search for: init_sam_from_ldap

Hi ! I'm working in a educational administration, i've made a domain with a Samba 3.4.1 PDC with a LDAP backend. When a user log into an XP Workstation, i see in the log file a lot of "init_sam_from_ldap". In fact, instead of scanning only the user who try to connect, a lot of them are scanned. I've got about 600 account into the LDAP so the time needed by the user to connect into the workstation is a little increased. The problem is also more important when i've pratices sessi...

...is being refused. This is the logging from Samba : (for the failing user edockx) [2005/01/18 15:37:00, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2482) Returning domain sid for domain PEOPLEWARE -> S-1-5-21-2146849782-3868185098-1 958755654 [2005/01/18 15:37:00, 2] passdb/pdb_ldap.c:init_sam_from_ldap(511) init_sam_from_ldap: Entry found for user: edockx [2005/01/18 15:37:00, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2482) Returning domain sid for domain PEOPLEWARE -> S-1-5-21-2146849782-3868185098-1 958755654 [2005/01/18 15:37:00, 2] passdb/pdb_ldap.c:init_sam_from_ldap(511) in...

...apserver(iplanet) and is causing the ldap server load to peak consitently over a ridiculous 91%. Logons come to a crawl because the ldap load is so high. I don't not have roaming profiles enabled. Here is an excerpt from a logfile (log level=2): [2007/04/24 17:23:56, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640) init_sam_from_ldap: Entry found for user: tua19847 [2007/04/24 17:23:56, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640) init_sam_from_ldap: Entry found for user: tua05996 [2007/04/24 17:23:56, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640) init_sam_from_ldap: Entry found for user: tua68562 [...

...ry few seconds, even though they have been authenticated once, are logged onto the domain, and using various shares. Only one of the 30 users on the network has this issue. Any ideas would be appreciated. ----------------------Log Snippet--------------------- May 11 07:43:18 mt14 smbd[8838]: init_sam_from_ldap: Failed to get password history for user choffeld May 11 07:43:44 mt14 smbd[8838]: [2007/05/11 07:43:44, 0] passdb/pdb_ldap.c:init_sam_from_ldap(764) May 11 07:43:44 mt14 smbd[8838]: init_sam_from_ldap: Failed to get password history for user choffeld May 11 07:43:49 mt14 smbd[8838]: [2007/05/...

...C]\[]@[PC00829] [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: guest authentication for user [] succeeded [2006/05/31 15:32:48, 2] lib/smbldap.c:smbldap_open_connection(692) smbldap_open_connection: connection opened [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: pc00829$ [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: pc00829$ [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user...

...says there is a bad username and the log file looks like this. [2005/06/14 19:01:12, 2] smbd/server.c:exit_server(609) Closing connections [2005/06/14 19:01:12, 2] lib/smbldap.c:smbldap_open_connection(692) smbldap_open_connection: connection opened [2005/06/14 19:01:12, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: root [2005/06/14 19:01:12, 2] passdb/pdb_ldap.c:init_group_from_ldap(2000) init_group_from_ldap: Entry found for group: 512 [2005/06/14 19:01:12, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [root] -> [...

...urces. Nov 14 16:37:34 hostname smbd[18542]: [2010/11/14 16:37:34.590067, 2] lib/smbldap.c:950(smbldap_open_connection) Nov 14 16:37:34 hostname smbd[18542]: smbldap_open_connection: connection opened Nov 14 16:37:34 hostname smbd[18542]: [2010/11/14 16:37:34.593216, 2] passdb/pdb_ldap.c:572(init_sam_from_ldap) Nov 14 16:37:34 hostname smbd[18542]: init_sam_from_ldap: Entry found for user: root Nov 14 16:37:34 hostname smbd[18542]: [2010/11/14 16:37:34.597839, 2] passdb/pdb_ldap.c:2446(init_group_from_ldap) Nov 14 16:37:34 hostname smbd[18542]: init_group_from_ldap: Entry found for group: 10002 N...

...05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(268) > check_ntlm_password: guest authentication for user [] succeeded > [2006/05/31 15:32:48, 2] lib/smbldap.c:smbldap_open_connection(692) > smbldap_open_connection: connection opened > [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) > init_sam_from_ldap: Entry found for user: pc00829$ > [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) > init_sam_from_ldap: Entry found for user: pc00829$ > [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(219) > check_ntlm_password: Checking...

...1007 |test6 1008 |test7$ 1009 |test8$ 1010 |test9 here is log output from samba when kylec connects Code: kyle@kyle-laptop:~$ smbclient //10.0.0.218/clients -U kylec Password: Domain=[WINIX] OS=[Unix] Server=[Samba 3.0.25b-1.el5_1.4] smb: \> quit [2008/04/24 17:33:49, 2] passdb/pdb_ldap.c:init_sam_from_ldap(545) init_sam_from_ldap: Entry found for user: kylec here is when a bad user trys to connect, Code: kyle@kyle-laptop:~$ smbclient //10.0.0.218/clients -U test3 Password: session setup failed: NT_STATUS_LOGON_FAILURE [2008/04/24 17:45:00, 0] auth/auth_sam.c:check_sam_security(352) check_sam_...

...e windows 7 pro (64) clients navigating on samba shares. The user wants to open a folder and then it takes a long time until it opens. Looking into the samba log of the PC it is filled with this entries (seems to check for every ldap user): [2013/03/18 10:10:54.224428, 2] passdb/pdb_ldap.c:572(init_sam_from_ldap) init_sam_from_ldap: Entry found for user: ftrapp [2013/03/18 10:10:54.687697, 2] passdb/pdb_ldap.c:572(init_sam_from_ldap) init_sam_from_ldap: Entry found for user: w2ksrv03 [2013/03/18 10:10:56.157767, 2] passdb/pdb_ldap.c:572(init_sam_from_ldap) init_sam_from_ldap: Entry found for user:...

