[Samba] There are no currently logon servers available when mapping with "net use"

Discussion:

Marcio Oli

2013-03-15 21:09:58 UTC

Hi people, I have a problem and I need so much of your help.

I have a login script in \\server1\netlogon\script.bat (on my PDC and BDC)
that runs "net use" commands to map some shares in time of the logon.
This login tries to map share in another server (samba member of domain
\\server2).

So, I put the result at a log and appears these lines:
"
System error 1311 has occurred.
There are currently no logon servers available to service the logon request.
"

This is a recurrent problem, but neither always this happens. Sometimes,
everything is wonderful and works very well mapping all shares, but is
unstable.

Follow my confs:

----------------------------------------------------------------------------------------------------------------------------------------
My pdc's smb.conf (Local IP: 10.0.0.224):
"
[global]
dos charset = 850
unix charset = ISO8859-1
workgroup = MyDomain
netbios name = pdc-name
server string = PDC Sede 2 Dominio
security = user
smb ports = 139 445
name resolve order = lmhosts wins host bcast
map to guest = Bad User
passdb backend = ldapsam:ldap://ldap.server.br
unix password sync = No
log level = 1
syslog = 1
log file = /var/log/samba/log.%U
max log size = 20000
time server = Yes
deadtime = 10
add user script = /usr/sbin/smbldap-useradd -m "%u"
delete user script = /usr/sbin/smbldap-userdel "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u"
"%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
add machine script = /usr/sbin/smbldap-useradd -t 0 -w "%u"
rename user script = /usr/sbin/smbldap-usermod -r "%unew" "%uold"
logon script = %G-sede2.bat
logon path =
logon home =
logon drive =
os level = 255
domain logons = Yes
preferred master = Yes
domain master = Yes
local master = Yes
wins support = Yes
dns proxy = yes
ldap admin dn = cn=root
ldap group suffix = ou=grupos
ldap machine suffix = ou=computadores
ldap suffix = O=MPT,C=BR
ldap ssl = no
ldap user suffix = ou=usuarios
create mask = 0640
directory mask = 0750
nt acl support = No
case sensitive = No
dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
# Habilitar Auditoria:
vfs objects = full_audit
#full_audit:success = open, opendir, write, unlink, rename, mkdir,
rmdir, chmod, chown
full_audit:success = open, write, unlink, rename, mkdir, rmdir,
chmod, chown
full_audit:prefix = %u|%I|%S
full_audit:failure = none
full_audit:facility = local5
full_audit:priority = notice

[netlogon]
path = /home/netlogon/
browseable = No
writeable = Yes
admin users = @"MyDomain\netlogon"
"
----------------------------------------------------------------------------------------------------------------------------------------
My bdc's smb.conf (Local IP: 10.0.0.225):
"
[global]
dos charset = 850
unix charset = ISO8859-1
workgroup = MyDomain
netbios name = bdc-sede2
server string = BDC Sede 2 Dominio
security = user
smb ports = 139 445
name resolve order = lmhosts wins host bcast
map to guest = Bad User
passdb backend = ldapsam:ldap://ldap.sever.br
unix password sync = No
log level = 1
syslog = 1
log file = /var/log/samba/log.%U
max log size = 20000
time server = Yes
deadtime = 10
add user script = /usr/sbin/smbldap-useradd -m "%u"
delete user script = /usr/sbin/smbldap-userdel "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u"
"%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
add machine script = /usr/sbin/smbldap-useradd -t 0 -w "%u"
rename user script = /usr/sbin/smbldap-usermod -r "%unew" "%uold"
logon script = %G-sede2.bat
logon path =
logon home =
logon drive =
os level = 253
domain logons = Yes
domain master = No
local master = No
wins support = no
wins server = 10.0.0.224
dns proxy = no
ldap admin dn = cn=root
ldap group suffix = ou=grupos
ldap machine suffix = ou=computadores
ldap suffix = O=MPT,C=BR
ldap ssl = no
ldap user suffix = ou=usuarios
create mask = 0640
directory mask = 0750
nt acl support = No
case sensitive = No
dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
# Habilitar Auditoria:
vfs objects = full_audit
#full_audit:success = open, opendir, write, unlink, rename, mkdir,
rmdir, chmod, chown
full_audit:success = open, write, unlink, rename, mkdir, rmdir,
chmod, chown
full_audit:prefix = %u|%I|%S
full_audit:failure = none
full_audit:facility = local5
full_audit:priority = notice

