Bug 6570 - Samba 3.4. - "The system cannot log you in due to the following error: Procedure number is out of range"
Samba 3.4. - "The system cannot log you in due to the following error: Proced...
Status: RESOLVED WORKSFORME
Product: Samba 3.4
Classification: Unclassified
Component: Domain Control
3.4.0
x86 Windows XP
: P3 normal
: ---
Assigned To: Guenther Deschner
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2009-07-22 07:51 UTC by Lukas DESEYVE
Modified: 2009-09-02 06:56 UTC (History)
0 users

See Also:


Attachments
smb.log with debug level 10 (35.77 KB, application/octet-stream)
2009-07-22 07:53 UTC, Lukas DESEYVE
no flags Details
My smb.conf (3.04 KB, text/plain)
2009-07-22 07:54 UTC, Lukas DESEYVE
no flags Details
tcpdump -p -s 1500 -w samba_trace.pcap port 445 or port 139 (239.17 KB, application/octet-stream)
2009-07-23 02:07 UTC, Lukas DESEYVE
no flags Details
whole smbd.log (916.35 KB, application/octet-stream)
2009-07-23 02:14 UTC, Lukas DESEYVE
no flags Details
whole log of my workstation (567.52 KB, application/octet-stream)
2009-07-23 02:17 UTC, Lukas DESEYVE
no flags Details
Trace after removing comment from smb.conf (12.04 KB, application/octet-stream)
2009-07-23 08:32 UTC, Lukas DESEYVE
no flags Details
smbd log after removing comment from smb.conf (66.87 KB, application/octet-stream)
2009-07-23 08:33 UTC, Lukas DESEYVE
no flags Details
smbd log after removing comment from smb.conf (590.40 KB, text/plain)
2009-07-23 08:36 UTC, Lukas DESEYVE
no flags Details
log of my workstation after removing comment from smb.conf (505.62 KB, text/plain)
2009-07-23 08:36 UTC, Lukas DESEYVE
no flags Details
whole smb.conf after removing comment (6.62 KB, text/plain)
2009-07-23 08:37 UTC, Lukas DESEYVE
no flags Details
log of my smbd with error "Windows cannot find the roaming profile..." (126.84 KB, application/octet-stream)
2009-07-30 02:37 UTC, Lukas DESEYVE
no flags Details
my smb.conf with error "Windows cannot find the roaming profile..." (5.44 KB, text/plain)
2009-07-30 02:39 UTC, Lukas DESEYVE
no flags Details
log smbd during logging to workstation (without using msdfs) (142.68 KB, application/octet-stream)
2009-07-31 00:22 UTC, Lukas DESEYVE
no flags Details
log.workstation during logging to workstation (without using msdfs) (119.25 KB, application/force-download)
2009-07-31 00:23 UTC, Lukas DESEYVE
no flags Details
log with bad sending a name of user? (90.56 KB, application/zip)
2009-08-06 01:52 UTC, Lukas DESEYVE
no flags Details
trace (49.58 KB, application/octet-stream)
2009-08-09 16:44 UTC, Lukas DESEYVE
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Lukas DESEYVE 2009-07-22 07:51:41 UTC
after update from samba 3.0.30 to 3.3.3 (or 3.4 also) i can't login to windowsXP machines with some user's domain accounts

i got always this error message:
 
"The system cannot log you in due to the following error: Procedure number
is out of range"
 
With some user's accounts all works right, but with another accounts is these
error.

And my second problem (very very similar) - if i type in "My computer" path to my server (for example \\myserver), so i got error message: "The item \\myserver is not accessible. You dont have right permissions. The procedure number is out of range". 
This second problem i have with all user's accounts (and also on all my servers afteer update to Samba 3.3 or 3.4).

My configuration is same as before the update, and before the update all works fine.

