search for: neg_conn_cache

I've tried searching manuals and wiki, but I can't seem to find any specifics about NEG_CONN_CACHE entries other than 'idmap negative cache time' option in smb.conf, which refers to SID/UID/GID queries and not unavailable DCs. Specifically the issue I've ran into recently is that with 'winbind max domain connections' set to 10 I saw Winbind had single active connection to the...

On Wed, May 27, 2020 at 12:54:49PM -0700, Alexey A Nikitin via samba wrote: > I've tried searching manuals and wiki, but I can't seem to find any specifics about NEG_CONN_CACHE entries other than 'idmap negative cache time' option in smb.conf, which refers to SID/UID/GID queries and not unavailable DCs. > Specifically the issue I've ran into recently is that with 'winbind max domain connections' set to 10 I saw Winbind had single active connection t...

On Wednesday, 27 May 2020 16:21:31 PDT Jeremy Allison wrote: > On Wed, May 27, 2020 at 12:54:49PM -0700, Alexey A Nikitin via samba wrote: > > 3. Are the rules for how a DC gets put into NEG_CONN_CACHE documented anywhere besides the code itself, or wading through the code is my only option of getting to know the criteria? > > Only in the code I think, added in: > > add_failed_connection_entry() > > Can be cleared by: > > flush_negative_conn_cache_for_domain(), which i...

On Thu, May 28, 2020 at 01:11:26PM -0700, Alexey A Nikitin wrote: > On Wednesday, 27 May 2020 16:21:31 PDT Jeremy Allison wrote: > > On Wed, May 27, 2020 at 12:54:49PM -0700, Alexey A Nikitin via samba wrote: > > > 3. Are the rules for how a DC gets put into NEG_CONN_CACHE documented anywhere besides the code itself, or wading through the code is my only option of getting to know the criteria? > > > > Only in the code I think, added in: > > > > add_failed_connection_entry() > > > > Can be cleared by: > > > > flush_n...

...1312060 s3_event: Added timed event "tevent_req_timedout": 0x13163c0 ==> log.wb-DOMAIN <== child daemon request 13 child_process_request: request fn PAM_AUTH winbindd_dual_pam_auth: domain: DOMAIN offline and auth request in startup mode. Searching cache keys with pattern NEG_CONN_CACHE/DOMAIN,* Calling function with arguments (key=NEG_CONN_CACHE/DOMAIN,DOMAINCONTROLLER1.DOMAIN.local, timeout=Mon Mar 24 10:33:08 2014 ) Calling function with arguments (key = NEG_CONN_CACHE/DOMAIN,DOMAINCONTROLLER1.DOMAIN.local, value = c0000030, timeout = Mon Mar 24 10:33:08 2014 ) Deleti...

...ain FEDERATION.STARFLEET-NET.CO.UK server 2001:8b0:1627:1::2 ads_try_connect: sending CLDAP request to 2 servers (realm: FEDERATION.STARFLEET-NET.CO.UK) ads_cldap_netlogon: cldap_multi_netlogon failed: NT_STATUS_NETWORK_UNREACHABLE ads_try_connect: CLDAP request failed. Adding cache entry with key=[NEG_CONN_CACHE/FEDERATION.STARFLEET-NET.CO.UK,192.168.81.132] and timeout=[Mon Oct 17 16:51:46 2016 BST] (60 seconds ahead) add_failed_connection_entry: added domain FEDERATION.STARFLEET-NET.CO.UK (192.168.81.132) to failed conn cache Adding cache entry with key=[NEG_CONN_CACHE/FEDERATION.STARFLEET-NET.CO.UK,2001...

...server 2001:8b0:1627:1::2 > ads_try_connect: sending CLDAP request to 2 servers (realm: > FEDERATION.STARFLEET-NET.CO.UK) > ads_cldap_netlogon: cldap_multi_netlogon failed: > NT_STATUS_NETWORK_UNREACHABLE > ads_try_connect: CLDAP request failed. > Adding cache entry with > key=[NEG_CONN_CACHE/FEDERATION.STARFLEET-NET.CO.UK,192.168.81.132] and > timeout=[Mon Oct 17 16:51:46 2016 BST] (60 seconds ahead) > add_failed_connection_entry: added domain FEDERATION.STARFLEET-NET.CO.UK > (192.168.81.132) to failed conn cache > Adding cache entry with > key=[NEG_CONN_CACHE/FEDERATION...

...rce3/winbindd/winbindd_cm.c:1258(cm_prepare_connection) Failed to prepare SMB connection to DM-LO-DC01.lo: NT_STATUS_LOGON_FAILURE [2018/08/06 16:30:36.604365, 10, pid=1218, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:304(gencache_set_data_blob) Did not store value for NEG_CONN_CACHE/LO,DM-LO-DC01.lo, we already got it [2018/08/06 16:30:36.604532, 9, pid=1218, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:189(add_failed_connection_entry) add_failed_connection_entry: added domain LO (DM-LO-DC01.lo) to failed conn cache [2018/08/06 16:30:36.604726, 10, pid=121...

...XXXX.net for domain XXXXX [2015/05/19 12:59:25.021289, 0] winbindd/winbindd_cm.c:835(cm_prepare_connection) cm_prepare_connection: getpeername failed with: Transport endpoint is not connected [2015/05/19 12:59:25.021549, 10] lib/gencache.c:183(gencache_set_data_blob) Adding cache entry with key = NEG_CONN_CACHE/XXXXX,PV4IW0001.XXXXX.net and timeout = Tue May 19 12:59:55 2015 (30 seconds ahead) [2015/05/19 12:59:25.021591, 9] libsmb/conncache.c:189(add_failed_connection_entry) add_failed_connection_entry: added domain XXXXX (PV4IW0001.XXXXX.net) to failed conn cache

Hi, This morning three of our FreeBSD-11.1-p11 servers with Samba 4.7.7 installations started to ignore ACL settings and reject user access to shares.  All three servers are members of DC running on Windows Server 2008R2.  Everything has been running ok for last few year.  I have been upgrading Samba and FreeBSD installations and on last Friday upgraded to the latest packages from

According to this bugzilla entry, bug 6870 has been fixed as of at least version 3.5: https://bugzilla.samba.org/show_bug.cgi?id=6870 However, I assert that it is present in 4.2.10, which ships with Debian Jessie. On my home network (IPv4 and IPv6), a box with Samba 4.2.10 with IPv6 disabled (via sysctl), will fail to contact a DC because the IPv6 connect fails immediately before the v4

..._connection) Failed to prepare SMB connection to aswserver.asw.aswglobal.net: NT_STATUS_ACCESS_DENIED [2019/10/15 07:06:26.590817, 10, pid=12457, effective(0, 0), real(0, 0), class=tdb] ../../source3/lib/gencache.c:222(gencache_set_data_blob) gencache_set_data_blob: Adding cache entry with key=[NEG_CONN_CACHE/ASW,aswserver.asw.aswglobal.net] and timeout=[Tue Oct 15 07:07:26 2019 EDT] (60 seconds ahead) [2019/10/15 07:06:26.590838, 9, pid=12457, effective(0, 0), real(0, 0)] ../../source3/libsmb/conncache.c:189(add_failed_connection_entry) add_failed_connection_entry: added domain ASW (aswserver.asw.as...