Andy Liebman
2007-Nov-08 18:13 UTC
[Samba] Windows bombarding Samba looking for share that does not exist
I have a strange problem and I'm hoping that somebody on the list recognizes what it is. I am running Samba 3.0.23d on a Linux box with 2.6.20.15 kernel. I am connecting from 5 or 6 Windows XP SP 2 boxes. A share on the Linux box exists called "Music" (Note the UPPER CASE "M"). The share is accessible to all users who have smbpasswords on the Linux box. Most Windows users are successfully connecting to the share and mapping it as a network drive. However, ONE Windows machine periodically hits the Linux server with thousands of requests to "connect to service" called "music" (note the lower case "m") instead of "Music". There are thousands of error messages in the logs saying Nov 8 02:45:13 fileserver smbd[8516]: [2007/11/08 02:45:13, 0] smbd/service.c:make_connection(1111) Nov 8 02:45:13 fileserver smbd[8516]: johnpc (10.0.0.43) couldn't find service music This occurs several times a day. When other users try to connect to the share, the samba logs clearly show they are connecting to the service "Music" Is there any way that Windows could have have been told at one point -- or thought it was told -- to connect to a share called "music" and that Windows is stubbornly continuing to try to connect? Even after rebooting the Windows box? Windows definitely never saw a shared called "music" by browsing because a share by that name has never existed on the Linux box. Maybe another clue is that there are also some less frequent errors in the logs that say: Nov 5 02:46:13 fileserver smbd[32209]: make_connection: connection to Music denied due to security descriptor. Nov 5 02:46:13 fileserver smbd[32209]: [2007/11/05 02:46:13, 0] smbd/service.c:make_connection_snum(782) As I said, most users have no problem connecting to this share. Hope this rings a bell for somebody out there... Andy
andyliebman@aol.com
2007-Nov-08 18:25 UTC
[Samba] Windows bombarding Samba looking for share that does not exist
I have a strange problem and I'm hoping that somebody on the list recognizes what it is. I am running Samba 3.0.23d on a Linux box with 2.6.20.15 kernel. I am connecting from 5 or 6 Windows XP SP 2 boxes. There is a share on the Linux box called "Music" (Note the UPPER CASE "M"). The share is accessible to all users who have smbpasswords on the Linux box. Most Windows users are successfully connecting to the share and mapping it as a network drive. However, ONE Windows machine periodically hits the Linux server with thousands of requests to "connect to service" called "music" (note the lower case "m") instead of "Music". There are thousands of error messages in the logs saying Nov 8 02:45:13 fileserver smbd[8516]: [2007/11/08 02:45:13, 0] smbd/service.c:make_connection(1111) Nov 8 02:45:13 fileserver smbd[8516]: johnpc (10.0.0.43) couldn't find service music This occurs several times a day. When other users try to connect to the share, the samba logs clearly show they are connecting to the service "Music" 2007/11/08 10:19:07, 1] smbd/service.c:make_connection_snum(950) office1 (10.0.0.63) connect to service Music initially as user john (uid=507, gid=529) (pid 17601) Is there any way that the problematic Windows machine could have have been told at one point -- or thought it was told -- to connect to a share called "music" and that Windows is stubbornly continuing to try to connect? Even after rebooting the Windows box? Windows definitely never saw a share called "music" by browsing because a share by that name has never existed on the Linux box. Maybe another clue is that there are also some less frequent errors in the logs that say: Nov 5 02:46:13 fileserver smbd[32209]: make_connection: connection to Music denied due to security descriptor. Nov 5 02:46:13 fileserver smbd[32209]: [2007/11/05 02:46:13, 0] smbd/service.c:make_connection_snum(782) As I said, most users have no problem connecting to this share. Hope this rings a bell for somebody out there... Andy ________________________________________________________________________ Email and AIM finally together. You've gotta check out free AOL Mail! - http://mail.aol.com