[netlogon]
path = /home/netlogon/
browseable = No
writeable = No
admin users = @"MyDomain\netlogon"
"
----------------------------------------------------------------------------------------------------------------------------------------
My member of domain server2's smb.conf:
"
[global]
workgroup = MyDomain
server string = Servidor de Arquivos - Sede 2
security = DOMAIN
obey pam restrictions = Yes
log level = 1
log file = /var/log/samba/log.%U
max log size = 20000
printcap name = cups
os level = 20
domain logons = no
preferred master = no
domain master = No
local master = No
wins support = no
wins server = 10.0.0.224
registry shares = Yes
idmap uid = 1000-20000
idmap gid = 1000-20000
template homedir = /home/%U
template shell = /bin/bash
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
# Habilitar Auditoria:
vfs objects = full_audit, recycle
#full_audit:success = open, opendir, write, unlink, rename, mkdir,
rmdir, chmod, chown
full_audit:success = open, write, unlink, rename, mkdir, rmdir,
chmod, chown
full_audit:prefix = %u|%I|%S
full_audit:failure = none
full_audit:facility = local5
full_audit:priority = notice
#Lixeira de Rede
recycle:facility = LOCAL1
recycle:priority = NOTICE
recycle:maxsize = 104857600
recycle:minsize = 256
recycle:repository = .$networkRecycle/%U
recycle:directory_mode = 0777
recycle:subdir_mode = 0777
recycle:keeptree = True
recycle:touch = True
recycle:touch_mtime = True
recycle:versions = True
recycle:noversions = *.pdf, *.jpg, *.gif, *.iso, *.jpeg, *.db,
*.avi, *.bin, *.exe, *.mp3, *.mpg, *.wma, *.png, *.vob, *.wav, *.psd,
*.psdx, *.nef, *.tif, *.vob, *.wmv, *.dwg, *.indd, *.cdr, *.eps
recycle:exclude = *.tmp, *.temp, *.log, *.ldb, *.o, *.obj, *.bak,
*.iso, *.vmdk
recycle:exclude_dir = tmp, temp, cache

# all shares listed/configured at bottom of .conf file ...

"

Anybody could help me please? I'm with many clients complaining about the
service.

I'm hopeful about answers.
Thanks a lot,

--
Marcio Oliveira.
"Tudo concorre para o bem daqueles que amam ? Deus." (Rom 8,28)

TMason

2013-03-15 23:26:10 UTC

Permalink

"Marcio Oli" wrote in message
news:CANpJy9WD=CLxbB=BQhgS==1mt-rkTXT0hVMi6muymZ5RKXMktg at mail.gmail.com...

Hi people, I have a problem and I need so much of your help.

I have a login script in \\server1\netlogon\script.bat (on my PDC and BDC)
that runs "net use" commands to map some shares in time of the logon.
This login tries to map share in another server (samba member of domain
\\server2).

So, I put the result at a log and appears these lines:
"
System error 1311 has occurred.
There are currently no logon servers available to service the logon request.
"

This is a recurrent problem, but neither always this happens. Sometimes,
everything is wonderful and works very well mapping all shares, but is
unstable.

--------------------------------------------------------------------------------

Windows clients have this problem regardless of the type of PDC/BDC you have
(Windows or Samba). The problem is that Windows is generally ready to let
people log in before all of the network services are ready and as such
people can't log in.

Are your servers on static IPs? Also, what kind of DNS/DHCP server do you
have?

This will help in troubleshooting.

TMason

Marcio Oli

2013-03-16 01:44:15 UTC

Permalink

Hi TMason,

thanks about the quickly answer. All my servers are over red hat (I'll
confirm correct version next monday) with static IP addresses. And the
network has DHCP and DNS over red hat too. DHCP sends the wins server; that
in this case is the PDC; to all users' workstations.

I'm available to give more informations about my environment in order to we
solve this issue.

Thanks,
Marcio.

