Nicolas Lathière
2013-Jul-15 16:20 UTC
[Samba] Problem logon on WinXP : returning logon svr \\EASYBOURSE domain EB code 13 token=ffff
HI ! I have a problem with nmbd, i can't logon on a WinXP machine (wfassi-PC ,everything was alright until at a moment user coudnt connect anymore) , here is log.nmbd : [2013/07/15 16:39:26, 5] libsmb/nmblib.c:797(read_packet) Received a packet of len 50 from (192.168.0.89) port 137 [2013/07/15 16:39:26, 4] libsmb/nmblib.c:106(debug_nmb_packet) nmb packet from 192.168.0.89(137) header: id=32801 opcode=Query(0) response=No header: flags: bcast=Yes rec_avail=No rec_des=Yes trunc=No auth=No header: rcode=0 qdcount=1 ancount=0 nscount=0 arcount=0 question: q_name=EB<1c> q_type=32 q_class=1 [2013/07/15 16:39:26, 3] nmbd/nmbd_incomingrequests.c:453(process_name_query_request) process_name_query_request: Name query from 192.168.0.89 on subnet 192.168.0.251 for name EB<1c> [2013/07/15 16:39:26, 3] nmbd/nmbd_incomingrequests.c:568(process_name_query_request) OK [2013/07/15 16:39:26, 4] nmbd/nmbd_packets.c:945(reply_netbios_packet) reply_netbios_packet: sending a reply of packet type: nmb_query EB<1c> to ip 192.168.0.89 for id 32801 [2013/07/15 16:39:26, 4] libsmb/nmblib.c:106(debug_nmb_packet) nmb packet from 192.168.0.89(137) header: id=32801 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=EB<1c> rr_type=32 rr_class=1 ttl=259200 answers 0 char ...... hex E000C0A800FB [2013/07/15 16:39:26, 5] libsmb/nmblib.c:819(send_udp) Sending a packet of len 62 to (192.168.0.89) on port 137 [2013/07/15 16:39:26, 4] nmbd/nmbd_workgroupdb.c:170(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for EB on subnet 192.168.0.251: found. [2013/07/15 16:39:26, 4] nmbd/nmbd_workgroupdb.c:170(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for EB on subnet UNICAST_SUBNET: found. [2013/07/15 16:39:26, 4] nmbd/nmbd_workgroupdb.c:170(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for EB on subnet UNICAST_SUBNET: found. [2013/07/15 16:39:26, 5] libsmb/nmblib.c:797(read_packet) Received a packet of len 266 from (192.168.0.89) port 138 *[2013/07/15 16:39:26, 4] nmbd/nmbd_packets.c:1281(process_dgram)** ** process_dgram: datagram from WFASSI-PC<00> to EB<1c> IP 192.168.0.89 for \MAILSLOT\NET\NETLOGON of type 18 len=92* [2013/07/15 16:39:26, 4] nmbd/nmbd_processlogon.c:116(process_logon_packet) process_logon_packet: Logon from 192.168.0.89: code = 0x12 [2013/07/15 16:39:26, 5] nmbd/nmbd_processlogon.c:354(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST sidsize 24, len = 92 [2013/07/15 16:39:26, 5] nmbd/nmbd_processlogon.c:361(process_logon_packet) process_logon_packet: len = 92 PTR_DIFF(q, buf) = 84 [2013/07/15 16:39:26, 3] nmbd/nmbd_processlogon.c:386(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST sidsize 24 ntv 11 [2013/07/15 16:39:26, 5] nmbd/nmbd_processlogon.c:395(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST user *[2013/07/15 16:39:26, 5] nmbd/nmbd_processlogon.c:402(process_logon_packet)** ** process_logon_packet: LOGON_SAM_LOGON_REQUEST request from WFASSI-PC(192.168.0.89) for , returning logon svr \\EASYBOURSE domain EB code 13 token=ffff* [2013/07/15 16:39:26, 4] ../lib/util/util.c:304(_dump_data) [0000] 15 00 5C 00 5C 00 45 00 41 00 53 00 59 00 42 00 ..\.\.E. A.S.Y.B. [0010] 4F 00 55 00 52 00 53 00 45 00 00 00 00 00 45 00 O.U.R.S. E.....E. [0020] 42 00 00 00 01 00 00 00 FF FF FF FF B....... .... [2013/07/15 16:39:26, 3] nmbd/nmbd_processlogon.c:667(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client WFASSI-PC(192.168.0.89) *[2013/07/15 16:39:26, 4] nmbd/nmbd_packets.c:1972(send_mailslot)** ** send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC042 from EASYBOURSE<00> IP 192.168.0.251 to WFASSI-PC<00> IP 192.168.0.89* [2013/07/15 16:39:26, 4] nmbd/nmbd_packets.c:95(debug_browse_data) debug_browse_data(): 0 char ..\.