Roland Morgenroth
2002-Jul-31 02:39 UTC
[Samba] NT password server problem (under heavy load)
hi, i'm using samba on our HP-UX 11.11 server for years without problems. the samba server is included to a NT domain. the password verification is done on the NT PDC (WINNT01) or BDC (WTS01). since some months our 250 clients update their VIRUS definition files every 2 days at 9 o'clock. (all together at the same time, the clocks are sychronised. not really a good idea, i know.) with samba-2.2.3a there was a message in the log files: --------------------------------------------------------------------------------------- [2002/05/01 09:00:02, 0] rpc_client/cli_netlogon.c:(157) cli_net_auth2: Error NT_STATUS_ACCESS_DENIED [2002/05/01 09:00:02, 0] rpc_client/cli_login.c:(74) cli_nt_setup_creds: auth2 challenge failed [2002/05/01 09:00:02, 0] smbd/password.c:(1335) connect_to_domain_password_server: unable to setup the PDC credentials to machine WINNT01. Error was : NT_STATUS_OK. [2002/05/01 09:00:02, 0] smbd/password.c:(1554) domain_client_validate: Domain password server not available. [2002/05/01 09:00:02, 0] passdb/pdb_smbpasswd.c:(1367) unable to open passdb database. [2002/05/01 09:00:02, 0] passdb/pdb_smbpasswd.c:(1367) unable to open passdb database. [2002/05/03 09:00:07, 0] rpc_client/cli_netlogon.c:(406) cli_net_sam_logon_internal: NT_STATUS_ACCESS_DENIED [2002/05/03 09:00:07, 0] smbd/password.c:(1571) domain_client_validate: unable to validate password for user Administrator in domain KAPP-NT to Domain controller WINNT01. Error was NT_STATUS_ACCESS_DENIED. ---------------------------------------------------------------------------------------- but the whole samba server continues to work. after i updated to 2.2.4 and 2.2.5 the SAMBA server stops working (no response to client PCs) after 9 o'clock for all clients. i see a lot of smbd guest connections, and all i see in the log files (loglevel 3) is: --------------------------------------------------------------------- [2002/07/26 09:00:48, 3] libsmb/namequery.c:(768) resolve_lmhosts: Attempting lmhosts lookup for name KAPP-NT<0x1c> [2002/07/26 09:00:48, 3] libsmb/namequery.c:(709) resolve_wins: Attempting wins lookup for name KAPP-NT<0x1c> [2002/07/26 09:00:48, 3] libsmb/namequery.c:(727) resolve_wins: WINS server == <193.97.224.109> [2002/07/26 09:00:48, 3] lib/util_sock.c:(813) bind succeeded on port 0 [2002/07/26 09:00:48, 2] libsmb/namequery.c:(421) Got a positive name query response from 193.97.224.109 ( 193.97.224.109 193.97.224.59 193.97.224.109 ) [2002/07/26 09:00:48, 3] lib/util_sock.c:(813) bind succeeded on port 0 [2002/07/26 09:00:48, 3] libsmb/namequery.c:(768) resolve_lmhosts: Attempting lmhosts lookup for name WTS01<0x20> [2002/07/26 09:00:48, 3] libsmb/namequery.c:(808) resolve_hosts: Attempting host lookup for name WTS01<0x20> --------------------------------------------------------------------- i have to stop samba, sometimes kill hanging smbd processes and restart it. the rest of the day everything runs fine. is it a SAMBA problem? why get i password verifycation errors with 2.2.3a and only resolver logs before the system hangs with 2.2.5? or a NT PDC problem? (are the password verification connections limited?) any ideas?