Re: [Samba] Windows 7 domain logon timeouts was Re: Domain login delays w2k8 R2
Great!!! Your first suggestion (Set maximum wait time...) seems to fix my problem! Now I can turn my attention som some other delays/ performace problems (not w2k8 related). And then there is the small "printing from 64-bit clients" problem... Maybe I will get back to those problems in another post ;-) Thank's a millon! Åke Homlund --On torsdag, torsdag 4 feb 2010 18.54.56 + "Cain, Marc" wrote: Samba 3.4.3 (ldap backend) Windows 7 Enterprise I've experienced the identical symptoms with Windows 7 ENT and found this workaround. When the following local GPO is left in its default setting Samba domain logons are delayed for 30 seconds: "Computer Configuration\Administrative Templates\System\User Profiles\Set maximum wait time for the network if the user has a roaming user profile or remote home directory." Enable this and set the value to 0 to work around this timeout. The timeout does not occur when logging into an Active Directory PDC running Server 2008 R2. I have not tested this with w2k8 R2 client. In addition, if the user's desktop is set to a solid background color logons of any kind (local, AD, samba) will be delayed by 30 seconds. Set the background to any .jpg image or apply Microsoft's hotfix to work around this issue. This is a cumulative timeout; that is, if the above timeout is in affect and the solid background color timeout is also in affect the delay is 60 seconds. I also experienced a 30 second timeout when I set the local GPO to "Run logon scripts synchronously". This problem has inexplicably vanished and I can't replicate it though I don't see it listed in any Windows 7 updates. Might have been happening to me with Windows 7 PRO. I'll check that if anyone is interested. The fix was to apply an old Vista reg setting. Can be Googled as "Vista Run logon scripts synchronously". Marc Cain On Feb 4, 2010, at 3:33 AM, Åke Holmlund wrote: Not much. I attached a screendump from Wireshark. This capture is made on the w2k8 machine. The traffic shown is sent to/from the ethernet address of the w2k8 machine. Remote Desktop traffic is excluded (the machine is used as a terminal server). Regards, Åke Holmlund --On 3 februari 2010 14.08.49 -0800 Jeremy Allison wrote: On Wed, Feb 03, 2010 at 03:19:36PM +0100, Åke Holmlund wrote: Hello! From what I can see, there is no DNS-traffic around the time of the gaps and the DNS-activity I can see in onther places seems ok. There is almost no network traffic and no CPU activity during the gaps so it looks like some kind of timeout issue. It may be of interest that, for the moment, IPv6 is beeing used. Sometimes we also have quite a long delay if we click on the "View computers and devices" link in the "Network and Sharing Center". Is there any other traffic coming out of the client box around the delay time ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Domain login delays w2k8 R2
Not much. I attached a screendump from Wireshark. This capture is made on the w2k8 machine. The traffic shown is sent to/from the ethernet address of the w2k8 machine. Remote Desktop traffic is excluded (the machine is used as a terminal server). Regards, Åke Holmlund --On 3 februari 2010 14.08.49 -0800 Jeremy Allison wrote: On Wed, Feb 03, 2010 at 03:19:36PM +0100, Åke Holmlund wrote: Hello! From what I can see, there is no DNS-traffic around the time of the gaps and the DNS-activity I can see in onther places seems ok. There is almost no network traffic and no CPU activity during the gaps so it looks like some kind of timeout issue. It may be of interest that, for the moment, IPv6 is beeing used. Sometimes we also have quite a long delay if we click on the "View computers and devices" link in the "Network and Sharing Center". Is there any other traffic coming out of the client box around the delay time ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Domain login delays w2k8 R2
Hi! Valid point but I have not yet installed any anti virus software on this machine. I have also tried disabeling the firewall but it makes no difference. Regards, Åke Holmlund --On 3 februari 2010 15.46.37 +0100 Martin Hochreiter wrote: Am 2010-02-03 15:19, schrieb Åke Holmlund: Hello! From what I can see, there is no DNS-traffic around the time of the gaps and the DNS-activity I can see in onther places seems ok. There is almost no network traffic and no CPU activity during the gaps so it looks like some kind of timeout issue. It may be of interest that, for the moment, IPv6 is beeing used. Sometimes we also have quite a long delay if we click on the "View computers and devices" link in the "Network and Sharing Center". Regards, Åke