I attach log of my workstation from samba during acces to \\myserver from "My Computer" in Windows XP.

thanks, Lukas
Comment 1 Lukas DESEYVE 2009-07-22 07:53:43 UTC
Created attachment 4455 [details]
smb.log with debug level 10
Comment 2 Lukas DESEYVE 2009-07-22 07:54:08 UTC
Created attachment 4456 [details]
My smb.conf
Comment 3 Volker Lendecke 2009-07-22 11:40:38 UTC
Please upload the whole log.smbd with debug level 10. Please also upload a network trace. Information on how to create useful network traces can be found under http://wiki.samba.org/index.php/Capture_Packets.

Thanks,

Volker
Comment 4 Lukas DESEYVE 2009-07-23 02:07:03 UTC
Created attachment 4461 [details]
tcpdump -p -s 1500 -w samba_trace.pcap port 445 or port 139

10.76.66.176 is my Windows XP
10.76.66.10 is my samba server (netbios name=lbox)

during the trace i tried go to \\lbox
Comment 5 Lukas DESEYVE 2009-07-23 02:14:58 UTC
Created attachment 4462 [details]
whole smbd.log
Comment 6 Lukas DESEYVE 2009-07-23 02:17:15 UTC
Created attachment 4463 [details]
whole log of my workstation
Comment 7 Lukas DESEYVE 2009-07-23 02:34:15 UTC
(In reply to comment #3)
> Please upload the whole log.smbd with debug level 10. Please also upload a
> network trace. Information on how to create useful network traces can be found
> under http://wiki.samba.org/index.php/Capture_Packets.
> 
> Thanks,
> 
> Volker
> 

I uploaded all you need.

thanks, Lukas
Comment 8 Volker Lendecke 2009-07-23 07:34:32 UTC
Try removing the comment from share [homes], just for a test. If that helps, please convert the smb.conf file to utf-8 encoding using for example the iconv utility.

Volker
Comment 9 Lukas DESEYVE 2009-07-23 07:42:55 UTC
(In reply to comment #8)
> Try removing the comment from share [homes], just for a test. If that helps,
> please convert the smb.conf file to utf-8 encoding using for example the iconv
> utility.
> 
> Volker
> 
I tried remove comment, but without success:(

Lukas
Comment 10 Volker Lendecke 2009-07-23 08:11:37 UTC
Please send a new set of logs with the comment removed. It definitely stumbles over that.

Thanks,

Volker
Comment 11 Lukas DESEYVE 2009-07-23 08:32:45 UTC
Created attachment 4464 [details]
Trace after removing comment from smb.conf
Comment 12 Lukas DESEYVE 2009-07-23 08:33:25 UTC
Created attachment 4465 [details]
smbd log after removing comment from smb.conf
Comment 13 Lukas DESEYVE 2009-07-23 08:36:07 UTC
Created attachment 4466 [details]
smbd log after removing comment from smb.conf
Comment 14 Lukas DESEYVE 2009-07-23 08:36:47 UTC
Created attachment 4467 [details]
log of my workstation after removing comment from smb.conf
Comment 15 Lukas DESEYVE 2009-07-23 08:37:41 UTC
Created attachment 4468 [details]
whole smb.conf after removing comment
Comment 16 Lukas DESEYVE 2009-07-23 08:38:47 UTC
(In reply to comment #10)
> Please send a new set of logs with the comment removed. It definitely stumbles
> over that.
> 
> Thanks,
> 
> Volker
> 
I sent you a new set of logs.

Lukas
Comment 17 Volker Lendecke 2009-07-23 09:50:30 UTC
It stubles over a string

domovsk<FD> adres<E1><F8> u<9E>ivatele deseyve

which it can not convert to UCS2 due to wrong encoding. I don't see that string anywhere in the smb.conf file. Can you try restarting smbd to make sure that change actually is honored?