\.E.A.S.Y.B. hex 15 00 5c 00 5c 00 45 00 41 00 53 00 59 00 42 00 10 char O.U.R.S.E.....E. hex 4f 00 55 00 52 00 53 00 45 00 00 00 00 00 45 00 20 char B........... hex 42 00 00 00 01 00 00 00 ff ff ff ff [2013/07/15 16:39:26, 5] libsmb/nmblib.c:819(send_udp) Sending a packet of len 218 to (192.168.0.89) on port 138 [2013/07/15 16:39:26, 4] nmbd/nmbd_workgroupdb.c:170(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for EB on subnet 192.168.0.251: found. [2013/07/15 16:39:26, 4] nmbd/nmbd_workgroupdb.c:170(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for EB on subnet UNICAST_SUBNET: found. [2013/07/15 16:39:26, 4] nmbd/nmbd_workgroupdb.c:170(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for EB on subnet UNICAST_SUBNET: found. [2013/07/15 16:39:26, 5] libsmb/nmblib.c:797(read_packet) Received a packet of len 50 from (192.168.0.89) port 137 [2013/07/15 16:39:26, 4] libsmb/nmblib.c:106(debug_nmb_packet) nmb packet from 192.168.0.89(137) header: id=32802 opcode=Query(0) response=No header: flags: bcast=Yes rec_avail=No rec_des=Yes trunc=No auth=No header: rcode=0 qdcount=1 ancount=0 nscount=0 arcount=0 question: q_name=ECHANGE<20> q_type=32 q_class=1 I've search informations about this "returning logon svr \\EASYBOURSE domain EB code 13 token=ffff" to fix the pronlem without success Here is my smb.conf : [global] # unix charset = LOCALE workgroup = EB netbios name = EASYBOURSE passdb backend = ldapsam:ldap://albator log level = 5 log file = /var/log/samba/log.%m max log size = 1000 syslog = 1 wins support = true name resolve order = wins bcast hosts time server = Yes server string = %h unix password sync = no smb ports = 139 panic action = /usr/share/samba/panic-action %d delete user script = /usr/sbin/smbldap-userdel %u delete user from group script = /usr/sbin/smbldap-groupmod -x '%u' '%g' add machine script = /usr/sbin/smbldap-useradd -w '%u' add group script = /usr/sbin/smbldap-groupadd -p '%g' delete group script = /usr/sbin/smbldap-groupdel '%g' add user to group script = /usr/sbin/smbldap-groupmod -m '%u' '%g' add user script = /usr/sbin/smbldap-useradd -m '%u' set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u' logon script = logon.bat logon path logon home #check #username map = /etc/samba/smbusers os level = 60 pam password change = Yes domain logons = Yes map untrusted to domain = yes domain logons = Yes domain master = Yes wins support = Yes server signing = auto server schannel = Auto ldapsam:trusted = no ldap suffix = dc=eb,dc=local ldap machine suffix = ou=Computers ldap idmap suffix = ou=Idmap ldap user suffix = ou=Users ldap group suffix = ou=Groups ldap admin dn = cn=admin,dc=eb,dc=local ldap ssl = no obey pam restrictions = Yes dns proxy = No ldap passwd sync = yes printcap name = CUPS printing = cups load printers = yes printer admin = "@lpadmin" root # Domain name .. # Server name - as seen by Windows PCs .. # Be a PDC .. # Be a WINS server .. # Allows users on WinXP PCs to change their password when they press Ctrl-Alt-Del # Printing from PCs will go via CUPS .. # Use LDAP for Samba user accounts and groups .. # This must match init.ldif .. # The password for cn=admin MUST be stored in /etc/samba/secrets.tdb # This is done by running 'sudo smbpasswd -w'. [partage] guest account = easybourse comment = Partage public = yes guest ok = yes writable = yes path = /home/shared/ force directory mode = 755 force create mode = 775 force user = easybourse wide links = no [netlogon] browseable = no comment = Network Logon Service writeable = no admin users = gregory, root path = /var/lib/samba/netlogon write list = @admin wide links = no [printers] comment = Imprimantes path = /var/spool/samba browseable = No printable = Yes writable = No public = Yes guest ok = Yes write list = "@lpadmin", root [print$] comment = Pilotes des imprimantes path = /var/lib/samba/printers guest ok = No browseable = Yes read only = Yes write list = "@lpadmin", root -- *Nicolas LATHIERE* Administrateur Syst?mes & R?seaux nicolas.lathiere at easybourse.com T : +33 1 57 75 57 07 F : +33 1 57 75 57 01 Si?ge social : 34, rue de la F?d?ration - 75015 Paris Adr. postale : Axe Seine - 41, rue Camille Desmoulins - 92130 Issy les Moulineaux www.easybourse.com