Bug 1039 - Samba PDC with roaming profiles ntuser.dat locking problem
Samba PDC with roaming profiles ntuser.dat locking problem
Status: CLOSED FIXED
Product: Samba 3.0
Classification: Unclassified
Component: Domain Control
3.0.2
All Linux
: P3 normal
: none
Assigned To: Gerald (Jerry) Carter
:
Depends on: 1087
Blocks:
  Show dependency treegraph
 
Reported: 2004-02-05 21:46 UTC by Dave
Modified: 2005-08-24 10:19 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Dave 2004-02-05 21:46:42 UTC
Occaisionally I get this, maybe once a day or so depending on how active the
users are. The user logs in to the workstation and windows delivers an error
message like this:

---
Windows was unable to load the registry. This is often caused by insufficient
memory or insufficient security rights. 
 DETAIL - The process cannot access the file because it is being used by another
process.  for C:\Documents and Settings\robb\ntuser.dat

Windows cannot load the locally stored profile. Possible causes of this error
include insufficient security rights or a corrupt local profile. If this problem
persists, contact your network administrator. 
 DETAIL - The process cannot access the file because it is being used by another
process. 

Windows has backed up this user's profile. Windows will automatically try to use
the backed up profile the next time this user logs on.

Windows cannot find the local profile and is logging you on with a temporary
profile. Changes you make to this profile will be lost when you log off.
---

The relevant errors from what I can tell by matching timestamps in the samba
logs are these:

[2004/02/02 06:53:56, 2] rpc_parse/parse_prs.c:netsec_decode(1575)
  netsec_decode: FAILED: packet sequence number:   
[2004/02/02 06:53:56, 2] lib/util.c:dump_data(1830)
  [000] 7C F4 16 1F 03 06 F1 F4                           |.......
[2004/02/02 06:53:56, 2] rpc_parse/parse_prs.c:netsec_decode(1577)
  should be:
[2004/02/02 06:53:56, 2] lib/util.c:dump_data(1830)
  [000] 00 00 00 00 80 00 00 00                           ........
[2004/02/02 06:53:56, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
  failed to decode PDU
[2004/02/02 06:53:56, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
  process_request_pdu: failed to do schannel processing.

...

[2004/02/05 15:13:50, 2] rpc_parse/parse_prs.c:netsec_decode(1575)
  netsec_decode: FAILED: packet sequence number:   
[2004/02/05 15:13:50, 2] lib/util.c:dump_data(1830)
  [000] F1 F5 58 6A 44 CD 43 8E                           ..XjD.C.
[2004/02/05 15:13:50, 2] rpc_parse/parse_prs.c:netsec_decode(1577)
  should be:
[2004/02/05 15:13:50, 2] lib/util.c:dump_data(1830)
  [000] 00 00 00 00 80 00 00 00                           ........
[2004/02/05 15:13:50, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
  failed to decode PDU
[2004/02/05 15:13:50, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
  process_request_pdu: failed to do schannel processing.


The setup we have is a Fedora Core1 box and WindowsXP SP1 workstations. I have
tested this against the 3.0.0 rpms that ship with FC1 and 3.0.2rc1 rpms from
samba.org.

I know the errors windows reports looks like a workstation problem but it never
happens when using windows 200x as a pdc.

No users are able to login properly on the affected workstation after this
condition has occured.

Rebooting the affected workstation will then allow users to again log in normally.

Other than this inconvience I have no issues with samba. Samba config is as follows:


[global]
   workgroup = LOCALNETWORK
   server string = PDC
   netbios name = PDC
   load printers = no
   log file = /var/log/samba/%m.log
   log level = 2
   max log size = 50000
   security = user
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd
   username map = /etc/samba/smbusers
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   interfaces = 10.0.0.3/8
   bind interfaces only = Yes
   os level = 33
   local master = yes
   domain master = yes
   preferred master = yes
   domain logons = yes
   logon script = login.bat
   logon path = \\pdc\profiles\%U
   name resolve order = bcast
   dns proxy = no
   time server = yes

[netlogon]
   comment = Network Logon Service
   path = /home/netlogon
   guest ok = yes
   writable = no
   share modes = no

[profiles]
   comment = profiles
   path = /home/profiles
   read only = no
   public = no
   guest ok = no
   csc policy = disable
   create mask = 0600
   directory mask = 0700


If there's any additional information I can provide regarding this I would be
happy to do so.
Comment 1 Gerald (Jerry) Carter 2004-03-08 10:33:55 UTC
Please test the latest samba 3.0 cvs code as there have been 
some locking changes recently (post 3.0.2a)
Comment 2 Dave 2004-03-30 07:05:17 UTC
I can confirm this bug still exists in Samba 3.0.3pre1.
Comment 3 Gerald (Jerry) Carter 2005-02-08 21:53:08 UTC
please test 3.0.11.  
Comment 4 Gerald (Jerry) Carter 2005-08-24 10:19:11 UTC
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.