Hi,
We use Samba 1.9.18p10 on a Digital Unix alpha workstation
as file server for our users. In rush hour there are 80-100
clients connected to the server. It works fine almost all
the time but sometimes we have problems with the login
from Windows 95.
When the problem appears the user enters username, password
and domain and it displays the message
- Cannot found the shared resource. Be sure it's correctly
specified
or
- The specified password is incorrect or the access is denied.
(This are translations from the spanish messages)
sometimes the user only needs to press enter again on the
authentication window (so the password was correct),
sometimes he needs to try a lot (5-6 times) and sometimes
it never works.
This problems never appears with the same operation from
a dos client (using Lanman client), so we thing is a Windows
95 problem, but there should be something in the server
that forces it.
It doesn't seem to be related to the number of clients connected
because we have had 110 clients at the same time without
any problem and it has appeared with only 50 clients.
Now we are trying to monitors the net and disk activity to
try to see if the server load is the cause but when the problem
appears an interactive session with the server works fine.
Has someone any idea about why this problem could appear?
Please, bring me ideas about where to search the causes,
parameters that I should review, windows 95 configuration, ...
Where can I found information about timing parameters
on the makefile?
Which is the daemon that serves the netlogon? nmbd, smbd or both?
Thank you very much.
--
Miquel Bonastre (miquel@fib.upc.es)
Area de Sistemes Unix (LCFIB)
Facultat d'Informatica de Barcelona
Universitat Politecnica de Catalunya
-------------- next part --------------
Load smb config files from /usr/local/samba/lib/smb.conf
NOTE: Service ic6_lpt2 is flagged unavailable.
Loaded services file OK.
Press enter to see a dump of your service definitions
# Global parameters
debuglevel = 1
syslog = 3
syslog only = Yes
protocol = NT1
security = USER
max disk size = 0
lpq cache time = 10
announce as = NT
encrypt passwords = Yes
update encrypted = No
getwd cache = Yes
read prediction = No
read bmpx = Yes
read raw = Yes
write raw = Yes
use rhosts = No
load printers = No
null passwords = No
strip dot = No
interfaces =
bind interfaces only = No
networkstation user login = No
password server =
socket options = SO_KEEPALIVE
netbios name = FUSIO
netbios aliases =
smbrun = /usr/local/samba/bin/smbrun
log file =
config file =
smb passwd file = /usr/local/samba/private/smbpasswd
hosts equiv =
preload =
server string = Servidor FUSIO de l'LCFIB
printcap name = /etc/printcap
lock dir = /usr/local/samba/var/locks
root directory = /
default service =
message command =
dfree command = /usr/local/samba/scripts/dfree
passwd program = /usr/local/samba/bin/smbpasswd
passwd chat = *old*password* %o\n *new*password* %n\n *new*password* %n\n
*changed*
passwd chat debug = No
valid chars =
workgroup = SMBFIB
username map = /usr/local/samba/lib/users.map
character set =
logon script = logon.bat
logon path = \\%N\%U\profile
logon drive =
logon home = \\%N\%U
remote announce =
remote browse sync =
socket address = 0.0.0.0
homedir map =
announce version = 4.2
max log size = 5000
mangled stack = 50
max mux = 50
max xmit = 65535
max packet = 65535
name resolve order = wins lmhosts host bcast
packet size = 65535
password level = 0
username level = 0
keepalive = 0
deadtime = 15
time offset = 0
read size = 16384
shared mem size = 102400
coding system =
client code page = 850
os level = 255
max ttl = 14400
max wins ttl = 259200
min wins ttl = 21600
lm announce = Auto
lm interval = 60
dns proxy = Yes
wins support = Yes
wins proxy = No
wins server =
preferred master = Yes
local master = Yes
domain master = Yes
domain logons = Yes
browse list = Yes
unix realname = Yes
NIS homedir = No
unix password sync = No
time server = No
ole locking compatibility = Yes
printer driver file = /usr/local/samba/lib/printers.def
# Default service parameters
comment =
copy =
include = /usr/local/samba/lib/shares.conf
exec =
postexec =
root preexec =
root postexec =
alternate permissions = No
revalidate = No
default case = lower
case sensitive = No
preserve case = Yes
short preserve case = Yes
mangle case = No
mangling char = ~
browseable = Yes
available = Yes
path =
username =