Holmlund --On 2 februari 2010 10.16.22 -0800 Jeremy Allison wrote: On Tue, Feb 02, 2010 at 07:03:11PM +0100, Åke Holmlund wrote: Hello! We have a w2k8 R2 64-bit machine in a Samba 3.4.4 controlled domain. When logging in as a domain user there is a ~30 sec delay waiting for the User Profile Service. This has nothing to do with the size of the user profile. Looking at the network traffic I can see 2 gaps, the first about 11 sek and the second about 19 sek with no packets sent except one TCP ACK (from the client) in each gap. Between the gaps there is only a few packets sent. According to WireShark it's a "Tree Disconnect Request" with response and a "Logoff AndX Request" with response. Any idea what may be causing this? Hi! We had the same problem - 2 ~30 second delays while loading the roaming profile The solution at our site was not related to samba ... it was the McAffee enterprise virus scanner. By patching it to the latest version this 2 delays were gone. - do you use McAffee or a similar enterprise scanner? regards Maritn -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Domain login delays w2k8 R2
Hello! From what I can see, there is no DNS-traffic around the time of the gaps and the DNS-activity I can see in onther places seems ok. There is almost no network traffic and no CPU activity during the gaps so it looks like some kind of timeout issue. It may be of interest that, for the moment, IPv6 is beeing used. Sometimes we also have quite a long delay if we click on the "View computers and devices" link in the "Network and Sharing Center". Regards, Åke Holmlund --On 2 februari 2010 10.16.22 -0800 Jeremy Allison wrote: On Tue, Feb 02, 2010 at 07:03:11PM +0100, Åke Holmlund wrote: Hello! We have a w2k8 R2 64-bit machine in a Samba 3.4.4 controlled domain. When logging in as a domain user there is a ~30 sec delay waiting for the User Profile Service. This has nothing to do with the size of the user profile. Looking at the network traffic I can see 2 gaps, the first about 11 sek and the second about 19 sek with no packets sent except one TCP ACK (from the client) in each gap. Between the gaps there is only a few packets sent. According to WireShark it's a "Tree Disconnect Request" with response and a "Logoff AndX Request" with response. Any idea what may be causing this? Gaps like that are almost always DNS lookups of some kind :-). Are you looking for those, or just CIFS traffic ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Domain login delays w2k8 R2
Hello! We have a w2k8 R2 64-bit machine in a Samba 3.4.4 controlled domain. When logging in as a domain user there is a ~30 sec delay waiting for the User Profile Service. This has nothing to do with the size of the user profile. Looking at the network traffic I can see 2 gaps, the first about 11 sek and the second about 19 sek with no packets sent except one TCP ACK (from the client) in each gap. Between the gaps there is only a few packets sent. According to WireShark it's a "Tree Disconnect Request" with response and a "Logoff AndX Request" with response. Any idea what may be causing this? ------ Åke Holmlund Phone: 090 - 786 57 16 Umeå University Fax: 090 - 786 65 50 Dept of Informatics Email: h...@informatik.umu.se 901 87 Umeå SWEDEN -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Can't connect to printers from Win 2008 and Win 7
Thank You for making that clear! New problem. I have been trying to set up a temporary Samba server to handle printing until this problem gets fixed. I am running 3.3.10 on a Sun Solaris 10 machine. From a Win 2003 (32 bit) server I can install print drivers and print ok but from Win 2008 R2 and Win 7 it´s not working. In Win 2008 R2, if I try to connect to a printer with no drivers installed on the server I get a dialog box stating that there are no drivers installed on the server. This is as expected. However, if I go to properties there is NO dialog about missing drivers. Clicking on the Advanced tab and then "New Driver" starts the "Add Printer" wizard but when I get to the "Printer Driver Selection" there are no drivers to choose from. All I can see is the text "(Unable to find any drivers for this device)" If I try to connect to a printer that has a driver installed, I get error 0x06d1 Any ideas? Åke Holmlund --On 29 januari 2010 10.09.57 -0800 Jeremy Allison wrote: On Fri, Jan 29, 2010 at 05:46:14PM +0100, Åke Holmlund wrote: Hello! I have sent this a few days ago but I don't think it made it to the mailinglist. We have problems connecting to printers (spoolss) from Windows Server 2008 (64-bit, domain member) and Windows 7 (64-bit, NOT domain member). When trying to connect to the printers we get an error message