[ILUG] Strange samba issue

[Brian O'Mahony]

I eventually got to the bottom of it. 

For some reason, there was an AD restore of a remote domain controller. It decided to repopulate DNS with all the old values. However, the new values were also being used.

In the space of 10 seconds, two nslookups for the RHEL server returned two different hostnames.

Thanks all

B

-----Original Message-----
From: Daniel Shaw [mailto:dshaw78 at gmail.com] 
Sent: Thursday, May 20, 2010 3:11 PM
To: Brian O'Mahony
Cc: John G. Moylan; ilug at linux.ie
Subject: RE: [ILUG] Strange samba issue


Hi,

On Thu, 20 May 2010 12:06:22 +0100, Brian O'Mahony
<brian.omahony at curamsoftware.com> wrote:
> I have found
> 
> [2010/05/20 11:25:36, 1]
auth/auth_server.c:check_smbserver_security(363)
>   password server ANIMAL.CURAMSOFTWARE.COM rejected the password:
> NT_STATUS_REQUEST_NOT_ACCEPTED

Ah ha. This was the bit of info that caused the light-bulb to go off. My
theory is: The max number of connections is being reached on the Windows
domain controller your Samba server is authenticating against. Your Windows
admin needs to allow more connections on the AD DC.

The supporting evidence is:

- A quick google of 'No More Connections can be made to this remote
computer at this time because there are already as many connections as this
computer can accept'  reveals that this is a common error received by a
windows client trying to access a too busy windows server. I.e. it's a
windows error message.

- If the Windows AD server reaches a number of connections too high to
service any new ones, it makes sense that a) Nothing would show in AD logs,
as the connection never even completes, but b) you'd get a rejected
password message from Samba as RHEL simply gets nothing back from AD (the
connection never completes).


> 
> However the windows admin is telling me that he cant find anything in
the
> AD logs, Also the fact that it is working intermittently for me, im not

> 
> 'No More Connections can be made to this remote computer at this time
> because there are already as many connections as this computer can
accept.'
> 
> However it comes back intermittently. I cannot find a max connections
> parameter in smb.conf. There is about 40 smbd processes running.
> 

Cheers,
Daniel



The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else
is unauthorized. If you are not the intended recipient, any disclosure,
copying, distribution or any action taken or omitted to be taken in reliance
on it, is prohibited and may be unlawful. If you are not the intended
addressee please contact the sender and dispose of this e-mail. Thank you.