I have a Samba server (3.0.37) acting as a domain controller for several
computers running Linux, Windows XP, Windows 7, and just recently a Windows
2003 server that replaced a Windows NT server.
A couple times a day, the Windows 2003 server generates an error like the
one below for everyone that attempts to connect to it. Throughout the rest
of the day, there is no issue at all, but several times it will just refuse
connections.
--------------------------------------
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537
Date: 3/22/2011
Time: 2:01:54 PM
User: NT AUTHORITY\SYSTEM
Computer: FLEX1
Description:
Logon Failure:
Reason: An error occurred during logon
User Name: John.Smith
Domain: FLEXSERVICES
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: CWS133
Status code: 0xC000005E
Substatus code: 0x0
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: 192.168.1.133
Source Port: 2621
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
------------------------------------------------------------------
I have checked my Samba logs for the same time period and I don't see any
kind of error entries and googling the status code and event ID together
hasn't produced anything useful so far.
Can anyone give me an idea of how I would go about debugging this situation?
--
View this message in context:
http://samba.2283325.n4.nabble.com/Sporadic-Logon-Issues-from-Windows-2003-tp3397295p3397295.html
Sent from the Samba - General mailing list archive at Nabble.com.
