Hello,
I am running a Samba server (samba-3.0.10-1.4E.11) and Squid (squid-2.5.STABLE14-1.4E )on a Redhat Advance server 4 update 5. I have connected this server successfully to a Windows 2003 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the internet is stop browsing. If I restart the squid and winbind and smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind and squid services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance.
---------/var/log/squid/cache.log----------
[2009/09/26 12:02:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2009/09/26 12:02:43, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2009/09/26 12:02:43, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2009/09/26 12:02:43, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2009/09/26 12:02:43, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2009/09/26 12:02:43, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2009/09/26 12:02:43, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
[global]
workgroup = DOMAIN
netbios name = HOPROXY
realm = DOMAIN.HOME
server string = Linux Samba Server
security = ads
encrypt passwords = Yes
password server = 10.1.5.11
log file = /var/log/samba/%m.log
max log size = 0
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
preferred master = False
local master = No
domain master = False
dns proxy = No
wins server = 10..1.5.11
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
idmap uid = 10000-20000
idmap gid = 10000-20000
client schannel = no
---------/etc/nsswitch.conf-------
passwd: files winbind
group: files winbind
hosts: files dns wins winbind
---------/etc/krb5.conf-----------
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
#ticket_lifetime = 24000
default_realm = DOMAIN.HOME
dns_lookup_realm = false
dns_lookup_kdc = false
[realms]
DOMAIN.HOME = {
kdc = 10.1.5.11
admin_server = 10.1.5.11
default_domain = DOMAIN.HOME
}
[domain_realm]
.domain.home = DOMAIN.HOME
domain.home = DOMAIN.HOME
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
-----------/etc/pam.d/system-auth-winbind-------------
#%PAM-1.0
auth required /lib/security/pam_env.so
auth required /lib/security/pam_securetty.so
auth required /lib/security/pam_nologin.so
auth sufficient /lib/security/pam_winbind.so
auth sufficient /lib/security/pam_unix..so likeauth nullok use_first_pass shadow
auth required /lib/security/pam_deny.so
account sufficient /lib/security/pam_unix.so
account required /lib/secuirty/pam_winbind.so
password required /lib/security/pam_cracklib.so retry=3 type=
password sufficient /lib/security/pam_unix.so nullok use_authtok md5 shadow
password required /lib/security/pam_deny.so
session required /lib/security/pam_limits.so
session required /lib/security/pam_unix.so
Regards,
Ashraf.
