after update from samba 3.0.30 to 3.3.3 (or 3.4 also) i can't login to windowsXP machines with some user's domain accounts i got always this error message: "The system cannot log you in due to the following error: Procedure number is out of range" With some user's accounts all works right, but with another accounts is these error. And my second problem (very very similar) - if i type in "My computer" path to my server (for example \\myserver), so i got error message: "The item \\myserver is not accessible. You dont have right permissions. The procedure number is out of range". This second problem i have with all user's accounts (and also on all my servers afteer update to Samba 3.3 or 3.4). My configuration is same as before the update, and before the update all works fine. I attach log of my workstation from samba during acces to \\myserver from "My Computer" in Windows XP. thanks, Lukas
Created attachment 4455 [details] smb.log with debug level 10
Created attachment 4456 [details] My smb.conf
Please upload the whole log.smbd with debug level 10. Please also upload a network trace. Information on how to create useful network traces can be found under http://wiki.samba.org/index.php/Capture_Packets. Thanks, Volker
Created attachment 4461 [details] tcpdump -p -s 1500 -w samba_trace.pcap port 445 or port 139 10.76.66.176 is my Windows XP 10.76.66.10 is my samba server (netbios name=lbox) during the trace i tried go to \\lbox
Created attachment 4462 [details] whole smbd.log
Created attachment 4463 [details] whole log of my workstation
(In reply to comment #3) > Please upload the whole log.smbd with debug level 10. Please also upload a > network trace. Information on how to create useful network traces can be found > under http://wiki.samba.org/index.php/Capture_Packets. > > Thanks, > > Volker > I uploaded all you need. thanks, Lukas
Try removing the comment from share [homes], just for a test. If that helps, please convert the smb.conf file to utf-8 encoding using for example the iconv utility. Volker
(In reply to comment #8) > Try removing the comment from share [homes], just for a test. If that helps, > please convert the smb.conf file to utf-8 encoding using for example the iconv > utility. > > Volker > I tried remove comment, but without success:( Lukas
Please send a new set of logs with the comment removed. It definitely stumbles over that. Thanks, Volker
Created attachment 4464 [details] Trace after removing comment from smb.conf
Created attachment 4465 [details] smbd log after removing comment from smb.conf
Created attachment 4466 [details] smbd log after removing comment from smb.conf
Created attachment 4467 [details] log of my workstation after removing comment from smb.conf
Created attachment 4468 [details] whole smb.conf after removing comment
(In reply to comment #10) > Please send a new set of logs with the comment removed. It definitely stumbles > over that. > > Thanks, > > Volker > I sent you a new set of logs. Lukas
It stubles over a string domovsk<FD> adres<E1><F8> u<9E>ivatele deseyve which it can not convert to UCS2 due to wrong encoding. I don't see that string anywhere in the smb.conf file. Can you try restarting smbd to make sure that change actually is honored? Thanks, Volker
Created attachment 4484 [details] log of my smbd with error "Windows cannot find the roaming profile..."
Created attachment 4485 [details] my smb.conf with error "Windows cannot find the roaming profile..."
(In reply to comment #17) Hi Volker, in last nights i maked very much tests and i find that your idea with wrong enconding my comments in smb.conf was good - after removing comment and RESTART smbd i dont have error message "The procedure number is out of range...". Thank you very much. But i have yet one problem with Samba 3.4.0 - i thought this problem conjoint with previous problem, but no - this problem continue to:(. If i logging to my Windows XP client station, so windows can't find my roaming profile. This problem is same for all users. I see only error message "Windows cannot find the roaming profile and is logging you on with a temporary profile. Your roaming profile have wrong security..." But i am good permission. Fro example drwx------ 16 knebel uzivatele 600 Jul 23 09:59 profileNT But before update to samba 3.4.0 (with samba 3.0.30) i haven't this problem. I tried now yet downgrade to Samba 3.0.30 and all run fine. Then i again updated to samba 3.4.0 and this problem was here again. I attach my smb.conf (i tried removing commnet and also encode to utf-8) and log.smbd with this error (during logging to workstation). Log of my workstation from samba you find here http://servis.lbox.cz/log.pc-pokladna I tried also maked trace with tcpdump, but i captured always 0 packets (i dont know why, i use "tcpdump -p -s 1500 -w FILENAME port 445 or port 139"). thanks, Lukas
Can you please try to remove the "msdfs root = yes" from the [global] section and put this into all specific sections where you actually have msdfs links active? I've seen Windows having profile problems when "msdfs root" was active. Please as always, restart smbd and reboot the client. Thanks, Volker
Created attachment 4493 [details] log smbd during logging to workstation (without using msdfs)
Created attachment 4494 [details] log.workstation during logging to workstation (without using msdfs)
(In reply to comment #21) Hi, i removed msdfs (from [global] section and i don't use it in another share), but without success:( I have same problem. (after removing i maked restart samba and client workstation). I attach new logs thanks, Lukas
(In reply to comment #21) So have you some idea? thanks, Lukas
Sorry, busy with other stuff right now. Volker
Created attachment 4519 [details] log with bad sending a name of user?
