REFUSED.
> >>>>
> >>>> [2014/12/16 07:48:05.781269, 2]
> >>>>
../source4/dns_server/dns_update.c:764(dns_server_process_update)
> >>>>
> >>>> Got a dns update request.
> >>>>
> >>>> [2014/12/16 07:48:08.091355, 3]
> >>>>
> >../libcli/auth/schannel_state_tdb.c:181(schannel_fetch_session_key_tdb)
> >>>>
> >>>> schannel_fetch_session_key_tdb: restored schannel info
key
> >>>> SECRETS/SCHANNEL/HASERVER1
> >>>>
> >>>> [2014/12/16 07:48:08.091672, 3]
> >>>> ../source4/auth/ntlm/auth.c:270(auth_check_password_send)
> >>>>
> >>>> auth_check_password_send: Checking password for
unmapped user
> >>>> [A0218]\[Teacher]@[A0218]
> >>>>
> >>>> auth_check_password_send: mapped user is:
[AD]\[Teacher]@[A0218]
> >>>>
> >>>> [2014/12/16 07:48:08.094254, 3]
> >>>> ../source4/auth/ntlm/auth_sam.c:61(authsam_search_account)
> >>>>
> >>>> sam_search_user: Couldn't find user [Teacher] in
samdb, under
> >>>> DC=ad,DC=ha,DC=net
> >>>>
> >>>> [2014/12/16 07:48:08.094435, 2]
> >>>> ../source4/auth/ntlm/auth.c:420(auth_check_password_recv)
> >>>>
> >>>> auth_check_password_recv: sam_ignoredomain
> >authentication for user
> >>>> [AD\Teacher] FAILED with error NT_STATUS_NO_SUCH_USER
> >>>>
> >>>> [2014/12/16 07:48:08.095864, 3]
> >>>> ../source4/rpc_server/dcerpc_server.c:963(dcesrv_request)
> >>>>
> >>>> [2014/12/16 07:48:08.376870, 2]
> >>>> ../source4/dns_server/dns_update.c:398(handle_one_update)
> >>>>
> >>>> Looking at record:
> >>>>
> >>>> [2014/12/16 07:48:08.377765, 2]
> >>>> ../source4/dns_server/dns_update.c:399(handle_one_update)
> >>>>
> >>>> [2014/12/16 07:48:08.377821, 1]
../librpc/ndr/ndr.c:296(ndr_
> >>>> print_debug)
> >>>>
> >>>> discard_const(update): struct dns_res_rec
> >>>>
> >>>> name :
'A3003.ad.ha.net'
> >>>>
> >>>> rr_type : DNS_QTYPE_A (0x1)
> >>>>
> >>>> rr_class : DNS_QCLASS_ANY
(0xFF)
> >>>>
> >>>> ttl : 0x00000000 (0)
> >>>>
> >>>> length : 0x0000 (0)
> >>>>
> >>>> rdata : union dns_rdata(case
0x1)
> >>>>
> >>>> ipv4_record : (null)
> >>>>
> >>>> unexpected : DATA_BLOB length=0
> >>>>
> >>>> [2014/12/16 07:48:08.384693, 0]
> >>>>
../source4/librpc/rpc/dcerpc_sock.c:262(continue_socket_connect)
> >>>>
> >>>> Failed to connect host 10.2.10.10 on port 135 -
> >>>> NT_STATUS_CONNECTION_REFUSED
> >>>>
> >>>> [2014/12/16 07:48:08.385357, 0]
> >>>>
../source4/librpc/rpc/dcerpc_sock.c:425(continue_ip_open_socket)
> >>>>
> >>>> Failed to connect host 10.2.10.10
(75566c2f-274e-485c-809a-
> >>>> b63fd5a29b11._
> >>>> msdcs.ad.ha.net) on port 135 -
NT_STATUS_CONNECTION_REFUSED.
> >>>>
> >>>> [2014/12/16 07:48:08.704073, 3]
> >>>>
../source4/smbd/service_stream.c:66(stream_terminate_connection)
> >>>>
> >>>> Terminating connection - 'ldapsrv_call_loop:
> >>>> tstream_read_pdu_blob_recv()
> >>>> - NT_STATUS_CONNECTION_DISCONNECTED'
> >>>>
> >>>> [2014/12/16 07:48:08.704509, 3]
> >>>> ../source4/smbd/process_single.c:114(single_terminate)
> >>>>
> >>>> single_terminate: reason[ldapsrv_call_loop:
> >>>> tstream_read_pdu_blob_recv()
> >>>> - NT_STATUS_CONNECTION_DISCONNECTED]
> >>>>
> >>>> [2014/12/16 07:48:09.211098, 3]
> >>>>
../source4/smbd/service_stream.c:66(stream_terminate_connection)
> >>>>
> >>>> Terminating connection - 'ldapsrv_call_loop:
> >>>> tstream_read_pdu_blob_recv()
> >>>> - NT_STATUS_CONNECTION_DISCONNECTED'
> >>>>
> >>>> [2014/12/16 07:48:09.211753, 3]
> >>>> ../source4/smbd/process_single.c:114(single_terminate)
> >>>>
> >>>> single_terminate: reason[ldapsrv_call_loop:
> >>>> tstream_read_pdu_blob_recv()
> >>>> - NT_STATUS_CONNECTION_DISCONNECTED]
> >>>>
> >>>> [2014/12/16 07:48:09.654492, 3]
> >>>>
../source4/smbd/service_stream.c:66(stream_terminate_connection)
> >>>>
> >>>> Terminating connection - 'dcesrv:
> >NT_STATUS_CONNECTION_DISCONNECTED'
> >>>>
> >>>> [2014/12/16 07:48:09.655160, 3]
