When the domain browse list is too large to fit into a 64k packet, a Windows PC sends NetServerEnum3 request, and the Samba server responds with a "malformed packet".
The browse list on our (Samba) PDC is currently over 2700 entries. (This numbers was obtained by sending a -1 signal to nmbd and retrieving info from the log). When the (Samba) BDCs run the sync_with_dmb function, only part of the list can be retrieved. The BDCs have approx 2100-2300 entries.
I found a commit log entry from two years ago:
This seems to imply that NetServerEnum3 has been implemented in the Samba client code, but it is clearly not working in the server code.
I have tried turning on enhanced browsing, but it made no difference.
We are taking steps to reduce the size of the browse list (it's mostly PCs that don't need to be listed) but in the meantime we have problems because certain hosts that need to visible domain-wide are not.
I intend to attach an example of a packet trace showing the replication failure, level 10 logs from a BDC and from the PDC, and also the full config information. The logs and packet trace are from separate replication instances, not simultaneous. Please let me know if there's any further information you require.
Created attachment 4779 [details]
Packet trace of browse list failure
This was captured on a BDC (hostname = CTSV01) and shows an attempt to synchronise with the PDC (hostname = COM).
Created attachment 4780 [details]
Level 10 log from BDC
Created attachment 4781 [details]
Level 10 log from domain master browser
This was captured on the PDC/Domain master browser (hostname = COM) and shows a complete instance of attempted replication to a BDC (hostname = MLSV01).
Created attachment 4782 [details]
Gzipped tar file of the configs from both the PDC and a typical BDC.
Updated from 3.3.6 to 3.3.7, this behaviour still occurs.