thr3ads.net - samba - [Samba] 75 seconds timeout when negotiating with smbd. [Nov 2006]

If this information is useful, please help other people find it:
Share via:

Aleksandr Vinokurov

2006-Nov-29 09:22 UTC

[Samba] 75 seconds timeout when negotiating with smbd.

Hello all,

After upgrading to 3.0.23c on my FreeBSD 6.1 box Samba stopped working 
on any connections. When connecting to smbd, tcp session is established 
(SYN, SYN+ACK, ACK) then a client send a NEGOTIATION packet, and after 
some timeout (about 10-15 seconds) this tcp session is closed (by the 
client) because no response to NEG. packet was received. Then after 75 
seconds (counting from the ACK packet) the SUCCESS NEG. response is sent 
  by smbd, and this packet is answered by RST as the port is already closed.

Here is the log of smbd:

[2006/11/29 09:30:53, 3] smbd/oplock.c:init_oplocks(862)
   open_oplock_ipc: initializing messages.
[2006/11/29 09:32:08, 0] smbd/notify_fam.c:fam_notify_init(455)
   FAM file change notifications not available
[2006/11/29 09:32:08, 3] lib/access.c:check_access(312)
   check_access: no hostnames in host allow/deny list.


You can see a 75 seconds delay between 1-st and 2-nd entries.

My FreeBSD box runs as a NAT from rl0 to rl1 and as a Samba server for 
rl0, some configuration data is below.

kustik:~# uname -a
FreeBSD kustik 6.1-STABLE FreeBSD 6.1-STABLE #0: Tue Sep 12 09:49:17 UTC 
2006     root@kustik:/usr/obj/usr/src/sys/KUSTIK  i386

kustik:~# ifconfig
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
         options=8<VLAN_MTU>
         inet 10.0.1.8 netmask 0xffffff00 broadcast 10.0.1.255
         inet 10.0.1.1 netmask 0xffffff00 broadcast 10.0.1.255
         ether 00:40:f4:70:8b:e4
         media: Ethernet autoselect (100baseTX <full-duplex>)
         status: active
rl1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
         options=8<VLAN_MTU>
         inet 172.17.11.246 netmask 0xfffffc00 broadcast 172.17.11.255
         ether 00:16:cb:a3:9f:da
         media: Ethernet autoselect (100baseTX <full-duplex>)
         status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
         inet 127.0.0.1 netmask 0xff000000

kustik:~# ipfw show
00300 3926602 3789413783 divert 8668 ip from any to any via rl1
65534 7717861 7560613261 allow ip from any to any
65535       0          0 deny ip from any to any

kustik:~# sockstat -4
USER     COMMAND    PID   FD PROTO  LOCAL ADDRESS         FOREIGN ADDRESS
root     smbd       10548 18 tcp4   10.0.1.8:445          *:*
root     smbd       10548 19 tcp4   10.0.1.8:139          *:*
root     nmbd       10542 6  udp4   *:137                 *:*
root     nmbd       10542 7  udp4   *:138                 *:*
root     nmbd       10542 8  udp4   10.0.1.8:137          *:*
root     nmbd       10542 9  udp4   10.0.1.8:138          *:*
root     sshd       555   3  tcp4   *:22                  *:*
root     natd       264   3  div4   *:8668                *:*


kustik:~# cat /usr/local/etc/smb.conf
[global]
    workgroup = Tuman
    server string = Kustik Samba Server
    security = user
    hosts allow = 10.0.1. 10.0.2. 127.
    guest account = pcguest
    log file = /var/log/samba/log.%m
    log level = 3
    max log size = 5000
    passdb backend = tdbsam
    hostname lookups = no
    load printers = no

# Most people will find that this option gives better performance.
# See the chapter 'Samba performance issues' in the Samba HOWTO
Collection
# and the manual pages for details.
# You may want to add the following on a Linux system:
;   socket options = SO_RCVBUF=8192 SO_SNDBUF=8192

    bind interfaces only = yes
    interfaces = 10.0.1.8/24
    dns proxy = no
;   display charset = UTF-8-MAC
;   unix charset = UTF-8-MAC
    dos charset = cp866

# Use extended attributes to store file modes
     store dos attributes = yes
     map hidden = no
     map system = no
     map archive = no

# Use inherited ACLs for directories
;    nt acl support = yes
;    inherit acls = yes
;    map acl inherit = yes

;[homes]
;   comment = Home Directories
;   browseable = no
;   writable = yes

[Podkustom]
    comment = Kustik's Public
    path = /home/samba
;   geust ok = yes
    public = yes
    writable = yes
    printable = no

[Kanavka]
    comment = FAT Store on Kustik
    path = /mnt/data
    fstype = FAT
    public = yes
    writable = yes
    printable = no