2013/3/15 TMason <c.koeber at live.com>

"Marcio Oli" wrote in message news:CANpJy9WD=CLxbB=BQhgS==**
Hi people, I have a problem and I need so much of your help.
I have a login script in \\server1\netlogon\script.bat (on my PDC and BDC)
that runs "net use" commands to map some shares in time of the logon.
This login tries to map share in another server (samba member of domain
\\server2).
"
System error 1311 has occurred.
There are currently no logon servers available to service the logon request.
"
This is a recurrent problem, but neither always this happens. Sometimes,
everything is wonderful and works very well mapping all shares, but is
unstable.
------------------------------**------------------------------**
--------------------
Windows clients have this problem regardless of the type of PDC/BDC you
have (Windows or Samba). The problem is that Windows is generally ready to
let people log in before all of the network services are ready and as such
people can't log in.
Are your servers on static IPs? Also, what kind of DNS/DHCP server do you
have?
This will help in troubleshooting.
TMason
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/**mailman/options/samba<https://lists.samba.org/mailman/options/samba>

--
Marcio Oliveira.
"Tudo concorre para o bem daqueles que amam ? Deus." (Rom 8,28)

Jim Potter

2013-03-17 20:32:37 UTC

Permalink

Hi,

There is a setting in gpedit.msc somewhere to tell the PC to wait for
network connectivity before showing the login box. (no idea where - find
it yourself - sorry)

Anothe option - I have one user woth a similar problem. She keeps
getting 'duplicate machine name exists' popups appearing regardless of
what I name her machine. The laptop caches her user details so she can
log in fine, but generally has weird problems connecting to new shares.
You might see the behaviour you are getting if there were machines with
duplicate names - one would join the domain properly, wheras the other's
trust account would fail but could log in with cached credentials and
then have problems connecting to domain repated stuff.

hope that helps

Jim

Post by TMason
"Marcio Oli" wrote in message
Hi people, I have a problem and I need so much of your help.
I have a login script in \\server1\netlogon\script.bat (on my PDC and BDC)
that runs "net use" commands to map some shares in time of the logon.
This login tries to map share in another server (samba member of domain
\\server2).
"
System error 1311 has occurred.
There are currently no logon servers available to service the logon request.
"
This is a recurrent problem, but neither always this happens. Sometimes,
everything is wonderful and works very well mapping all shares, but is
unstable.
--------------------------------------------------------------------------------
Windows clients have this problem regardless of the type of PDC/BDC
you have (Windows or Samba). The problem is that Windows is generally
ready to let people log in before all of the network services are
ready and as such people can't log in.
Are your servers on static IPs? Also, what kind of DNS/DHCP server do
you have?
This will help in troubleshooting.
TMason

Daniel Müller

2013-03-18 07:43:34 UTC

Permalink

Look at the authentication of your member server, does the server
authenticate right against your PDC/BDC? Which version of
Samba? what about using dfs or dfs proxy on your PDC/BDC to map the share?
Do you use WINS?

-----------------------------------------------
EDV Daniel M?ller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 T?bingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------
-----Urspr?ngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im
Auftrag von Jim Potter
Gesendet: Sonntag, 17. M?rz 2013 21:33
An: c.koeber at live.com
Cc: samba at lists.samba.org
Betreff: Re: [Samba] There are no currently logon servers available when
mappingwith "net use"

Hi,

There is a setting in gpedit.msc somewhere to tell the PC to wait for
network connectivity before showing the login box. (no idea where - find it
yourself - sorry)

Anothe option - I have one user woth a similar problem. She keeps getting
'duplicate machine name exists' popups appearing regardless of what I name
her machine. The laptop caches her user details so she can log in fine, but
generally has weird problems connecting to new shares.
You might see the behaviour you are getting if there were machines with
duplicate names - one would join the domain properly, wheras the other's
trust account would fail but could log in with cached credentials and then
have problems connecting to domain repated stuff.

hope that helps

Jim

Post by TMason
"Marcio Oli" wrote in message
Hi people, I have a problem and I need so much of your help.
I have a login script in \\server1\netlogon\script.bat (on my PDC and BDC)
that runs "net use" commands to map some shares in time of the logon.
This login tries to map share in another server (samba member of
domain \\server2).
"
System error 1311 has occurred.
There are currently no logon servers available to service the logon request.
"
This is a recurrent problem, but neither always this happens.
Sometimes, everything is wonderful and works very well mapping all
shares, but is unstable.
----------------------------------------------------------------------
----------
Windows clients have this problem regardless of the type of PDC/BDC
you have (Windows or Samba). The problem is that Windows is generally
ready to let people log in before all of the network services are
ready and as such people can't log in.
Are your servers on static IPs? Also, what kind of DNS/DHCP server do
you have?
This will help in troubleshooting.
TMason

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Marcio Oli

2013-03-18 17:56:35 UTC

Permalink

Hi TMason, Jim and Daniel. I don't know what more to do.