guest account = nobody
invalid users = @disuser
valid users =
admin users =
read list =
write list =
volume =
force user =
force group =
read only = Yes
max connections = 0
min print space = 0
create mask = 0744
force create mode = 00
directory mask = 0755
force directory mode = 00
set directory = No
status = Yes
hide dot files = Yes
delete veto files = No
veto files =
hide files =
veto oplock files =
guest only = No
guest ok = No
print ok = No
postscript = No
map system = No
map hidden = No
map archive = Yes
locking = Yes
strict locking = No
share modes = Yes
oplocks = Yes
only user = No
wide links = Yes
follow symlinks = Yes
sync always = No
strict sync = No
mangled names = Yes
fake oplocks = No
printing = bsd
print command = lpr -r -P%p -J%m %s
lpq command = lpq -P%p
lprm command = lprm -P%p %j
lppause command =
lpresume command =
queuepause command =
queueresume command =
printer =
printer driver = NULL
printer driver location =
hosts allow hosts deny =
dont descend =
magic script =
magic output =
mangled map =
delete readonly = No
dos filetimes = No
dos filetime resolution = No
fake directory create times = No
[homes]
comment = Directori Home d'en %U
browseable = No
read only = No
create mask = 0700
wide links = No
[scratch]
comment = Directori temporal a %h
path = /usr/local/samba/shares/scratch
read only = No
create mask = 0755
wide links = No
[netlogon]
comment = Scripts d'inicialitzacio de la xarxa
path = /usr/local/samba/shares/netlogon
write list = @admsamba
force group = admsamba
create mask = 0775
directory mask = 0775
oplocks = No
[software]
comment = Software docent
path = /usr/local/samba/shares/software
write list = @admsamba
force group = admsamba
create mask = 0775
directory mask = 0775
oplocks = No
... other services ...
[IPC$]
comment = IPC Service (Servidor FUSIO de l'LCFIB)
path = /tmp
status = No
guest ok = Yes
We have solved our problem. As I expect, it was Windows fault. In the netlogon process, Windows seems to make a broadcast to find the server that validates its password. If the server response lates too much Windows fails to validate (this is my hypothesis). We have found the solution in the MS TechNet Knownledge base of October (Article Q185969) This article talks about a newer version of the MSNET32.DLL in windows\system. This newer version lets specify in the registry the prefered server to validate the netlogon against. While we are waiting for microsoft to send us this DLL, we have tried the version shipped with Windows 98 and it worked. Miquel Bonastre wrote:> > Hi, > > We use Samba 1.9.18p10 on a Digital Unix alpha workstation > as file server for our users. In rush hour there are 80-100 > clients connected to the server. It works fine almost all > the time but sometimes we have problems with the login > from Windows 95. > > When the problem appears the user enters username, password > and domain and it displays the message > > - Cannot found the shared resource. Be sure it's correctly > specified > > or > > - The specified password is incorrect or the access is denied. > > (This are translations from the spanish messages) > > sometimes the user only needs to press enter again on the > authentication window (so the password was correct), > sometimes he needs to try a lot (5-6 times) and sometimes > it never works. > > This problems never appears with the same operation from > a dos client (using Lanman client), so we thing is a Windows > 95 problem, but there should be something in the server > that forces it. > > It doesn't seem to be related to the number of clients connected > because we have had 110 clients at the same time without > any problem and it has appeared with only 50 clients. > > Now we are trying to monitors the net and disk activity to > try to see if the server load is the cause but when the problem > appears an interactive session with the server works fine. > > Has someone any idea about why this problem could appear? > > Please, bring me ideas about where to search the causes, > parameters that I should review, windows 95 configuration, ... > > Where can I found information about timing parameters > on the makefile? > > Which is the daemon that serves the netlogon? nmbd, smbd or both? > > Thank you very much.-- Miquel Bonastre (miquel@fib.upc.es) Area de Sistemes Unix (LCFIB) Facultat d'Informatica de Barcelona Universitat Politecnica de Catalunya