...m log.smb (non-functional user): - ---------------------------------------------------------------------------------------- [2004/03/31 10:24:11, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605) process_request_pdu: failed to do schannel processing. [2004/03/31 10:24:11, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462) init_sam_from_ldap: Entry found for user: pubtest$ [2004/03/31 10:24:11, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462) init_sam_from_ldap: Entry found for user: testuser [2004/03/31 10:24:11, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [testuser]...

.... log.client (client = hostname of windows xp) [2006/03/20 11:35:26, 2] lib/access.c:check_access(324) Allowed connection from (10.0.0.2) [2006/03/20 11:35:26, 2] lib/smbldap.c:smbldap_open_connection(692) smbldap_open_connection: connection opened [2006/03/20 11:35:26, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: client$ [2006/03/20 11:35:26, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: client$ [2006/03/20 11:35:37, 2] smbd/server.c:exit_server(609) Closing connections [2006/03/20 11:36:22, 2] lib/access.c:check_a...

...ources. log.client (client = hostname of windows xp) [2006/03/20 11:35:26, 2] lib/access.c:check_access(324) Allowed connection from (10.0.0.2) [2006/03/20 11:35:26, 2] lib/smbldap.c:smbldap_open_connection(692) smbldap_open_connection: connection opened [2006/03/20 11:35:26, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: client$ [2006/03/20 11:35:26, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: client$ [2006/03/20 11:35:37, 2] smbd/server.c:exit_server(609) Closing connections [2006/03/20 11:36:22, 2] lib/access.c:check_access(...

...:59, 2] smbd/sesssetup.c:setup_new_vc_session(1200) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2008/02/12 15:17:59, 2] lib/smbldap.c:smbldap_open_connection(786) smbldap_open_connection: connection opened [2008/02/12 15:17:59, 2] passdb/pdb_ldap.c:init_sam_from_ldap(545) init_sam_from_ldap: Entry found for user: adam [2008/02/12 15:17:59, 2] auth/auth.c:check_ntlm_password(309) check_ntlm_password: authentication for user [adam] -> [adam] -> [adam] succeeded [2008/02/12 15:17:59, 2] passdb/pdb_ldap.c:init_sam_from_ldap(545) init_sam_from_ldap: En...

...ect: name1=LINUXTEST name2=FMDV-4TPB8AQCT4 netbios connect: local=linuxtest remote=fmdv-4tpb8aqct4, name type = 0 setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. init_sam_from_ldap: Entry found for user: mcasas init_group_from_ldap: Entry found for group: 100 init_sam_from_ldap: Entry found for user: root check_ntlm_password: authentication for user [root] -> [root] -> [root] succeeded Returning domain sid for domain FMDV -> S-1-5-21-78767638-71612024-1917398797 i...

...operation has been aborted because of either a thread exit or an application request.). By raising the log level on the PDC, I can see that when I try to open the share on a client computer, it tries to list every account and then stop : /[2014/08/25 09:49:23.165623, 2] passdb/pdb_ldap.c:553(init_sam_from_ldap)// // init_sam_from_ldap: Entry found for user: bcde// //[2014/08/25 09:49:23.167202, 2] passdb/pdb_ldap.c:553(init_sam_from_ldap)// // init_sam_from_ldap: Entry found for user: acap// //[2014/08/25 09:49:23.168752, 2] passdb/pdb_ldap.c:553(init_sam_from_ldap)// // init_sam_from_ldap: Entry...

...] passdb/pdb_ldap.c:init_ldap_from_sam(812) > init_ldap_from_sam: Setting entry for user: bryan > [2004/06/03 23:10:46, 2] passdb/pdb_ldap.c:ldapsam_add_sam_account(1734) > ldapsam_add_sam_account: added: uid == bryan in the LDAP database > [2004/06/03 23:10:46, 2] passdb/pdb_ldap.c:init_sam_from_ldap(483) > init_sam_from_ldap: Entry found for user: bryan > [2004/06/03 23:10:46, 2] passdb/pdb_ldap.c:init_sam_from_ldap(483) > init_sam_from_ldap: Entry found for user: bryan > [2004/06/03 23:10:48, 0] lib/util_sock.c:read_socket_with_timeout(304) > read_socket_with_timeout: tim...

Hey Everyone, So here is what is going on I have two computers on the same network that are both connected to the PDC of a samba domain (on the same network segment): ____________________________________________ | | | | | |

...31:01, 2] smbd/sesssetup.c:setup_new_vc_session(799) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2009/02/24 14:31:01, 2] lib/smbldap.c:smbldap_open_connection(788) smbldap_open_connection: connection opened [2009/02/24 14:31:01, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541) init_sam_from_ldap: Entry found for user: j.poderys [2009/02/24 14:31:01, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140) init_group_from_ldap: Entry found for group: 22782 [2009/02/24 14:31:01, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140) init_group_from_ldap: Entry found for group:...

...ies dialog of that machine works perfectly. Things I have tried: Running the NT4 SVRMGR.exe as domain\administrator, file ->Add Computer to domain Result: Dialog box that says "Access is denied" /var/log/samba/machine_i_ran_svrmgr_on.log [2006/01/26 15:32:09, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640) init_sam_from_ldap: Entry found for user: root [2006/01/26 15:32:09, 2] auth/auth.c:check_ntlm_password(307) check_ntlm_password: authentication for user [root] -> [root] -> [root] succeeded [2006/01/26 15:32:09, 2] lib/access.c:check_access(324) Allowed connection from (XX.XXX.X...