Mansell, Gary
2007-Jun-01 07:52 UTC
[Samba] Samba authentication slow after upgrade to Samba 3
Hi,
I have just upgraded a server from Samba 2 to Samba 3 and some of the
Windows clients are taking a long time to authenticate shares (1 or 2
minutes). Eventually the username/password box appears and then when you
enter a correct password, all is fine - it is just the initial
authentication.
This is a simple UNIX password Samba server (with NIS) and I have set it
to not use encrypted passwords.
I get these errors, repeatedly, in the messages file:
[2007/06/01 08:29:26, 2] auth/pampass.c:smb_pam_auth(514)
smb_pam_auth: PAM: Athentication Error for user mcr3
[2007/06/01 08:29:26, 2] auth/pampass.c:smb_pam_error_handler(73)
smb_pam_error_handler: PAM: Authentication Failure : Authentication
failure
[2007/06/01 08:29:26, 0] auth/pampass.c:smb_pam_passcheck(810)
smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User mcr3 !
Here is my testparm output:
# Global parameters
[global]
workgroup = DFGSRV
server string = dfgsrv Samba Server %v
encrypt passwords = No
password level = 8
username level = 8
log level = 2
log file = /var/log/samba/%m.log
max log size = 200
deadtime = 30
socket options = SO_KEEPALIVE SO_BROADCAST TCP_NODELAY
IPTOS_THROUGHPUT
dns proxy = No
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
cups options = raw
oplocks = No
level2 oplocks = No
[homes]
comment = Home Directories
read only = No
create mask = 0664
directory mask = 0775
Any help gladly received as it is taking some of my users half an hour
to disconnect from their previously mapped shares and to reconnect to
them.
The problem persists if a user logs out and back in again and after a
Windows client machine reboot.
Regards
Gary
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - -
This e-mail and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.If you
have received this e-mail in error please notify the sender immediately and
delete this e-mail from your system.Please note that any views or opinions
presented in this e-mail are solely those of the author and do not necessarily
represent those of Ricardo (save for reports and other documentation formally
approved and signed for release to the intended recipient).Only Directors are
authorised to enter into legally binding obligations on behalf of Ricardo.
Ricardo may monitor outgoing and incoming e-mails and other telecommunications
systems.
By replying to this e-mail you give consent to such monitoring.The recipient
should check e-mail and any attachments for the presence of viruses. Ricardo
accepts no liability for any damage caused by any virus transmitted by this
e-mail. "Ricardo" means Ricardo plc and its subsidiary companies.
Ricardo plc is a public limited company registered in England with registered
number 00222915.
The registered office of Ricardo plc is Shoreham Technical Centre, Shoreham-by
Sea, West Sussex, BN43 5FG.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - -
Gary Mansell
2007-Jun-01 08:19 UTC
[Samba] Re: Samba authentication slow after upgrade to Samba 3
I have a gut feeling that this is to do with encrypted passwords. I have "encrypt passwords = no" set and pc's have the clear text password hack - could this be causing it? I really don't want to go t encrypted passwords if I can help it as it will mean another password file to keep in sync. Regards Gary
Mansell, Gary
2007-Jun-05 12:05 UTC
[Samba] Samba authentication slow after upgrade to Samba 3
This is really frustrating me - I cannot seem to resolve the problem. Some users can connect no problem and others take a long time. The users that take a long time leave lots of entries in the messages file: Jun 5 13:00:33 dfgsrv2 smbd[9148]: [2007/06/05 13:00:33, 0] auth/pampass.c:smb_pam_passcheck(810) Jun 5 13:00:33 dfgsrv2 smbd[9148]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User rma ! Jun 5 13:00:34 dfgsrv2 smbd[10665]: [2007/06/05 13:00:34, 0] auth/pampass.c:smb_pam_passcheck(810) Jun 5 13:00:34 dfgsrv2 smbd[10665]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User amcq ! Jun 5 13:00:36 dfgsrv2 smbd[9148]: [2007/06/05 13:00:36, 0] auth/pampass.c:smb_pam_passcheck(810) Jun 5 13:00:36 dfgsrv2 smbd[9148]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User rma ! Jun 5 13:00:36 dfgsrv2 smbd[10670]: [2007/06/05 13:00:36, 0] auth/pampass.c:smb_pam_passcheck(810) Jun 5 13:00:36 dfgsrv2 smbd[10670]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User amcq ! Jun 5 13:00:38 dfgsrv2 smbd[9148]: [2007/06/05 13:00:38, 0] auth/pampass.c:smb_pam_passcheck(810) Jun 5 13:00:38 dfgsrv2 smbd[9148]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User rma ! Jun 5 13:00:38 dfgsrv2 smbd[10671]: [2007/06/05 13:00:38, 0] auth/pampass.c:smb_pam_passcheck(810) Jun 5 13:00:38 dfgsrv2 