samba - Jun 2006 - Problems with Samba 3.0.22 and Fedora Core 5 64 bits (Urgent, please)

Hi !!

I have already sent this message to the list, but, as I have not received
any replies, I am trying again !!

We are facing some problems with Samba 3.0.22 (installed from rpms) and
Fedora Core 5, 64 bits. We are basically using samba as a resource for squid
(2.5 stable13), so it can be able to use ntlm authentication, through
winbind.

After some time running, squid stops responding do requests, and the
following pair of lines gets logged in /var/log/messages

 [2006/06/14 13:42:50, 0] nsswitch/winbindd.c:process_loop(863)
   winbindd: Exceeding 200 client connections, no idle connection found

We still have another Fedora Core 3, 32 bits, running Squid 2.5 Stable12 and
Samba 3.0.20b, and nothing like that happens.

Does anyone know what might be happening?

As a second question, I would like to downgrade Samba 3.0.22 to Samba
3.0.20b, but I didn?t find any rpms available, and I am unsure if there are
any specific compilation options that should be used. Can anybody point me
the right options to compile a 64 bit version of Samba?

Thanks in advance,
Carlos.

On Wed, Jun 14, 2006 at 08:11:30PM -0300, Carlos Zottmann
wrote:
> [2006/06/14 13:42:50, 0] nsswitch/winbindd.c:process_loop(863)
>   winbindd: Exceeding 200 client connections, no idle connection found
How many ntlm auth helpers do you have configured in your
squid?

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20060615/2cacf1b7/attachment.bin

Hi !!

Thanks for answering !!

Our Squid configuration, regarding ntlm, is the following:

auth_param ntlm program /usr/bin/ntlm_auth --helper-protocolsquid-2.5-ntlmssp
auth_param ntlm children 60
auth_param ntlm max_challenge_reuses 100
auth_param ntlm max_challenge_lifetime 20 minutes
auth_param ntlm use_ntlm_negotiate on

We are using "max_challenge_reuses" as a way to get fewer log lines at
Microsoft AD, due to a problem regarding the windows server freezing with
large log files.

Anyway, we have another Squid box, configured the exact same way, but it
runs Fedora Core 3, 32 bits, running Squid 2.5 Stable12 and Samba 3.0.20b.

Thanks again !!
Carlos.

2006/6/15, Volker Lendecke
<Volker.Lendecke@sernet.de>:
>
> On Wed, Jun 14, 2006 at 08:11:30PM -0300, Carlos Zottmann wrote:
> > [2006/06/14 13:42:50, 0] nsswitch/winbindd.c:process_loop(863)
> >   winbindd: Exceeding 200 client connections, no idle connection found
>
> How many ntlm auth helpers do you have configured in your
> squid?
>
> Volker
>
>
>

Hi, Volker,

It?s been a while since I?ve sent this topic to the list, but here goes an
update to it ..

We have reinstalled our server with Fedora Core 3, 32 bit version,
samba-3.0.8-0.pre1.3, and Squid-2.5.STABLE-12, all with the same
configurations as in the Fedora Core 5 installation, and everthing is
working well.

I think that the problem we were facing is related to the 64 bit version of
samba, as the problem was related to winbind ...

Regards,
Carlos.

2006/6/18, Volker Lendecke
<Volker.Lendecke@sernet.de>:
>
> On Fri, Jun 16, 2006 at 04:17:44PM -0300, Carlos Zottmann wrote:
> > OK, I?ll try that ... If it doesn?t work, how could we increase the
> number
> > of client connections accepted by winbind?
>
> By recompiling. But as I see it, more than 200 active
> connections point to problems in other areas. I suspect that
> increasing it will show the same error message with a
> different number.
>
> Volker
>
>
>