Follow the informations to all you help me if possible.

1)
..................................................................................................................
PDC, BDC and domain member have the same version of linux, but just the
domain member has a different version of samba.

pdc
Linux 2.6.32-220.17.1.el6.x86_64 x86_64 GNU/Linux
Red Hat Enterprise Linux Server release 6.2 (Santiago)
Samba: Version 3.5.10-116.el6_2

bdc
Linux 2.6.32-220.17.1.el6.x86_64 x86_64 GNU/Linux
Red Hat Enterprise Linux Server release 6.2 (Santiago)
Samba: Version 3.5.10-116.el6_2

member of domain
Linux 2.6.32-220.17.1.el6.x86_64 GNU/Linux
Red Hat Enterprise Linux Server release 6.2 (Santiago)
Samba: Version 3.5.6-86.el6_1.4

2)
..................................................................................................................
- About windows registry (client windows7 professional) and gpedit.msc, I
altered these ones:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
"DomainCompatibilityMode"=dword:00000001
"DNSNameResolutionRequired"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"SlowLinkDetectEnabled"=dword:00000000
"DeleteRoamingCache"=dword:00000001
"WaitForNetwork"=dword:00000050
"CompatibleRUPSecurity"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\System]
"SlowLinkDetectEnabled"=dword:00000000
"DeleteRoamingCache"=dword:00000001
"WaitForNetwork"=dword:00000050
"CompatibleRUPSecurity"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SyncForegroundPolicy"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows
NT\CurrentVersion\Winlogon]
"SyncForegroundPolicy"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
NT\CurrentVersion\Winlogon]
"SyncForegroundPolicy"=dword:00000001

[HotKeyLocalMachine\System\CurrentControlSet\Services\Netlogon\Parameters]
DWORD RequireSignOrSeal = 1
DWORD RequireStrongKey = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
?RunLogonScriptSync?=dword:00000001

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters]
"ExpectedDialupDelay"=dword:0000001e
"NegativeCachePeriod"=dword:00014a78

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters]
"MaxPacketSize"=dword:00000001

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters]
"DisableDHCPMediaSense"=dword:00000001

3)
..................................................................................................................
- Dfs and dfs proxy are with default values of samba.

4)
..................................................................................................................
Yes, I use wins. My wins server is the PDC.

5)
..................................................................................................................
"Look at the authentication of your member server, does the server
authenticate right against your PDC/BDC?"

So, how do I verify this?

6)
..................................................................................................................
Sometimes, but not always, at user's log of samba appears (on the logon
moment):

# tail -f log.marcio.oliveira

[2013/03/15 19:14:11.779186, 1] smbd/service.c:1070(make_connection_snum)
pgt019874 (::ffff:10.0.3.16) connect to service netlogon initially as
user marcio.oliveira (uid=0, gid=1001) (pid 10342)
[2013/03/15 19:14:13.073811, 0]
passdb/pdb_ldap.c:4642(ldapuser2displayentry)
sid S-1-5-21-4007841154-2593654838-2170425582-2998 does not belong to our
domain
[2013/03/15 19:15:06.379204, 1] smbd/service.c:1251(close_cnum)
pgt019874 (::ffff:10.0.3.16) closed connection to service netlogon