saying "Windows cannot connect to the printer. Operation could not be completed (error 0x000d)". Connecting as a "standard" user or a domain administrator makes no difference. If I try to add a printer on the server from Windows 2008, there are no ports to choose from in the "Choose a printer port" dialog. Connecting to the printers is no problem from Win XP, Win Vista and Win 2003 (all 32-bit). When trying to add a printer from Windows 2003, the "Samba Printer Port" shows up in the "Choose a printer port" dialog. The Samba (domain) server is 3.4.4 running on Solaris 10 (Sparc). Any ideas what the problem can be or where to start looking? Ok, here's the deal. If you have 64-bit Windows clients at the moment you need to be using 3.3.10, not anything later. If you're using 32-bit Windows clients, you can use 3.4.5 or later. The reason (and Guenther can correct me if I'm wrong), is that in 3.4.x we changed from the hand-marshalled SPOOLSS RPC we used in 3.3.x, which was mostly correct after being worked on for many years, to pidl-generated SPOOLSS RPC directly from the idl files. Now our idl files are correct, but it turns out that the Windows idl parser for SPOOLSS is itself custom, and won't accept the normally marshalled RPC packets that the pidl-generated code creates. Guenter and Metze have been doing a lot of work on fixing this, and this is why 32-bit Windows clients work in 3.4.5. However there are still some changes needed for 64-bit Windows clients, and this will probably make it into an early patch for 3.5.x (it won't make 3.5.0, as it's too late to test the changes needed before we ship next month). I'm going to write this up as a tech-note for the next 3.4.x release and for 3.5.0 and get it into the release notes. Hope this hasn't caused you too many problems. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Can't connect to printers from Win 2008 and Win 7
Hello! I have sent this a few days ago but I don't think it made it to the mailinglist. We have problems connecting to printers (spoolss) from Windows Server 2008 (64-bit, domain member) and Windows 7 (64-bit, NOT domain member). When trying to connect to the printers we get an error message saying "Windows cannot connect to the printer. Operation could not be completed (error 0x000d)". Connecting as a "standard" user or a domain administrator makes no difference. If I try to add a printer on the server from Windows 2008, there are no ports to choose from in the "Choose a printer port" dialog. Connecting to the printers is no problem from Win XP, Win Vista and Win 2003 (all 32-bit). When trying to add a printer from Windows 2003, the "Samba Printer Port" shows up in the "Choose a printer port" dialog. The Samba (domain) server is 3.4.4 running on Solaris 10 (Sparc). Any ideas what the problem can be or where to start looking? --- Åke Holmlund Umeå University Dept of Informatics Umeå SWEDEN -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Problem installing print driver to Samba print$ share
Hello! I'm trying to install (using the "Add printer" wizard on a client) a Postscript driver for a Sharp MX-5001N multifunction copier/printer/etc machine to a Samba print$ share. The installation seems go ok but when I try to access the printer properties I get a dialog box stating that "... printer driver is not installed on this computer... Do You want to install the driver now?" The same thing happens when I try to install the drivers from the server on another client. I do NOT want to install the drivers locally on all the clients... Is there a way around this problem? We are using Samba 3.4.4 on Sun Solaris 10. We are not using Cups. I have tried to install the driver from Win 2003 server and Win XP. Thank You! --- Åke Holmlund Umeå University Dept of Informatics Umeå SWEDEN -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Can't connect to printers from Win 2008 and Win 7
Hello! We have problems connecting to printers (spoolss) from Windows Server 2008 (64-bit, domain member) and Windows 7 (64-bit, NOT domain member). When trying to connect to the printers we get an error message saying "Windows cannot connect to the printer. Operation could not be completed (error 0x000d)". Connecting as a "standard" user or a domain administrator makes no difference. If I try to add a printer on the server from Windows 2008, there are no ports to choose from in the "Choose a printer port" dialog. Connecting to the printers is no problem from Win XP, Win Vista and Win 2003 (all 32-bit). When trying to add a printer from Windows 2003, the "Samba Printer Port" shows up in the "Choose a printer port" dialog. The Samba (domain) server is 3.4.4 running on Solaris 10 (Sparc). Any ideas what the problem can be or where to start looking? --- Åke Holmlund Umeå University Dept of Informatics Umeå SWEDEN -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Ldap and "domain admin group"