Thanks,

Volker
Comment 18 Lukas DESEYVE 2009-07-30 02:37:15 UTC
Created attachment 4484 [details]
log of my smbd with error "Windows cannot find the roaming profile..."
Comment 19 Lukas DESEYVE 2009-07-30 02:39:40 UTC
Created attachment 4485 [details]
my smb.conf with error "Windows cannot find the roaming profile..."
Comment 20 Lukas DESEYVE 2009-07-30 03:30:52 UTC
(In reply to comment #17)

Hi Volker,

in last nights i maked very much tests and i find that your idea with wrong enconding my comments in smb.conf was good - after removing comment and RESTART smbd i dont have error message "The procedure number is out of range...". Thank you very much.

But i have yet one problem with Samba 3.4.0 - i thought this problem conjoint with previous problem, but no - this problem continue to:(. If i logging to my Windows XP client station, so windows can't find my roaming profile. This problem is same for all users. I see only error message "Windows cannot find the roaming profile and is logging you on with a temporary profile. Your roaming profile have wrong security..."

But i am good permission. Fro example

drwx------ 16 knebel uzivatele     600 Jul 23 09:59 profileNT

But before update to samba 3.4.0 (with samba 3.0.30) i haven't this problem. I tried now yet downgrade to Samba 3.0.30 and all run fine. Then i again updated to samba 3.4.0 and this problem was here again.

I attach my smb.conf (i tried removing commnet and also encode to utf-8) and log.smbd with this error (during logging to workstation). Log of my workstation from samba you find here http://servis.lbox.cz/log.pc-pokladna

I tried also maked trace with tcpdump, but i captured always 0 packets (i dont know why, i use "tcpdump -p -s 1500 -w FILENAME port 445 or port 139").

thanks, Lukas

Comment 21 Volker Lendecke 2009-07-30 03:56:42 UTC
Can you please try to remove the "msdfs root = yes" from the [global] section and put this into all specific sections where you actually have msdfs links active? I've seen Windows having profile problems when "msdfs root" was active. Please as always, restart smbd and reboot the client.

Thanks,

Volker
Comment 22 Lukas DESEYVE 2009-07-31 00:22:15 UTC
Created attachment 4493 [details]
log smbd during logging to workstation (without using msdfs)
Comment 23 Lukas DESEYVE 2009-07-31 00:23:19 UTC
Created attachment 4494 [details]
log.workstation during logging to workstation (without using msdfs)
Comment 24 Lukas DESEYVE 2009-07-31 00:26:48 UTC
(In reply to comment #21)
Hi,

i removed msdfs (from [global] section and i don't use it in another share), but without success:( I have same problem. (after removing i maked restart samba and client workstation).

I attach new logs

thanks, Lukas
Comment 25 Lukas DESEYVE 2009-08-02 15:48:20 UTC
(In reply to comment #21)

So have you some idea?

thanks, Lukas
Comment 26 Volker Lendecke 2009-08-03 00:52:31 UTC
Sorry, busy with other stuff right now.

Volker
Comment 27 Lukas DESEYVE 2009-08-06 01:52:19 UTC
Created attachment 4519 [details]
log with bad sending a name of user?
Comment 28 Lukas DESEYVE 2009-08-06 02:05:48 UTC
(In reply to comment #26)
Hi,

i see in log maybe something wrong with name of user - at first i see that my workstation send to my samba server empty username

[2009/08/06 08:46:29,  5] auth/auth_util.c:208(make_user_info_map)
  Mapping user []\[] from workstation [PC-ARCHIV]
...
[2009/08/06 08:46:29,  5] auth/auth_util.c:2184(is_trusted_domain)
  is_trusted_domain: Checking for domain trust with []
[2009/08/06 08:46:29,  5] passdb/secrets.c:669(secrets_fetch_trusted_domain_password)
  secrets_fetch failed!
[2009/08/06 08:46:29,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/06 08:46:29, 10] lib/gencache.c:194(gencache_get)
  Cache entry with key = TDOM/ couldn't be found
[2009/08/06 08:46:29,  5] libsmb/trustdom_cache.c:183(trustdom_cache_fetch)
  no entry for trusted domain  found.
[2009/08/06 08:46:29,  5] auth/auth_util.c:229(make_user_info_map)
  Mapped domain from [] to [MAJER] for user [] from workstation [PC-ARCHIV]
...
[2009/08/06 08:46:29,  3] auth/auth.c:222(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user []\[]@[PC-ARCHIV] with the new password interface
[2009/08/06 08:46:29,  3] auth/auth.c:225(check_ntlm_password)
  check_ntlm_password:  mapped user is: [MAJER]\[]@[PC-ARCHIV]

