Friday, July 13, 2012

Samba DC and Windows 7

An incident occurred where Windows 7 clients were giving the error:
"There are currently no logon servers available to service the logon request"
when trying to connect to a Samba 3.4.4 domain controller (eBox). 
The setup had been working fine for approximately 6 months. 
After 1 reboot and many investigations to samba, ldap, DNS configs, IPv6, etc. it was discovered that the nmbd (BIOS name services - WINS) was not stopping when /etc/init.d/samba stop was executed.

Manually killed the service using:
 killall -SIGTERM nmbd
Then everything started working properly again!

Some packet traces revealed the following when trying to re-join a Windows 7 workstation to the domain:
A DNS query is made first.
Followed by NETBIOS-DN name lookups. (UDP port 137)
Followed by the LDAP query.

The server was initialy responding with "ICMP-No response on port 137".
So it looks like in this setup, Samba relies more on WINS(nmbd) than DNS(proper).

Also, we had to comment out the VFS lines in samba.conf,
as described in this post:
http://forum.zentyal.org/index.php?topic=3298.0

No comments:

Post a Comment