Hi, I have tried to add a user (not a group) to "domain admin group" in smb.conf with no success. If i use the usermanager an check the Administrators group on the local machine there are two members, Administrator and DOMAIN\unix_group.2147483404 and the user does NOT get administrative priviliges on the local machine. If I add the user to the Administrators group on the local machine it works as expected. Have anyone else seen this and/or have any idea what's going on here? I'm using Samba 2.2.4 (and 2.2.5pre1) as PDC, Ldap (OpenLdap and Netscape), Solaris 8 and Windows 2000 prof. Thank's ----- Åke HolmlundTel: +46 - 90 786 57 16 Umeå University Fax: +46 - 90 786 65 50 Dept of informatics Email: [EMAIL PROTECTED] SE-901 87 Umeå Sweden -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 2.2.5pre1 + OpenLDAP + Ldap replication
Hello. This is a configuration problem concerning both Sanba and OpenLDAP. I'm testing a setup involving 2-3 Samba servers and 2-3 Ldap servers. I would like to setup 1 master Ldap server and the rest as slave servers with replication from the master to the slaves. The Samba servers will be "talking to" different LDAP servers. The problem i how to cope with updates from the Samba servers who are using the slave Ldap servers. I have tried to configure the slave Ldap server with an updateref (slapd.conf) to redirect the updates to the master Ldap server but I guess this is not supported in Samba or have I done something wrong? The other way is probably to make all Ldap servers masters and make them replicate updates to all other Ldap servers but this setup seems to me as potentially dangerous. Have anybody else tried this type of setup and, if so, how have You done it? Thank's! --------- Åke HolmlundTel: +46 - 90 786 57 16 Umeå University Fax: +46 - 90 786 65 50 Dept of informatics Email: [EMAIL PROTECTED] SE-901 87 Umeå Sweden -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] About password length in solaris 8 and samba 2.2.4
> > Aha, explains why passwords set with smbpasswd gets truncated. getpass() > > returns, at most, PASS_MAX bytes (8). getpassphrase(), on the other > > hand, returns up to 256 characters. > > Hmmon my solaris boxes (both with Sun's workshop C compiler > and GCC), REPLACE_GETPASS is being defined, so there is not a problem. > Can you check in include/config.h and see if this is defined? > If not, I need to figure out why not No, it's not. Checked include/config.h and also ran configure: checking whether getpass should be replaced... no > What Solaris release is this? and what compiler? > Also include any ./configure options you have set. Solaris 8, Sun Workshop 6, update 1. My "configuration": env CC=cc \ CPPFLAGS="-DHACK" \ CFLAGS="-xO3" \ ../configure \ --prefix=/opt/Samba \ --sysconfdir=/var/conf/Samba \ --localstatedir=/var/conf/Samba \ --with-privatedir=/var/conf/Samba/private \ --with-lockdir=/var/conf/Samba/locks \ --with-configdir=/var/conf/Samba \ --with-logfilebase=/var/log \ --with-ldapsam \ --with-quotas \ --without-winbind The -DHACK thing is some LDAP modifications primarily to be able to use Solaris LDAP libraries. ----- Åke HolmlundTel: +46 - 90 786 57 16 Umeå University Fax: +46 - 90 786 65 50 Dept of informatics Email: [EMAIL PROTECTED] SE-901 87 Umeå Sweden -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] About password length in solaris 8 and samba 2.2.4
> On Fri, 31 May 2002, Terja Antola wrote: > > > Probably Solaris' getpass() routine or something we use. I'll add it to > > my list of stuff to look at when I can. > > > > > > ... > > Have you found any solution to problem above? > > Haven't had a chance to look at it yet. Aha, explains why passwords set with smbpasswd gets truncated. getpass() returns, at most, PASS_MAX bytes (8). getpassphrase(), on the other hand, returns up to 256 characters. --------- Åke HolmlundTel: +46 - 90 786 57 16 Umeå University Fax: +46 - 90 786 65 50 Dept of informatics Email: [EMAIL PROTECTED] SE-901 87 Umeå Sweden -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] 2.2.4/spools/HP DJ 1120 driver problem
Hi all. Just want to mention that we have similar problems as the original poster with Postscript drivers for HP LaserJet 4 Si, 4000N and 4050N. With drivers for a QMS Magicolor all seems fine. - Åke HolmlundTel: +46 - 90 786 57 16 Umeå University Fax: +46 - 90 786 65 50 Dept of informatics Email: [EMAIL PROTECTED] SE-901 87 Umeå Sweden -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba