JAMIE CRAWFORD
2004-May-24 03:47 UTC
[Samba] samba 3 keeps trying to authenticate with the nt4 pdc using port 445
Hello, I'm running redhat enterprise as 3.2 with the included samba 3.0.2-6.3E. I'm trying to make this a domain member server in a nt4 domain. I've successfully joined the domain only after using the net join -p 139 option to force samba to use port 139, otherwise it kept trying to communicate over port 445. (I was watching the syn packets with tethereal). Typing wbinfo -g comes back with "Error looking up domain groups". smbd, nmbd, and winbind all all running with no errors. I tried to use the "smb ports = 139" option in the smb.conf to try to get the server to communicate only with 139, but it seems that it does not work, maybe from xp client to samba server, but not from samba server to nt4 pdc. Is there anyway to force samba to do communicate with my pdc using 139????? Thanks in advance, jamie CAPTURE OF DATA BETWEEN SAMBA SERVER AND PDC 2004-05-23 21:55:05.580707 IP OF SAMBA SERVER -> IP OF PDC TCP 32770 > 445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=14036 TSER=0 WS=0 2004-05-23 21:55:12.917997 IP OF SAMBA SERVER -> IP OF PDC NBNS Name query NBSTAT CENTRAL<1c> 2004-05-23 21:55:12.919868 IP OF PDC -> IP OF SAMBA SERVER NBNS Name query response NBSTAT 2004-05-23 21:55:12.920274 IP OF SAMBA SERVER -> IP OF PDC TCP 32771 > 445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=14769 TSER=0 WS=0 2004-05-23 21:55:15.910702 IP OF SAMBA SERVER -> IP OF PDC TCP 32771 > 445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=15069 TSER=0 WS=0 2004-05-23 21:55:21.910705 IP OF SAMBA SERVER -> IP OF PDC TCP 32771 > 445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=15669 TSER=0 WS=0 2004-05-23 21:55:33.910707 IP OF SAMBA SERVER -> IP OF PDC TCP 32771 > 445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=16869 TSER=0 WS=0 2004-05-23 21:55:53.580710 IP OF SAMBA SERVER -> IP OF PDC TCP 32770 > 445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=18836 TSER=0 WS=0 2004-05-23 21:55:57.910703 IP OF SAMBA SERVER -> IP OF PDC TCP 32771 > 445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=19269 TSER=0 WS=0 SMB.CONF FILE [global] winbind separator = + idmap uid = 10000-20000 idmap gid = 10000-20000 winbind enum users = yes winbind enum groups = yes smb ports = 139 workgroup = mydomain server string = Samba Server printcap name = /etc/printcap load printers = yes log file = /var/log/samba/%m.log max log size = 50 security = domain password server = nameofpdc encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = no #============================ Share Definitions =============================[homes] comment = Home Directories browseable = no writable = yes [printers] comment = All Printers path = /var/spool/samba browseable = no # Set public = yes to allow user 'guest account' to print guest ok = no writable = no printable = yes NSSWITCH.CONF FILE # # /etc/nsswitch.conf # # An example Name Service Switch config file. This file should be # sorted with the most-used services at the beginning. # # The entry '[NOTFOUND=return]' means that the search for an # entry should stop if the search in the previous entry turned # up nothing. Note that if the search failed due to some other reason # (like no NIS server responding) then the search continues with the # next entry. # # Legal entries are: # # nisplus or nis+ Use NIS+ (NIS version 3) # nis or yp Use NIS (NIS version 2), also called YP # dns Use DNS (Domain Name Service) # files Use the local files # db Use the local database (.db) files # compat Use NIS on compat mode # hesiod Use Hesiod for user lookups # [NOTFOUND=return] Stop searching if not found so far # # To use db, put the "db" in front of "files" for entries you want to be # looked up first in the databases # # Example: #passwd: db files nisplus nis #shadow: db files nisplus nis #group: db files nisplus nis passwd: files winbind shadow: files group: files winbind #hosts: db files nisplus nis dns hosts: files dns # Example - obey only what nisplus tells us... #services: nisplus [NOTFOUND=return] files #networks: nisplus [NOTFOUND=return] files #protocols: nisplus [NOTFOUND=return] files #rpc: nisplus [NOTFOUND=return] files #ethers: nisplus [NOTFOUND=return] files #netmasks: nisplus [NOTFOUND=return] files bootparams: nisplus [NOTFOUND=return] files ethers: files netmasks: files networks: files protocols: files rpc: files services: files netgroup: files publickey: nisplus automount: files aliases: files nisplus