On Wed, Jan 04, 2012 at 05:18:11PM -0800, Don Krause wrote: > Some additional info, I'm starting to believe that this is caused by an MS > patch that was applied to our AD servers. > > I've unarchived the original VMWare image of the test linux installation that > we used to verify that 2008r2 AD and Samba would work with win7 clients, it > behaves exactly the same way. > > From windows, run \\test7 and it immediately returns the full list of > available shares, however, click on a share, and it takes more than 1 full > minute before access is granted. > > Then, I set up a new VM, this time used Cent 6.2, with samba 3.5. Configured, > joined the domain, etc. > > net ads testjoin works, wbinfo works, kinit works, everything checks out, but > this case, the problem is worse. > > running \\test12 immediately brings up a list of all shares, attempting to > click on any causes the > 1 min what, but then access is denied. > > Odd, the logs appear to say that access is granted. > > [2012/01/04 16:14:40.004734, 3] lib/access.c:392(check_access) > check_access: no hostnames in host allow/deny list. > [2012/01/04 16:14:40.004933, 2] lib/access.c:409(check_access) > Allowed connection from (::ffff:172.24.143.3) > [2012/01/04 16:14:40.004981, 10] smbd/share_access.c:238(user_ok_token) > user_ok_token: share scully is ok for unix user dkrause > > But win7 says that access is denied. > > Losing my hair here… > > Thanks!
Full debug logs and a network trace might be helpful. For creating useful network traces, see http://wiki.samba.org/index.php/Capture_Packets Thanks, Volker -- SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen phone: +49-551-370000-0, fax: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen http://www.sernet.de, mailto:[email protected] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