(In reply to comment #26) Hi, i see in log maybe something wrong with name of user - at first i see that my workstation send to my samba server empty username [2009/08/06 08:46:29, 5] auth/auth_util.c:208(make_user_info_map) Mapping user []\[] from workstation [PC-ARCHIV] ... [2009/08/06 08:46:29, 5] auth/auth_util.c:2184(is_trusted_domain) is_trusted_domain: Checking for domain trust with [] [2009/08/06 08:46:29, 5] passdb/secrets.c:669(secrets_fetch_trusted_domain_password) secrets_fetch failed! [2009/08/06 08:46:29, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/08/06 08:46:29, 10] lib/gencache.c:194(gencache_get) Cache entry with key = TDOM/ couldn't be found [2009/08/06 08:46:29, 5] libsmb/trustdom_cache.c:183(trustdom_cache_fetch) no entry for trusted domain found. [2009/08/06 08:46:29, 5] auth/auth_util.c:229(make_user_info_map) Mapped domain from [] to [MAJER] for user [] from workstation [PC-ARCHIV] ... [2009/08/06 08:46:29, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[]@[PC-ARCHIV] with the new password interface [2009/08/06 08:46:29, 3] auth/auth.c:225(check_ntlm_password) check_ntlm_password: mapped user is: [MAJER]\[]@[PC-ARCHIV] And then i see in log a username "smbuser", but real username with i make logon is "hellebrand" [2009/08/06 08:46:29, 10] passdb/pdb_get_set.c:572(pdb_set_username) pdb_set_username: setting username smbuser, was [2009/08/06 08:46:29, 10] passdb/pdb_get_set.c:595(pdb_set_domain) pdb_set_domain: setting domain MAJER, was ... [2009/08/06 08:46:29, 10] passdb/pdb_get_set.c:734(pdb_set_homedir) pdb_set_homedir: setting home dir \\majerbox\smbuser, was [2009/08/06 08:46:29, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive U:, was NULL ... [2009/08/06 08:46:29, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\majerbox\smbuser\profileNT, was And after this i see good username "hellebrand" [2009/08/06 08:46:29, 3] rpc_server/srv_netlog_nt.c:946(_netr_LogonSamLogon) SAM Logon (Interactive). Domain:[MAJER]. User:[hellebrand@PC-ARCHIV] Requested Domain:[MAJER] [2009/08/06 08:46:29, 5] rpc_server/srv_netlog_nt.c:968(_netr_LogonSamLogon) Attempting validation level 3 for unmapped username hellebrand. ... [2009/08/06 08:46:29, 5] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:trustdomain [2009/08/06 08:46:29, 5] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match trustdomain ... [2009/08/06 08:46:29, 5] auth/auth_util.c:208(make_user_info_map) Mapping user [MAJER]\[hellebrand] from workstation [PC-ARCHIV] ... [2009/08/06 08:46:29, 10] lib/gencache.c:194(gencache_get) Cache entry with key = TDOM/MAJER couldn't be found [2009/08/06 08:46:29, 5] libsmb/trustdom_cache.c:183(trustdom_cache_fetch) no entry for trusted domain MAJER found. ... [2009/08/06 08:46:29, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: Checking password for unmapped user [MAJER]\[hellebrand]@[PC-ARCHIV] with the new password interface [2009/08/06 08:46:29, 3] auth/auth.c:225(check_ntlm_password) check_ntlm_password: mapped user is: [MAJER]\[hellebrand]@[PC-ARCHIV] [2009/08/06 08:46:29, 10] auth/auth.c:234(check_ntlm_password) check_ntlm_password: auth_context challenge created by random Is this behavior above correct? On workstation i see always error message "Windows cannot find the roaming profile..." :( thanks, Lukas
Created attachment 4529 [details] trace
(In reply to comment #26) Hi, i maked very much tests with many options in smb.conf (increase os level, set binding to interfaces, remove msdfs,...), but without success:( I attach new trace. Can you help me please? thanks, Lukas
Ah, you might want to try profile acls = yes in the share definition holding the profiles. Volker
Did setting "profile acls = yes" actually fixed the remaining issues then ?
No feedback. Closing this bug-report. If you still have issues, please open a different bug, this is no longer related to "Procedure number is out of range". Volker