And then i see in log a username "smbuser", but real username with i make logon is "hellebrand"

[2009/08/06 08:46:29, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  pdb_set_username: setting username smbuser, was
[2009/08/06 08:46:29, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  pdb_set_domain: setting domain MAJER, was
...
[2009/08/06 08:46:29, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  pdb_set_homedir: setting home dir \\majerbox\smbuser, was
[2009/08/06 08:46:29, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  pdb_set_dir_drive: setting dir drive U:, was NULL
...
[2009/08/06 08:46:29, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  pdb_set_profile_path: setting profile path \\majerbox\smbuser\profileNT, was

And after this i see good username "hellebrand"

[2009/08/06 08:46:29,  3] rpc_server/srv_netlog_nt.c:946(_netr_LogonSamLogon)
  SAM Logon (Interactive). Domain:[MAJER].  User:[hellebrand@PC-ARCHIV] Requested Domain:[MAJER]
[2009/08/06 08:46:29,  5] rpc_server/srv_netlog_nt.c:968(_netr_LogonSamLogon)
  Attempting validation level 3 for unmapped username hellebrand.
...
[2009/08/06 08:46:29,  5] auth/auth.c:389(load_auth_module)
  load_auth_module: Attempting to find an auth method to match winbind:trustdomain
[2009/08/06 08:46:29,  5] auth/auth.c:389(load_auth_module)
  load_auth_module: Attempting to find an auth method to match trustdomain
...
[2009/08/06 08:46:29,  5] auth/auth_util.c:208(make_user_info_map)
  Mapping user [MAJER]\[hellebrand] from workstation [PC-ARCHIV]
...
[2009/08/06 08:46:29, 10] lib/gencache.c:194(gencache_get)
  Cache entry with key = TDOM/MAJER couldn't be found
[2009/08/06 08:46:29,  5] libsmb/trustdom_cache.c:183(trustdom_cache_fetch)
  no entry for trusted domain MAJER found.
...
[2009/08/06 08:46:29,  3] auth/auth.c:222(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user [MAJER]\[hellebrand]@[PC-ARCHIV] with the new password interface
[2009/08/06 08:46:29,  3] auth/auth.c:225(check_ntlm_password)
  check_ntlm_password:  mapped user is: [MAJER]\[hellebrand]@[PC-ARCHIV]
[2009/08/06 08:46:29, 10] auth/auth.c:234(check_ntlm_password)
  check_ntlm_password: auth_context challenge created by random


Is this behavior above correct?

On workstation i see always error message "Windows cannot find
the roaming profile..." :(


 
thanks, Lukas
Comment 29 Lukas DESEYVE 2009-08-09 16:44:44 UTC
Created attachment 4529 [details]
trace
Comment 30 Lukas DESEYVE 2009-08-09 16:53:30 UTC
(In reply to comment #26)
Hi,

i maked very much tests with many options in smb.conf (increase os level, set binding to interfaces, remove msdfs,...), but without success:(

I attach new trace.

Can you help me please?

thanks, Lukas
Comment 31 Volker Lendecke 2009-08-10 05:06:20 UTC
Ah, you might want to try

profile acls = yes

in the share definition holding the profiles.

Volker
Comment 32 Guenther Deschner 2009-09-01 19:32:26 UTC
Did setting "profile acls = yes" actually fixed the remaining issues then ?
Comment 33 Volker Lendecke 2009-09-02 06:56:44 UTC
No feedback. Closing this bug-report.

If you still have issues, please open a different bug, this is no longer related to "Procedure number is out of range".

Volker