Thanks,
Marcio Oliveira

2013/3/18 Daniel M?ller <mueller at tropenklinik.de>

Post by Daniel MÃ¼ller
Look at the authentication of your member server, does the server
authenticate right against your PDC/BDC? Which version of
Samba? what about using dfs or dfs proxy on your PDC/BDC to map the share?
Do you use WINS?
-----------------------------------------------
EDV Daniel M?ller
Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 T?bingen
Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------
-----Urspr?ngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im
Auftrag von Jim Potter
Gesendet: Sonntag, 17. M?rz 2013 21:33
An: c.koeber at live.com
Cc: samba at lists.samba.org
Betreff: Re: [Samba] There are no currently logon servers available when
mappingwith "net use"
Hi,
There is a setting in gpedit.msc somewhere to tell the PC to wait for
network connectivity before showing the login box. (no idea where - find it
yourself - sorry)
Anothe option - I have one user woth a similar problem. She keeps getting
'duplicate machine name exists' popups appearing regardless of what I name
her machine. The laptop caches her user details so she can log in fine, but
generally has weird problems connecting to new shares.
You might see the behaviour you are getting if there were machines with
duplicate names - one would join the domain properly, wheras the other's
trust account would fail but could log in with cached credentials and then
have problems connecting to domain repated stuff.
hope that helps
Jim

Post by TMason
"Marcio Oli" wrote in message
news:CANpJy9WD=CLxbB=BQhgS==1mt-rkTXT0hVMi6muymZ5RKXMktg at mail.gmail.com.

Post by TMason
Hi people, I have a problem and I need so much of your help.
I have a login script in \\server1\netlogon\script.bat (on my PDC and BDC)
that runs "net use" commands to map some shares in time of the logon.
This login tries to map share in another server (samba member of
domain \\server2).
"
System error 1311 has occurred.
There are currently no logon servers available to service the logon request.
"
This is a recurrent problem, but neither always this happens.
Sometimes, everything is wonderful and works very well mapping all
shares, but is unstable.
----------------------------------------------------------------------
----------
Windows clients have this problem regardless of the type of PDC/BDC
you have (Windows or Samba). The problem is that Windows is generally
ready to let people log in before all of the network services are
ready and as such people can't log in.
Are your servers on static IPs? Also, what kind of DNS/DHCP server do
you have?
This will help in troubleshooting.
TMason

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

--
Marcio Oliveira.
"Tudo concorre para o bem daqueles que amam ? Deus." (Rom 8,28)

Marcio Oli

2013-03-19 15:32:46 UTC

Permalink

Anybody else? Any sugestion?

Yours truly,
Marcio Oliveira

2013/3/18 Marcio Oli <marcio.oli.df at gmail.com>

Post by Marcio Oli
Hi TMason, Jim and Daniel. I don't know what more to do.
Follow the informations to all you help me if possible.
1)
..................................................................................................................
PDC, BDC and domain member have the same version of linux, but just the
domain member has a different version of samba.
pdc
Linux 2.6.32-220.17.1.el6.x86_64 x86_64 GNU/Linux
Red Hat Enterprise Linux Server release 6.2 (Santiago)
Samba: Version 3.5.10-116.el6_2
bdc
Linux 2.6.32-220.17.1.el6.x86_64 x86_64 GNU/Linux
Red Hat Enterprise Linux Server release 6.2 (Santiago)
Samba: Version 3.5.10-116.el6_2
member of domain
Linux 2.6.32-220.17.1.el6.x86_64 GNU/Linux
Red Hat Enterprise Linux Server release 6.2 (Santiago)
Samba: Version 3.5.6-86.el6_1.4
2)
..................................................................................................................
- About windows registry (client windows7 professional) and gpedit.msc, I
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
"DomainCompatibilityMode"=dword:00000001
"DNSNameResolutionRequired"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"SlowLinkDetectEnabled"=dword:00000000
"DeleteRoamingCache"=dword:00000001
"WaitForNetwork"=dword:00000050
"CompatibleRUPSecurity"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\System]
"SlowLinkDetectEnabled"=dword:00000000
"DeleteRoamingCache"=dword:00000001
"WaitForNetwork"=dword:00000050
"CompatibleRUPSecurity"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SyncForegroundPolicy"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows
NT\CurrentVersion\Winlogon]
"SyncForegroundPolicy"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
NT\CurrentVersion\Winlogon]
"SyncForegroundPolicy"=dword:00000001
[HotKeyLocalMachine\System\CurrentControlSet\Services\Netlogon\Parameters]
DWORD RequireSignOrSeal = 1
DWORD RequireStrongKey = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
?RunLogonScriptSync?=dword:00000001
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters]
"ExpectedDialupDelay"=dword:0000001e
"NegativeCachePeriod"=dword:00014a78
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters]
"MaxPacketSize"=dword:00000001
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters]
"DisableDHCPMediaSense"=dword:00000001
3)
..................................................................................................................
- Dfs and dfs proxy are with default values of samba.
4)
..................................................................................................................
Yes, I use wins. My wins server is the PDC.
5)
..................................................................................................................
"Look at the authentication of your member server, does the server
authenticate right against your PDC/BDC?"
So, how do I verify this?
6)
..................................................................................................................
Sometimes, but not always, at user's log of samba appears (on the logon
# tail -f log.marcio.oliveira
[2013/03/15 19:14:11.779186, 1] smbd/service.c:1070(make_connection_snum)
pgt019874 (::ffff:10.0.3.16) connect to service netlogon initially as
user marcio.oliveira (uid=0, gid=1001) (pid 10342)
[2013/03/15 19:14:13.073811, 0]
passdb/pdb_ldap.c:4642(ldapuser2displayentry)
sid S-1-5-21-4007841154-2593654838-2170425582-2998 does not belong to
our domain
[2013/03/15 19:15:06.379204, 1] smbd/service.c:1251(close_cnum)
pgt019874 (::ffff:10.0.3.16) closed connection to service netlogon
Thanks,
Marcio Oliveira
2013/3/18 Daniel M?ller <mueller at tropenklinik.de>

