samba - May 2005 - Unstable connection to AD

Hi!

We got a problem when authenticating our user on our samba-server. It seems
like the connection to our ADS drops now and then. When being up it runs
very nice.

Running "getent passwd" works well and also seems to establish the
contact
again for a while, atleast winbind stops reporting that users doesn't exist.

We have reasonally had reason to reboot our firewall because the new version
of Azurius seems to overload it. But now there aren't any torrents running
at all and the problem with samba continues.

We have updatated to the lastest patches on our ADS ( 2003). But there are
no related messages in the Eventlog.

Right now I have added a cronjob that runs getent passwd once every minute
but that doesn't seems like the ideal solution.

Does anyone have any idea about what could cause this kind of problem? We
have run out of ideas.

Thanks in advance
Roland Carlsson

Hi again!

I re-read my post and realized that I missed a few things:

OS: Suse 9.2 professional
Samba: Version 3.0.9-2.3-SUSE
Kerberos version: Heimdal 0.6.2
ADS: Windows 2003 sp1 (all patches till today)

-------Smb-conf-----------------

[global]
        workgroup = ALFA-MOVING
        realm = ALFA-MOVING.SE
        security = ADS
        map to guest = Bad User
        log level = 5
        syslog = 5
        printcap name = cups
        preferred master = No
        local master = No
        domain master = No
        dns proxy = No
        ldap idmap suffix = ou=Idmap
        ldap machine suffix = ou=Computers
        ldap suffix = dc=ALFA-MOVING,dc=SE
        ldap ssl = no
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        printer admin = @ntadmin, root, administrator
        include = /etc/samba/dhcp.conf

[printers]
        comment = All Printers
        path = /var/spool/samba
        guest ok = Yes
        printable = Yes
        use client driver = Yes
        browseable = No

[gemensam]
        path = /share/gemensam
        read only = No
        create mask = 0777
        directory mask = 0777

[j?nk?ping]
        path = /share/j?nk?ping
        read only = No
        create mask = 0777
        directory mask = 0777

[g?teborg]
        path = /share/g?teborg
        read only = No
        create mask = 0777
        directory mask = 0777

[malm?]
        path = /share/malm?
        read only = No
        create mask = 0777
        directory mask = 0777

[oslo]
        path = /share/oslo
        read only = No
        create mask = 0777
        directory mask = 0777

[stockholm]
        path = /share/stockholm
        read only = No
        create mask = 0777
        directory mask = 0777

[home]
        path = /share/home
        read only = No
-------------------------------

krb5.conf
---------------
[libdefaults]
                #       default_realm = MY.REALM
        clockskew = 300
        default_realm = ALFA-MOVING.SE

[realms]
ALFA-MOVING.SE = {
        kdc = 192.168.10.10
        kpasswd_server = 192.168.10.10
}
#       MY.REALM = {
#               kdc = MY.COMPUTER
#               admin_server = MY.COMPUTER
#               kpasswd_server = MY.COMPUTER
#       }
#       OTHER.REALM = {
#               kdc = OTHER.COMPUTER
#       }

[domain_realm]
#       .my.domain = MY.REALM

[logging]
        default = SYSLOG:NOTICE:DAEMON
        kdc = FILE:/var/log/kdc.log
        kadmind = FILE:/var/log/kadmind.log

[appdefaults]
pam = {
        ticket_lifetime = 7d
        renew_lifetime = 7d
        forwardable = true
        proxiable = false
        retain_after_close = false
        minimum_uid = 0
        debug = false
}

------------------

Thanks in advance
Roland Carlsson


Den 05-05-04 08.38, skrev "Roland Carlsson"
<roland@alfa-moving.se>:
> Hi!
> 
> We got a problem when authenticating our user on our samba-server. It seems
> like the connection to our ADS drops now and then. When being up it runs
> very nice.
> 
> Running "getent passwd" works well and also seems to establish
the contact
> again for a while, atleast winbind stops reporting that users doesn't
exist.
> 
> We have reasonally had reason to reboot our firewall because the new
version
> of Azurius seems to overload it. But now there aren't any torrents
running
> at all and the problem with samba continues.
> 
> We have updatated to the lastest patches on our ADS ( 2003). But there are
> no related messages in the Eventlog.
> 
> Right now I have added a cronjob that runs getent passwd once every minute
> but that doesn't seems like the ideal solution.
> 
> Does anyone have any idea about what could cause this kind of problem? We
> have run out of ideas.
> 
> Thanks in advance
> Roland Carlsson
>