samba - Nov 2007 - Sometimes users can't connect to the samba shares

Hello,

 

Hope you can help us out with a problem with samba / winbind;

We have samba 3.0.21c with winbind running on an RHEL 4 server. This
runs quite stable for more than a year now.

But since the lasts weeks it appears that sometimes our users can't
connect to the samba shares.

I suspect that this problem has something to do with the integration of
samba (winbind) with the Microsoft Active Directory.

 

Some lines of interest in the log files are:

in the /var/log/samba/client-pc-name.log:

[2007/11/15 21:25:27, 1] smbd/sesssetup.c:reply_spnego_kerberos(322)

  make_server_info_pac failed!

and in the /var/log/messages:

Nov 15 07:08:09 janus winbindd[2352]: [2007/11/15 07:08:09, 0]
lib/util_sock.c:write_data(559)

Nov 15 07:08:09 janus winbindd[2352]:   write_data: write failure. Error
= Connection reset by peer

Nov 15 07:08:09 janus winbindd[2352]: [2007/11/15 07:08:09, 0]
libsmb/clientgen.c:write_socket(138)

Nov 15 07:08:09 janus winbindd[2352]:   write_socket: Error writing 246
bytes to socket 25: ERRNO = Connection reset by peer

Nov 15 07:08:09 janus winbindd[2352]: [2007/11/15 07:08:09, 0]
libsmb/clientgen.c:cli_send_smb(168)

Nov 15 07:08:09 janus winbindd[2352]:   Error writing 246 bytes to
client. -1 (Connection reset by peer)

Nov 15 07:08:09 janus winbindd[2352]: [2007/11/15 07:08:09, 0]
rpc_client/cli_pipe.c:rpc_api_pipe(790)

Nov 15 07:08:09 janus winbindd[2352]:   rpc_api_pipe: Remote machine
TERRA pipe \lsarpc fnum 0x4000returned critical error. Error was Write
error: Connection reset by peer

Nov 15 07:08:09 janus winbindd[2352]: [2007/11/15 07:08:09, 0]
libsmb/clientgen.c:cli_rpc_pipe_close(375)

Nov 15 07:08:09 janus winbindd[2352]:   cli_rpc_pipe_close: cli_close
failed on pipe \lsarpc, fnum 0x4000 to machine TERRA.  Error was Write
error: Success

Nov 15 07:08:10 janus winbindd[2352]: [2007/11/15 07:08:10, 0]
lib/util_sid.c:string_to_sid(285)

Nov 15 07:08:10 janus winbindd[2352]:   string_to_sid: Sid S-0-0 is not
in a valid format.

 

When we try wbinfo -u or -g we get all users and groups successfully,
and this problem does not always appear, but only a few times per week.

 

Do you have any suggestions or hints ?

Can you point us in the right direction where to look for ?

Any help will be appreciated.

 

Many thanks in advance.

 

Frits Heemstra