[Flop]
    comment = Flop on Kustik
    path = /flop
    fstype = FAT
    public = yes
    writable = yes
    printable = no


kustik:~# tcpdump -i rl0 -vvn not port 22
tcpdump: listening on rl0, link-type EN10MB (Ethernet), capture size 68 
bytes
12:17:57.716711 IP (tos 0x0, ttl  64, id 29205, offset 0, flags [DF], 
proto: TCP                     (6), length: 64) 10.0.1.12.52698 > 
10.0.1.8.445: S 2296625852:2296625852(0) win                     65535 
<mss 1460,nop,wscale 0,nop,nop,timestamp[|tcp]>
12:17:57.716900 IP (tos 0x0, ttl  83, id 21945, offset 0, flags [DF], 
proto: TCP                     (6), length: 64) 10.0.1.8.445 > 
10.0.1.12.52698: S 3732422950:3732422950(0) ack 
2296625853 win 65535 <mss 1460,nop,wscale 1,nop,nop,timestamp[|tcp]>
12:17:57.717045 IP (tos 0x0, ttl  64, id 29206, offset 0, flags [DF], 
proto: TCP                     (6), length: 52) 10.0.1.12.52698 > 
10.0.1.8.445: ., cksum 0xea89 (correct), 1:1                    (0) ack 
1 win 65535 <nop,nop,timestamp 1066921360 245565308>
12:17:57.748985 IP (tos 0x0, ttl  64, id 29207, offset 0, flags [DF], 
proto: TCP                     (6), length: 235) 10.0.1.12.52698 > 
10.0.1.8.445: P 1:184(183) ack 1 win 65535 
<nop,nop,timestamp 1066921360 245565308>
12:17:57.848389 IP (tos 0x0, ttl  83, id 21948, offset 0, flags [DF], 
proto: TCP                     (6), length: 52) 10.0.1.8.445 > 
10.0.1.12.52698: ., cksum 0x6792 (correct), 1:1                    (0) 
ack 184 win 33212 <nop,nop,timestamp 245565440 1066921360>
12:18:17.748603 IP (tos 0x0, ttl  64, id 29208, offset 0, flags [DF], 
proto: TCP                     (6), length: 52) 10.0.1.12.52698 > 
10.0.1.8.445: F, cksum 0xe925 (correct), 184                    :184(0) 
ack 1 win 65535 <nop,nop,timestamp 1066921400 245565440>
12:18:17.748790 IP (tos 0x0, ttl  83, id 21955, offset 0, flags [DF], 
proto: TCP                     (6), length: 52) 10.0.1.8.445 > 
10.0.1.12.52698: ., cksum 0x19aa (correct), 1:1                    (0) 
ack 185 win 33212 <nop,nop,timestamp 245585343 1066921400>
12:19:12.747727 IP (tos 0x0, ttl  83, id 21969, offset 0, flags [DF], 
proto: TCP (6), length: 183) 10.0.1.8.445 > 10.0.1.12.52698: P 
1:132(131) ack 185 win 33304 <nop,nop,timestamp 245640350 1066921400>
12:19:12.747940 IP (tos 0x0, ttl  64, id 29225, offset 0, flags [DF], 
proto: TCP (6), length: 40) 10.0.1.12.52698 > 10.0.1.8.445: R, cksum 
0x85dc (correct), 2296626037:2296626037(0) win 0


Any help will be very appreciated,
Aleksandr.

Volker Lendecke

2006-Nov-29 09:37 UTC

head link

[Samba] 75 seconds timeout when negotiating with smbd.

On Wed, Nov 29, 2006 at 12:21:47PM +0300, Aleksandr Vinokurov
wrote:> After upgrading to 3.0.23c on my FreeBSD 6.1 box Samba stopped working 
> on any connections. When connecting to smbd, tcp session is established 
> (SYN, SYN+ACK, ACK) then a client send a NEGOTIATION packet, and after 
> some timeout (about 10-15 seconds) this tcp session is closed (by the 
> client) because no response to NEG. packet was received. Then after 75 
> seconds (counting from the ACK packet) the SUCCESS NEG. response is sent 
>  by smbd, and this packet is answered by RST as the port is already closed.
Can you get us a debug level 10 log? Next step would be an
strace of that smbd (strace in the linux sense, no idea if
it's the same name under bsd) and a sniff.

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20061129/4711b04d/attachment.bin

Volker Lendecke

2006-Nov-29 10:58 UTC

head link

[Samba] 75 seconds timeout when negotiating with smbd.

On Wed, Nov 29, 2006 at 01:19:29PM +0300, Aleksandr Vinokurov
wrote:> The log you have requested is attached. Please describe what more 
> sniffing you need, more than a tcpdump from my previous mail?
> A whole 'tcpdump -s 0' or what?
stdout of tcpdump is useless, what we need is the file that
is produced by tcpdump -s 0 -w /tmp/capture

But in this case it's not necessary I think. I was asking
for the debug level 10 log to see if anything else happens
in that timeout, but it appears not to.

You seem to have a problem with fam, samba seems to attempt
a connection to famd which seems too slow. Either compile
with --enable-fam=no or fix your famd :-)

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20061129/6cd20f96/attachment.bin

Maybe Matching Threads

Search for more possibly parallel threads

samba - Nov 2006 - 75 seconds timeout when negotiating with smbd.

[Samba] 75 seconds timeout when negotiating with smbd.

[Samba] 75 seconds timeout when negotiating with smbd.

[Samba] 75 seconds timeout when negotiating with smbd.

Maybe Matching Threads