samba - Oct 2006 - Resolve Domain

Dear list,

Samba allows our school to use on non-free operation systems on work 
stations. Or should I rather put it this way: In combination with 
Debian-Edu, Samba allows us to use free operations systems on servers 
and work stations despite the fact that some colleagues stick to 
Windows...

Now, we observe a problem that still needs to be examined further on:
If the server has been running for several hours, after a longer 
intermission of few hours whith no traffic at all, Windows won't find 
the samba domain any more. 

Trying to start some debugging remotely (via ssh), I found this. Maybe 
you can assist in interpretations, please. Note that this installation 
was based on a early prerelease of DebianEdu that was manually adapted. 
Currently samba runs at version 3.0.10-1   


smbtree -D
added interface ip=10.0.2.2 bcast=10.0.3.255 nmask=255.255.254.0
added interface ip=192.168.0.254 bcast=192.168.0.255 nmask=255.255.255.0
Password:
resolve_lmhosts: Attempting lmhosts lookup for name SKOLELINUX<0x1d>
name_resolve_bcast: Attempting broadcast lookup for name 
SKOLELINUX<0x1d>
resolve_lmhosts: Attempting lmhosts lookup for name SKOLELINUX<0x1b>
resolve_wins: Attempting wins lookup for name SKOLELINUX<0x1b>
resolve_wins: using WINS server 127.0.0.1 and tag '*'
name_resolve_bcast: Attempting broadcast lookup for name 
SKOLELINUX<0x1b>
name_resolve_bcast: Attempting broadcast lookup for name 
__MSBROWSE__<0x1>
Got a positive name query response from 10.0.3.194 ( 10.0.3.194 )
Got a positive name query response from 10.0.3.242 ( 10.0.3.242 )
resolve_lmhosts: Attempting lmhosts lookup for name JHF<0x1d>
name_resolve_bcast: Attempting broadcast lookup for name JHF<0x1d>
Got a positive name query response from 10.0.3.242 ( 10.0.3.242 )
Connecting to host=10.0.3.242
Connecting to 10.0.3.242 at port 445
Doing spnego session setup (blob length=16)
server didn't supply a full spnego negprot
Got challenge flags:
Got NTLMSSP neg_flags=0x608a0215
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60080215
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60080215
SPNEGO login failed: Logon failure
JHF
ARBEITSGRUPPE

I'd also be glad for further debugging hints.
Thanks
Ralf

Am Sonntag 29 Oktober 2006 16:39 schrieb
RalfGesellensetter:
> I'd also be glad for further debugging hints.
> Thanks
> Ralf
Googling on for lmhosts, I found some hints to delete wins.dat and 
lmhosts.dat and then restart samba. Afterwards, the domain seems to be 
found, again:

# This script is a trial to clean up SAMBA
/etc/init.d/samba stop
rm /var/cache/samba/browse.dat
rm /var/lib/samba/wins.dat
/etc/init.d/samba start

resolve_lmhosts: Attempting lmhosts lookup for name SKOLELINUX<0x1d>
name_resolve_bcast: Attempting broadcast lookup for name 
SKOLELINUX<0x1d>
Connecting to host=192.168.0.254
Connecting to 192.168.0.254 at port 445
Doing spnego session setup (blob length=58)
got OID=1 3 6 1 4 1 311 2 2 10
got principal=NONE
Got challenge flags:
Got NTLMSSP neg_flags=0x60890215
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60080215
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60080215
name_resolve_bcast: Attempting broadcast lookup for name 
__MSBROWSE__<0x1>
Got a positive name query response from 10.0.3.194 ( 10.0.3.194 )
Got a positive name query response from 10.0.3.242 ( 10.0.3.242 )
Connecting to host=10.0.3.242
Connecting to 10.0.3.242 at port 445
Doing spnego session setup (blob length=16)
server didn't supply a full spnego negprot
Got challenge flags:
Got NTLMSSP neg_flags=0x608a0215
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60080215
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60080215
SPNEGO login failed: Logon failure
SKOLELINUX
JHF
ARBEITSGRUPPE

Now, do I have to run that script every N hours? How can I autotrigger 
it whenever the domain gets lost? How can I fix caching so the script 
gets surflicious?

Cheers
Ralf