Post by TMason
"Marcio Oli" wrote in message
news:CANpJy9WD=CLxbB=BQhgS==1mt-rkTXT0hVMi6muymZ5RKXMktg at mail.gmail.com.

--
Marcio Oliveira.
"Tudo concorre para o bem daqueles que amam ? Deus." (Rom 8,28)

Achim Gottinger

2013-03-19 19:06:12 UTC

Permalink

On my side vb-scripts work more reliable

http://www.tek-tips.com/faqs.cfm?fid=5798

Post by Marcio Oli
Anybody else? Any sugestion?
Yours truly,
Marcio Oliveira
2013/3/18 Marcio Oli <marcio.oli.df at gmail.com>

Post by TMason
"Marcio Oli" wrote in message
news:CANpJy9WD=CLxbB=BQhgS==1mt-rkTXT0hVMi6muymZ5RKXMktg at mail.gmail.com.

--
Marcio Oliveira.
"Tudo concorre para o bem daqueles que amam ? Deus." (Rom 8,28)

Jim Potter

2013-03-19 19:59:42 UTC

Permalink

Just a thought - you say its an intermittent problem and you have 2 DCs,
right? It isn't just going wrong when it uses one server but not the other
to log on is it? Try forcing it to log on to each server individually (eg
unplug ethernet on each as you log on for a moment when no-one is using
network)

I don't like the look of the backslash in your [netlogon] admin users
either. Why not just leave the entire line out?

