I eventually got to the bottom of it.
For some reason, there was an AD restore of a remote domain controller. It decided to repopulate DNS with all the old values. However, the new values were also being used.
In the space of 10 seconds, two nslookups for the RHEL server returned two different hostnames.
From: Daniel Shaw [mailto:dshaw78 at gmail.com]
Sent: Thursday, May 20, 2010 3:11 PM
To: Brian O'Mahony
Cc: John G. Moylan; ilug at linux.ie
Subject: RE: [ILUG] Strange samba issue
On Thu, 20 May 2010 12:06:22 +0100, Brian O'Mahony
<brian.omahony at curamsoftware.com> wrote:
> I have found
>> [2010/05/20 11:25:36, 1]
> password server ANIMAL.CURAMSOFTWARE.COM rejected the password:
Ah ha. This was the bit of info that caused the light-bulb to go off. My
theory is: The max number of connections is being reached on the Windows
domain controller your Samba server is authenticating against. Your Windows
admin needs to allow more connections on the AD DC.
The supporting evidence is:
- A quick google of 'No More Connections can be made to this remote
computer at this time because there are already as many connections as this
computer can accept' reveals that this is a common error received by a
windows client trying to access a too busy windows server. I.e. it's a
windows error message.
- If the Windows AD server reaches a number of connections too high to
service any new ones, it makes sense that a) Nothing would show in AD logs,
as the connection never even completes, but b) you'd get a rejected
password message from Samba as RHEL simply gets nothing back from AD (the
connection never completes).
>> However the windows admin is telling me that he cant find anything in
> AD logs, Also the fact that it is working intermittently for me, im not
>> 'No More Connections can be made to this remote computer at this time
> because there are already as many connections as this computer can
>> However it comes back intermittently. I cannot find a max connections
> parameter in smb.conf. There is about 40 smbd processes running.
The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else
is unauthorized. If you are not the intended recipient, any disclosure,
copying, distribution or any action taken or omitted to be taken in reliance
on it, is prohibited and may be unlawful. If you are not the intended
addressee please contact the sender and dispose of this e-mail. Thank you.
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!