Hi folks, I'm running several samba servers that use "securityserver" and "password server" to point authentications to a WinNT pdc. Snooping at the network traffic, I find that the samba server initially tries to connect to the WinNT server through port 445 (which fails), then reverts to 139 (which succeeds). I know it's possible to use the "samba ports" parameter to control which ports the samba server listens on, but this seems to have no effect on which ports are used to talk to the password server. I'd like to tell the samba server not to try port 445, since the failover seems to add a few seconds to the time necessary for clients to establish a connection to the samba server. Any ideas? BTW, the samba version is 3.0.20. Thanks, Bryan -- =========================================================================Bryan Wright |"If you take cranberries and stew them like Physics Department | applesauce, they taste much more like prunes University of Virginia | than rhubarb does." -- Groucho Charlottesville, VA 22901 | (434) 924-7218 | bryan@virginia.edu ==========================================================================
This is man smb.conf smb ports (G) Specifies which ports the server should listen on for SMB traffic. Default: smb ports = 445 139 So I guess you can just smb ports = 139. On 12/2/05, Bryan K. Wright <bryan@ayesha.phys.virginia.edu> wrote:> Hi folks, > > I'm running several samba servers that use "security> server" and "password server" to point authentications to a > WinNT pdc. Snooping at the network traffic, I find that > the samba server initially tries to connect to the WinNT > server through port 445 (which fails), then reverts to 139 > (which succeeds). I know it's possible to use the > "samba ports" parameter to control which ports the samba > server listens on, but this seems to have no effect on which > ports are used to talk to the password server. > > I'd like to tell the samba server not to try port > 445, since the failover seems to add a few seconds to the > time necessary for clients to establish a connection to the > samba server. > > Any ideas? BTW, the samba version is 3.0.20. > > Thanks, > Bryan > -- > =========================================================================> Bryan Wright |"If you take cranberries and stew them like > Physics Department | applesauce, they taste much more like prunes > University of Virginia | than rhubarb does." -- Groucho > Charlottesville, VA 22901 | > (434) 924-7218 | bryan@virginia.edu > ==========================================================================
On Fri, 2005-12-02 at 20:17 +0000, Bryan K. Wright wrote:> Hi folks, > > I'm running several samba servers that use "security> server" and "password server" to point authentications to a > WinNT pdc. Snooping at the network traffic, I find that > the samba server initially tries to connect to the WinNT > server through port 445 (which fails), then reverts to 139 > (which succeeds). I know it's possible to use the > "samba ports" parameter to control which ports the samba > server listens on, but this seems to have no effect on which > ports are used to talk to the password server. > > I'd like to tell the samba server not to try port > 445, since the failover seems to add a few seconds to the > time necessary for clients to establish a connection to the > samba server. > > Any ideas? BTW, the samba version is 3.0.20.I see two hack ideas: Hack the source to force the port parameter, or setup an firewall rule denying outbound connections to port 445 on the DC (therefore causing the fallback faster). Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20051204/bda419b7/attachment.bin