Jim

Post by Marcio Oli
Hi TMason, Jim and Daniel. I don't know what more to do.
Follow the informations to all you help me if possible.
1)
..................................................................................................................
PDC, BDC and domain member have the same version of linux, but just the
domain member has a different version of samba.
pdc
Linux 2.6.32-220.17.1.el6.x86_64 x86_64 GNU/Linux
Red Hat Enterprise Linux Server release 6.2 (Santiago)
Samba: Version 3.5.10-116.el6_2
bdc
Linux 2.6.32-220.17.1.el6.x86_64 x86_64 GNU/Linux
Red Hat Enterprise Linux Server release 6.2 (Santiago)
Samba: Version 3.5.10-116.el6_2
member of domain
Linux 2.6.32-220.17.1.el6.x86_64 GNU/Linux
Red Hat Enterprise Linux Server release 6.2 (Santiago)
Samba: Version 3.5.6-86.el6_1.4
2)
..................................................................................................................
- About windows registry (client windows7 professional) and gpedit.msc, I
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
"DomainCompatibilityMode"=dword:00000001
"DNSNameResolutionRequired"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"SlowLinkDetectEnabled"=dword:00000000
"DeleteRoamingCache"=dword:00000001
"WaitForNetwork"=dword:00000050
"CompatibleRUPSecurity"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\System]
"SlowLinkDetectEnabled"=dword:00000000
"DeleteRoamingCache"=dword:00000001
"WaitForNetwork"=dword:00000050
"CompatibleRUPSecurity"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SyncForegroundPolicy"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows
NT\CurrentVersion\Winlogon]
"SyncForegroundPolicy"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
NT\CurrentVersion\Winlogon]
"SyncForegroundPolicy"=dword:00000001
[HotKeyLocalMachine\System\CurrentControlSet\Services\Netlogon\Parameters]
DWORD RequireSignOrSeal = 1
DWORD RequireStrongKey = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
?RunLogonScriptSync?=dword:00000001
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters]
"ExpectedDialupDelay"=dword:0000001e
"NegativeCachePeriod"=dword:00014a78
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters]
"MaxPacketSize"=dword:00000001
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters]
"DisableDHCPMediaSense"=dword:00000001
3)
..................................................................................................................
- Dfs and dfs proxy are with default values of samba.
4)
..................................................................................................................
Yes, I use wins. My wins server is the PDC.
5)
..................................................................................................................
"Look at the authentication of your member server, does the server
authenticate right against your PDC/BDC?"
So, how do I verify this?
6)
..................................................................................................................
Sometimes, but not always, at user's log of samba appears (on the logon
# tail -f log.marcio.oliveira
[2013/03/15 19:14:11.779186, 1] smbd/service.c:1070(make_connection_snum)
pgt019874 (::ffff:10.0.3.16) connect to service netlogon initially as
user marcio.oliveira (uid=0, gid=1001) (pid 10342)
[2013/03/15 19:14:13.073811, 0]
passdb/pdb_ldap.c:4642(ldapuser2displayentry)
sid S-1-5-21-4007841154-2593654838-2170425582-2998 does not belong to our
domain
[2013/03/15 19:15:06.379204, 1] smbd/service.c:1251(close_cnum)
pgt019874 (::ffff:10.0.3.16) closed connection to service netlogon
Thanks,
Marcio Oliveira
2013/3/18 Daniel M?ller <mueller at tropenklinik.de>

share?

Post by Daniel MÃ¼ller
Do you use WINS?
-----------------------------------------------
EDV Daniel M?ller
Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 T?bingen
Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------
-----Urspr?ngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org

]

Post by Daniel MÃ¼ller
Im
Auftrag von Jim Potter
Gesendet: Sonntag, 17. M?rz 2013 21:33
An: c.koeber at live.com
Cc: samba at lists.samba.org
Betreff: Re: [Samba] There are no currently logon servers available when
mappingwith "net use"
Hi,
There is a setting in gpedit.msc somewhere to tell the PC to wait for
network connectivity before showing the login box. (no idea where - find

Post by Daniel MÃ¼ller
yourself - sorry)
Anothe option - I have one user woth a similar problem. She keeps

getting

Post by Daniel MÃ¼ller
'duplicate machine name exists' popups appearing regardless of what I

name

Post by Daniel MÃ¼ller
her machine. The laptop caches her user details so she can log in fine,

but

Post by Daniel MÃ¼ller
generally has weird problems connecting to new shares.
You might see the behaviour you are getting if there were machines with
duplicate names - one would join the domain properly, wheras the other's
trust account would fail but could log in with cached credentials and

then

Post by Daniel MÃ¼ller
have problems connecting to domain repated stuff.
hope that helps
Jim

Post by TMason
"Marcio Oli" wrote in message
news:CANpJy9WD=CLxbB=BQhgS==

1mt-rkTXT0hVMi6muymZ5RKXMktg at mail.gmail.com.

Post by Daniel MÃ¼ller
..

--
Marcio Oliveira.
"Tudo concorre para o bem daqueles que amam ? Deus." (Rom 8,28)
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Marcio Oli

2013-03-19 20:30:04 UTC

Permalink

Hey Achim,
I'll try vb scripts afterwards and I'll give you the feedback. Thaks
about the good sugestion!

Jim,
I'll make these tests too on a good moment and I'll give the feedbacks
too.

As soon as possible I'll give news. Good news I hope.

Thanks about the answers for while,
Marcio Oliveira.