> >>>> ../source4/smbd/process_single.c:114(single_terminate)
> >>>>
> >>>> single_terminate: reason[dcesrv:
> >NT_STATUS_CONNECTION_DISCONNECTED]
> >>>>
> >>>> [2014/12/16 07:48:09.655573, 3]
> >>>>
../source4/smbd/service_stream.c:66(stream_terminate_connection)
> >>>>
> >>>> Terminating connection - 'dcesrv:
> >NT_STATUS_CONNECTION_DISCONNECTED'
> >>>>
> >>>> [2014/12/16 07:48:09.655906, 3]
> >>>> ../source4/smbd/process_single.c:114(single_terminate)
> >>>>
> >>>> single_terminate: reason[dcesrv:
> >NT_STATUS_CONNECTION_DISCONNECTED]
> >>>>
> >>>> [2014/12/16 07:48:10.979974, 0]
> >>>>
../source4/dsdb/dns/dns_update.c:294(dnsupdate_nameupdate_done)
> >>>>
> >>>> ../source4/dsdb/dns/dns_update.c:294: Failed DNS update
-
> >>>> NT_STATUS_IO_TIMEOUT
> >>>>
> >>>> [2014/12/16 07:48:12.915321, 2]
> >>>> ../source4/dns_server/dns_update.c:398(handle_one_update)
> >>>>
> >>>> Looking at record:
> >>>>
> >>>> [2014/12/16 07:48:12.915515, 2]
> >>>> ../source4/dns_server/dns_update.c:399(handle_one_update)
> >>>>
> >>>> [2014/12/16 07:48:12.915557, 1]
../librpc/ndr/ndr.c:296(ndr_
> >>>> print_debug)
> >>>>
> >>>> discard_const(update): struct dns_res_rec
> >>>>
> >>>> name :
'A3003.ad.ha.net'
> >>>>
> >>>> rr_type : DNS_QTYPE_A (0x1)
> >>>>
> >>>> rr_class : DNS_QCLASS_IN (0x1)
> >>>>
> >>>> ttl : 0x000004b0 (1200)
> >>>>
> >>>> length : 0x0004 (4)
> >>>>
> >>>> rdata : union dns_rdata(case
0x1)
> >>>>
> >>>> ipv4_record : 10.3.12.100
> >>>>
> >>>> unexpected : DATA_BLOB length=0
> >>>>
> >>>>
> >>>>
> >>>> smb.conf
> >>>>
> >>>> # Global parameters
> >>>>
> >>>> [global]
> >>>>
> >>>> workgroup = AD
> >>>>
> >>>> realm = AD.HA.NET
> >>>>
> >>>> netbios name = HAM1
> >>>>
> >>>> server role = active directory domain controller
> >>>>
> >>>> dns forwarder = 8.8.8.8
> >>>>
> >>>> # dns forwarder = 10.1.254.2
> >>>>
> >>>> idmap_ldb:use rfc2307 = yes
> >>>>
> >>>> # added 20141215 to quash printer status errors
> >>>>
> >>>> printing = bsd
> >>>>
> >>>> printcap name = /dev/null
> >>>>
> >>>> log level = 3
> >>>>
> >>>>
> >>>>
> >>>> [netlogon]
> >>>>
> >>>> path =
/usr/local/samba/var/locks/sysvol/ad.ha.net/scripts
> >>>>
> >>>> read only = No
> >>>>
> >>>>
> >>>>
> >>>> [sysvol]
> >>>>
> >>>> path = /usr/local/samba/var/locks/sysvol el = 3
> >read only = No
> >>>> [netlogon]
> >>>>
> >>>> path =
/usr/local/samba/var/locks/sysvol/ad.ha.net/scripts
> >>>>
> >>>> read only = No [sysvol]
> >>>>
> >>>> path = /usr/local/samba/var/locks/sysvol
> >>>>
> >>>> read only = No
> >>>>
> >>>
> >>>
> >> He has also got [sysvol] twice and just what is 'el =3' ?
> >>
> >> either it is a very bad 'cut & paste' error or he
needs to remove the
> >> extra shares.
> >>
> >> Rowland
> >>
> >>
> >> --
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions: https://lists.samba.org/mailman/options/samba
> >>
> >
> >
> >CJ, can you give us the exact output from "samba-tool testparm
> >--suppress-prompt"? You mentioned you were having dns issues, does
> >"samba-tool dbcheck --cross-ncs" show any errors?
> >
> >I'd also be interested in seeing the output from ps_mem.py ran
every 5
> >mins. You can do this by downloading the script, doing crontab -e, and
> >putting in a line like
> >
> >*/5 * * * * date >> /root/memusage.txt &&
/path/to/ps_mem.py | grep
> >"samba\|mbd" >> /root/memusage.txt && echo -e
"\n\n\n" >>
> >/root/memusage.txt
> >
> >You can download ps_mem at
> >https://raw.githubusercontent.com/pixelb/ps_mem/master/ps_mem.py
> >This will give you a file named /root/memusage.txt and it will
> >add lines
> >every 5 mins with the total memory usage of samba.
> >
> >Ricky
> >--
> >To unsubscribe from this list go to the following URL and read the
> >instructions: https://lists.samba.org/mailman/options/samba
> >
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>