samba - Jul 2007 - PDC: Windows xp sp2 reboots when login onto domain

Dear all,

I have installed Debian Etch (Samba 3.0.24) in PDC role, with 2 Windows XP SP2 
clients. When I try to join the domain in any of the clients, the machine 
suddenly reboots (both). Both are fresh Windows installs. This is my smb.conf 
file. Any ideas?

##### Begin smb.conf #####
# /etc/samba/smb.conf
# Samba configuration file
# last updated: 25072007 by mendi

[global]
### Basic Server Settings ###
netbios name = BF
server string = BlueFactory Samba Server
workgroup = BLUEFACTORY

### PDC and master browsing settings ###
security = user
encrypt passwords = true
domain logons = yes
os level = 64
local master = yes
preferred master = yes
domain master = yes
browse list = yes
wins support = yes

### Security and performance ###
syslog = 0
log file = /var/log/samba/bluefactory.log
log level = 2
max log size = 50000   # In Kilobytes
hosts allow = 127.0.0.1 192.168.0.0/24
socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192

client schannel = yes
server schannel = yes
client signing = yes
server signing = yes

### Pass backend ###
passdb backend = tdbsam
username map = /etc/samba/smbusers

### User Profiles and Home directories ###
logon script = netlogon.cmd
logon drive = Z:                # Drive letter for home directory
logon home = \\%L\%U\.profile   # Profile location for 95/98. Only used by 
these.
logon path = \\%L\profiles\%U   # Profile location for NT/2000/XP

### Automatic machine account creation ###
add machine script = /etc/samba/scripts/smb-addMachine %u

### UNIX and Windows account syncing ###
add user script = /etc/samba/scripts/smb-addUser %u
delete user script = /etc/samba/scripts/smb-rmUser %u
add group script = /etc/samba/scripts/smb-addGroup %g
delete group script = /etc/samba/scripts/smb-rmGroup %g
add user to group script = /etc/samba/scripts/smb-addUserToGroup %u %g
delete user from group script = /etc/samba/scripts/smb-rmUserFromGroup %u %g

### UNIX and Windows password syncing ###
pam password change = yes

# Los compartidos homes y netlogon son necesarios para el domino
#
[homes]
	comment = Home Directories
	browseable = no
	writable = yes
	create mask = 0700
	directory mask = 0700
	hide dot files = Yes
	# Manda un mensaje de bienvenida a los usuarios
	preexec = /etc/samba/scripts/smb-userLogin %u %m %S %I
	postexec = /etc/samba/scripts/smb-userLogout %u %m %S %I

[netlogon]
	comment = Network Logon Service
	path = /mnt/raid/netlogon
	browseable = no
	writable = no
	preexec = /etc/samba/scripts/smb-userLogin %u %m %S %I
	postexec = /etc/samba/scripts/smb-userLogout %u %m %S %I

[profiles]
	comment = Roaming Profile Share
	path = /mnt/raid/profiles
	browseable = yes
	guest ok = yes
	writable = yes
	read only = no
	# This  stands  for  client-side  caching  policy,  and  specifies how
	# clients capable of offline caching  will  cache  the  files  in  the
	# share. The valid values are: manual, documents, programs, disable.
	# For  example,  shares  containing  roaming profiles can have offline
	# caching disabled using csc policy = disable.
	csc policy = disable
	# Esto es importante para versiones nuevas de Windows XP y 2000
	profile acls = yes
	create mask = 0600
	directory mask = 0700
	preexec = /etc/samba/scripts/smb-userLogin %u %m %S %I
	postexec = /etc/samba/scripts/smb-userLogout %u %m %S %I

[data]
	comment = Datos privados de BlueFactory
	path = /mnt/raid/pool
	browseable = no
	valid users = @bluefactory, @invitados
	read only = yes
	write list = @bluefactory
	force group = bluefactory
	create mask = 0664
	directory mask = 2775
	preexec = /etc/samba/scripts/smb-userLogin %u %m %S %I
	postexec = /etc/samba/scripts/smb-userLogout %u %m %S %I
##### End smb.conf #####

Cheers,

Mendi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url :
http://lists.samba.org/archive/samba/attachments/20070726/1315bc71/attachment.bin

Jose Manuel D. Mendinueta wrote:
> Dear all,
> 
> I have installed Debian Etch (Samba 3.0.24) in PDC role, with 2 Windows XP
SP2
> clients. When I try to join the domain in any of the clients, the machine 
> suddenly reboots (both).
Bazaar indeed!

Debian Etch gave me much grief a few months back, so "at the last
minute" I reloaded the demo server with Ununtu Server 7.04 and THANKFULLY
Samba behaved much better on that.

I had been using Debian Sarge since before Sarge went stable.

Upon returning from the presentation, the Debian Etch version released to Stable
was 3.0.24-6etch4_i386 and those packages worked fine. Previously I had been
fighting with -6etch1 and -6etch2 versions
without success. As I reloaded the demo server, of course success finally was on
"another load". (shrug) Maybe if you ever had -6etch1 and/or -6etch2
versions on the server in question, you best
*PURGE* them and install -6etch4 (at least, I do not know if newer is now
available) versions.

-- 
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/

I am completely desperate.

I purged the packages, and installed las Etch version, and the same thing: 
when the user name and pass is introduced on any Windows machine, it suddenly 
reboots.

