samba - Aug 2002 - security = server & Win2k PDC

Hi,

I'm having a problem with the smbd process losing its connection to the
password
server.

Smbd can successfully authenticate a user upon initial connection.  Then after 
some time (within a matter of 10-20 minutes) if the user tries to use the mapped
drive, he sometimes gets prompted with an authentication dialog box.  Nothing 
that is typed into this box will be accepted, and the user cannot use the mapped
drive.

This seems to only occur on Citrix servers where multiple users are connecting 
from the same host.

relevant logs generated when the error occurrs:

[2002/08/05 10:01:22, 1] smbd/password.c:server_validate(1099)
  password server  is not connected
[2002/08/05 10:01:22, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1367)
  unable to open passdb database.
[2002/08/05 10:01:22, 1] smbd/password.c:pass_check_smb(545)
  Couldn't find user 'ryand' in passdb.
[2002/08/05 10:01:22, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1367)
  unable to open passdb database.
[2002/08/05 10:01:22, 1] smbd/password.c:pass_check_smb(545)
  Couldn't find user 'ryand' in passdb.
[2002/08/05 10:01:22, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1367)
  unable to open passdb database.
[2002/08/05 10:01:30, 1] smbd/password.c:server_validate(1099)
  password server  is not connected

smb.conf:
[global]
        workgroup = WORKGROUP
        netbios name = smbserver1
        bind interfaces only = False
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
        nt smb support = no
 
        security = server
        encrypt passwords = yes
        password server = pdcbox
        username map = /tmp/username.map
        keep alive = 20
 
        getwd cache = yes
 
        local master = no
        browse list = Yes
        browseable = Yes
 
        oplocks = True
 
[homes]
        comment = Network Home Directories
        create mode = 0755
        read only = No
        browseable = No


I found this thread from comp.protocols.smb that suggests that there is no fix 
for this: 
http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&threadm=aalpt8%24rt9%241%40benzin.geggus.net&rnum=1&prev=/groups%3Fq%3Dpassword%2Bserver%2B%2Bis%2Bnot%2Bconnected%26hl%3Den%26lr%3D%26ie%3DUTF-8%26selm%3Daalpt8%2524rt9%25241%2540benzin.geggus.net%26rnum%3D1

Is this true?  Does anyone know of a fix for this that still allows for security
= server?

Any help would be greatly appreciated.

Thanks,

Ryan

Ryan Defelice wrote:
> 
> Hi,
> 
> I'm having a problem with the smbd process losing its connection to the
password
> server.
> 
> Smbd can successfully authenticate a user upon initial connection.  Then
after
> some time (within a matter of 10-20 minutes) if the user tries to use the
mapped
> drive, he sometimes gets prompted with an authentication dialog box. 
Nothing
> that is typed into this box will be accepted, and the user cannot use the
mapped
> drive.
> 
> This seems to only occur on Citrix servers where multiple users are
connecting
> from the same host.
Don't use 'security=server' when you have a real PDC.  That's
what
security=domain is for.  Furthermore, due to bugs only (possilby)
corrected in Win2k SP3 you must use Samba 2.2.5 or above, as the PDC
will otherwise randomly refuse authenticaion.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net