2013/3/19 Jim Potter <jimpotter at orange.net>

Post by Jim Potter
Just a thought - you say its an intermittent problem and you have 2 DCs,
right? It isn't just going wrong when it uses one server but not the other
to log on is it? Try forcing it to log on to each server individually (eg
unplug ethernet on each as you log on for a moment when no-one is using
network)
I don't like the look of the backslash in your [netlogon] admin users
either. Why not just leave the entire line out?
Jim

Post by Marcio Oli
Hi TMason, Jim and Daniel. I don't know what more to do.
Follow the informations to all you help me if possible.
1)
..................................................................................................................
PDC, BDC and domain member have the same version of linux, but just the
domain member has a different version of samba.
pdc
Linux 2.6.32-220.17.1.el6.x86_64 x86_64 GNU/Linux
Red Hat Enterprise Linux Server release 6.2 (Santiago)
Samba: Version 3.5.10-116.el6_2
bdc
Linux 2.6.32-220.17.1.el6.x86_64 x86_64 GNU/Linux
Red Hat Enterprise Linux Server release 6.2 (Santiago)
Samba: Version 3.5.10-116.el6_2
member of domain
Linux 2.6.32-220.17.1.el6.x86_64 GNU/Linux
Red Hat Enterprise Linux Server release 6.2 (Santiago)
Samba: Version 3.5.6-86.el6_1.4
2)
..................................................................................................................
- About windows registry (client windows7 professional) and gpedit.msc, I
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
"DomainCompatibilityMode"=dword:00000001
"DNSNameResolutionRequired"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"SlowLinkDetectEnabled"=dword:00000000
"DeleteRoamingCache"=dword:00000001
"WaitForNetwork"=dword:00000050
"CompatibleRUPSecurity"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\System]
"SlowLinkDetectEnabled"=dword:00000000
"DeleteRoamingCache"=dword:00000001
"WaitForNetwork"=dword:00000050
"CompatibleRUPSecurity"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SyncForegroundPolicy"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows
NT\CurrentVersion\Winlogon]
"SyncForegroundPolicy"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
NT\CurrentVersion\Winlogon]
"SyncForegroundPolicy"=dword:00000001
[HotKeyLocalMachine\System\CurrentControlSet\Services\Netlogon\Parameters]
DWORD RequireSignOrSeal = 1
DWORD RequireStrongKey = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
?RunLogonScriptSync?=dword:00000001
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters]
"ExpectedDialupDelay"=dword:0000001e
"NegativeCachePeriod"=dword:00014a78
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters]
"MaxPacketSize"=dword:00000001
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters]
"DisableDHCPMediaSense"=dword:00000001
3)
..................................................................................................................
- Dfs and dfs proxy are with default values of samba.
4)
..................................................................................................................
Yes, I use wins. My wins server is the PDC.
5)
..................................................................................................................
"Look at the authentication of your member server, does the server
authenticate right against your PDC/BDC?"
So, how do I verify this?
6)
..................................................................................................................
Sometimes, but not always, at user's log of samba appears (on the logon
# tail -f log.marcio.oliveira
[2013/03/15 19:14:11.779186, 1] smbd/service.c:1070(make_connection_snum)
pgt019874 (::ffff:10.0.3.16) connect to service netlogon initially as
user marcio.oliveira (uid=0, gid=1001) (pid 10342)
[2013/03/15 19:14:13.073811, 0]
passdb/pdb_ldap.c:4642(ldapuser2displayentry)
sid S-1-5-21-4007841154-2593654838-2170425582-2998 does not belong to our
domain
[2013/03/15 19:15:06.379204, 1] smbd/service.c:1251(close_cnum)
pgt019874 (::ffff:10.0.3.16) closed connection to service netlogon
Thanks,
Marcio Oliveira
2013/3/18 Daniel M?ller <mueller at tropenklinik.de>

share?

samba-bounces at lists.samba.org]

find it

Post by Daniel MÃ¼ller
yourself - sorry)
Anothe option - I have one user woth a similar problem. She keeps

getting

Post by Daniel MÃ¼ller
'duplicate machine name exists' popups appearing regardless of what I

name

Post by Daniel MÃ¼ller
her machine. The laptop caches her user details so she can log in fine,

but

then

Post by Daniel MÃ¼ller
have problems connecting to domain repated stuff.
hope that helps
Jim

Post by TMason
"Marcio Oli" wrote in message
news:CANpJy9WD=CLxbB=BQhgS==

1mt-rkTXT0hVMi6muymZ5RKXMktg at mail.gmail.com.

Post by Daniel MÃ¼ller
..

--
Marcio Oliveira.
"Tudo concorre para o bem daqueles que amam ? Deus." (Rom 8,28)