There were some messages in the Event Log, relating to msgina.dll crahs. I 
have tried with MS Knowledge base, but is useless.

Finally, I installed the pdc on a laptop with Debian Sid, samba 3.0.25a, and 
the same thing...

After googling to find out information, I don not understand how this happens 
only to me.

Solution: create local accounts, and map the network drives data and homes, so 
users can access their shares, but not roaming profile.

Cheers,

Jose Manuel Delgado Mendinueta

El Monday 30 July 2007 04:39:45 Michael Lueck escribi?:
> Jose Manuel D. Mendinueta wrote:
> > Dear all,
> >
> > I have installed Debian Etch (Samba 3.0.24) in PDC role, with 2
Windows
> > XP SP2 clients. When I try to join the domain in any of the clients,
the
> > machine suddenly reboots (both).
>
> Bazaar indeed!
>
> Debian Etch gave me much grief a few months back, so "at the last
minute" I
> reloaded the demo server with Ununtu Server 7.04 and THANKFULLY Samba
> behaved much better on that.
>
> I had been using Debian Sarge since before Sarge went stable.
>
> Upon returning from the presentation, the Debian Etch version released to
> Stable was 3.0.24-6etch4_i386 and those packages worked fine. Previously I
> had been fighting with -6etch1 and -6etch2 versions without success. As I
> reloaded the demo server, of course success finally was on "another
load".
> (shrug) Maybe if you ever had -6etch1 and/or -6etch2 versions on the server
> in question, you best *PURGE* them and install -6etch4 (at least, I do not
> know if newer is now available) versions.
>
> --
> Michael Lueck
> Lueck Data Systems
> http://www.lueckdatasystems.com/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url :
http://lists.samba.org/archive/samba/attachments/20070803/ada2ebb2/attachment.bin

In the lab I was working we had 10 computers, and the same thing. When the 
Samba PDC and the computers were installed, all was fine. The computers of 
the lab were updated regularly, and everything is working fine.

The problem is with a new network I am installing in other company. I think 
that the problem could be related with only newly installed computers, or 
maybe related with profile creation: I mean, with SP2 msgina.dll, if the 
profile is not in the server, the client crashes (as no file is created in 
the Samba server profile folder for the user).

Anyway, I am astonished because I think this is an important problem that 
should happen with XP SP2 installations, and it seems only a few people is 
suffering it. Maybe there could be some others factors involved, but I used 
vanilla Xp SP2 windows intallations.

Cheers,

Mendi

El Saturday 11 August 2007 21:03:55 John Drescher
escribi?:
> > Please, tell me if this is correct, as this is what I think after
reading
> > the document: the msgina.dll that comes with XP SP2 contains a flaw
that
> > crashes Windows is Samba is acting as PDC, so the solution is to
replace
> > this dll with a previos version (SP1 or so). Is this true?
>
> If this does the effect is only under certain conditions. At work we
> have been running a samba only pdc (using ldap) for about 4 years now
> so we have gone through a lot of service packs and updates and in this
> time I have never seen this problem on 50+ windows XP machines. One
> thing is that for the most part all of my XP machines have all the
> latest updates except for we do not use ie7 since it prevents us from
> accessing a few very important web front ends to a patient info
> system.
>
>
> John

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url :
http://lists.samba.org/archive/samba/attachments/20070811/45c90a5d/attachment.bin

> The problem is with a new network I am installing in other company. I think
> that the problem could be related with only newly installed computers, or
> maybe related with profile creation: I mean, with SP2 msgina.dll, if the
> profile is not in the server, the client crashes (as no file is created in
> the Samba server profile folder for the user).
>
I have not seen this with a freshly installed XP disk that has sp2
built in or via an older XP disk (SP1 or no sp at all)  that was then
upgraded to sp2. This is very puzzling to me. Do you have profile
acls=yes in your smb.conf? I had to use this this since I have
upgraded to samba 3.0.24 from 3.0.20.   Have you set any of the
profile policies using the local system policy snapin on the windows
box? Are you using any type of internet firewall other than windows
firewall. I have seen zonealarm cause an instantaneous reboot with
java streaming apps (stock tickers ...).

John

Jose Manuel D. Mendinueta skrev:
> In the lab I was working we had 10 computers, and the same thing. When the 
> Samba PDC and the computers were installed, all was fine. The computers of 
> the lab were updated regularly, and everything is working fine.
>
> The problem is with a new network I am installing in other company. I think
> that the problem could be related with only newly installed computers, or 
> maybe related with profile creation: I mean, with SP2 msgina.dll, if the 
> profile is not in the server, the client crashes (as no file is created in 
> the Samba server profile folder for the user).
>
> Anyway, I am astonished because I think this is an important problem that 
> should happen with XP SP2 installations, and it seems only a few people is 
> suffering it. Maybe there could be some others factors involved, but I used
> vanilla Xp SP2 windows intallations.
>
> Cheers,
>
> Mendi
Hi Jose

It sounds a bit wierd, that your comnputers crashes if the user profile 
does not exist. Usually missing profiles are created on the client when 
you logon and is copied to the server when you log off.
Have you done anything to the resigtry on your clients?
Check http://www.auditmypc.com/process/msgina.asp

-- 
Rune T?nnesen
Bedste Hilsner/Best Regards