smbd[10671]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User amcq ! Jun 5 13:00:40 dfgsrv2 smbd[9148]: [2007/06/05 13:00:40, 0] auth/pampass.c:smb_pam_passcheck(810) Jun 5 13:00:40 dfgsrv2 smbd[9148]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User rma ! Jun 5 13:00:43 dfgsrv2 smbd[9148]: [2007/06/05 13:00:43, 0] auth/pampass.c:smb_pam_passcheck(810) Jun 5 13:00:43 dfgsrv2 smbd[9148]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User rma ! Jun 5 13:00:45 dfgsrv2 smbd[9148]: [2007/06/05 13:00:45, 0] auth/pampass.c:smb_pam_passcheck(810) Jun 5 13:00:45 dfgsrv2 smbd[9148]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User rma ! Jun 5 13:00:47 dfgsrv2 smbd[9148]: [2007/06/05 13:00:47, 0] auth/pampass.c:smb_pam_passcheck(810) Jun 5 13:00:47 dfgsrv2 smbd[9148]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User rma ! Jun 5 13:00:50 dfgsrv2 smbd[9148]: [2007/06/05 13:00:50, 0] auth/pampass.c:smb_pam_passcheck(810) Jun 5 13:00:50 dfgsrv2 smbd[9148]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User rma ! Jun 5 13:00:51 dfgsrv2 smbd[10681]: [2007/06/05 13:00:51, 0] auth/pampass.c:smb_pam_passcheck(810) Jun 5 13:00:51 dfgsrv2 smbd[10681]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User amcq ! I have upgraded my version of Samba to the latest one for RHEL 4 - samba-3.0.10-1.4E.12.2 Anyone got any ideas? On Fri, 2007-06-01 at 08:32 +0100, Mansell, Gary wrote:> Hi, > > I have just upgraded a server from Samba 2 to Samba 3 and some of the > Windows clients are taking a long time to authenticate shares (1 or 2 > minutes). Eventually the username/password box appears and then when you > enter a correct password, all is fine - it is just the initial > authentication. > > This is a simple UNIX password Samba server (with NIS) and I have set it > to not use encrypted passwords. > > I get these errors, repeatedly, in the messages file: > > [2007/06/01 08:29:26, 2] auth/pampass.c:smb_pam_auth(514) > smb_pam_auth: PAM: Athentication Error for user mcr3 > [2007/06/01 08:29:26, 2] auth/pampass.c:smb_pam_error_handler(73) > smb_pam_error_handler: PAM: Authentication Failure : Authentication > failure > [2007/06/01 08:29:26, 0] auth/pampass.c:smb_pam_passcheck(810) > smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User mcr3 ! > > > Here is my testparm output: > > # Global parameters > [global] > workgroup = DFGSRV > server string = dfgsrv Samba Server %v > encrypt passwords = No > password level = 8 > username level = 8 > log level = 2 > log file = /var/log/samba/%m.log > max log size = 200 > deadtime = 30 > socket options = SO_KEEPALIVE SO_BROADCAST TCP_NODELAY > IPTOS_THROUGHPUT > dns proxy = No > idmap uid = 16777216-33554431 > idmap gid = 16777216-33554431 > cups options = raw > oplocks = No > level2 oplocks = No > > [homes] > comment = Home Directories > read only = No > create mask = 0664 > directory mask = 0775 > > Any help gladly received as it is taking some of my users half an hour > to disconnect from their previously mapped shares and to reconnect to > them. > > The problem persists if a user logs out and back in again and after a > Windows client machine reboot. > > Regards > > Gary > > - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - > This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed.If you have received this e-mail in error please notify the sender immediately and delete this e-mail from your system.Please note that any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of Ricardo (save for reports and other documentation formally approved and signed for release to the intended recipient).Only Directors are authorised to enter into legally binding obligations on behalf of Ricardo. Ricardo may monitor outgoing and incoming e-mails and other telecommunications systems. > By replying to this e-mail you give consent to such monitoring.The recipient should check e-mail and any attachments for the presence of viruses. Ricardo accepts no liability for any damage caused by any virus transmitted by this e-mail. "Ricardo" means Ricardo plc and its subsidiary companies. > Ricardo plc is a public limited company registered in England with registered number 00222915. > The registered office of Ricardo plc is Shoreham Technical Centre, Shoreham-by Sea, West Sussex, BN43 5FG. > - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - --- ------------------------------------------------------------------------------------ Gary Mansell Team Leader - Technical Computing Ricardo UK Ltd. Shoreham Technical Centre, Shoreham-By-Sea, West Sussex, BN43 5FG Email : Gary.Mansell@ricardo.com Dial : +44 (0)1273 794485 | Fax :+44 (0)1273 794699 A subsidiary of Ricardo plc. - www.ricardo.com ------------------------------------------------------------------------------------