ich habe UCS-Server 3.2-2 errata138 installiert. Bei einem
Mitarbeiter wurde eine neue CAD Softw[ul][/ul]are installiert die regelmäßig mit einem
Netzwerkfehler abstürzt. Im Samba Logfile finde ich folgende Einträge:
[code]> create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:37:42.085769, 1, pid=20601]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.26 (ipv4:192.168.0.26:63999) closed connection to service sysvol
[2014/09/05 10:40:33.116651, 1, pid=21001]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:40:33.703083, 1, pid=21045]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:44:04.512044, 1, pid=21248]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:44:05.096312, 1, pid=21292]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:45:29.337698, 1, pid=5203]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:56104) closed connection to service cb
[2014/09/05 10:45:29.337796, 1, pid=5203]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:56104) closed connection to service Archiv
[2014/09/05 10:45:29.337863, 1, pid=5203]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:56104) closed connection to service CAD
[2014/09/05 10:45:29.337927, 1, pid=5203]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:56104) closed connection to service Vermietung
[2014/09/05 10:45:29.337989, 1, pid=5203]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:56104) closed connection to service Vertrieb
[2014/09/05 10:45:29.338051, 1, pid=5203]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:56104) closed connection to service Projekte
[2014/09/05 10:46:18.433590, 1, pid=21658]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:46:19.021750, 1, pid=21702]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:46:56.961123, 1, pid=21812]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:46:57.902441, 1, pid=21856]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:47:38.772415, 1, pid=21906]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:47:39.362765, 1, pid=21950]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:54:12.223155, 1, pid=21604]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:50370) closed connection to service CAD
[2014/09/05 10:56:09.320173, 1, pid=22704]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:60327) closed connection to service sysvol
[2014/09/05 10:56:09.326069, 1, pid=22794]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:60336) closed connection to service cb
[2014/09/05 10:56:27.323100, 1, pid=22748]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:60331) closed connection to service netlogon
[2014/09/05 10:56:39.319116, 1, pid=22847]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:60342) closed connection to service sysvol
[2014/09/05 11:09:30.124106, 1, pid=21604]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:50370) closed connection to service cb[/code]
Und folögendes im syslog:
Sep 5 10:37:06 isb-server named[1446]: client 192.168.0.26#63036: updating zone 'isb.dom/NONE': deleting rrset at 'isb-0914.isb.dom' A
Sep 5 10:37:06 isb-server named[1446]: samba_dlz: subtracted rdataset isb-0914.isb.dom 'isb-0914.isb.dom.#011900#011IN#011A#011192.168.0.26'
Sep 5 10:37:06 isb-server named[1446]: client 192.168.0.26#63036: updating zone 'isb.dom/NONE': adding an RR at 'isb-0914.isb.dom' A
Sep 5 10:37:06 isb-server named[1446]: samba_dlz: added rdataset isb-0914.isb.dom 'isb-0914.isb.dom.#0111200#011IN#011A#011192.168.0.26'
Sep 5 10:37:06 isb-server named[1446]: samba_dlz: subtracted rdataset isb.dom 'isb.dom.#01110800#011IN#011SOA#011isb-server.isb.dom. root.isb.dom. 54 28800 7200 604800 0'
Sep 5 10:37:06 isb-server named[1446]: samba_dlz: added rdataset isb.dom 'isb.dom.#01110800#011IN#011SOA#011isb-server.isb.dom. root.isb.dom. 55 28800 7200 604800 0'
Sep 5 10:37:06 isb-server named[1446]: samba_dlz: committed transaction on zone isb.dom
Sep 5 10:38:29 isb-server dhcpd: DHCPINFORM from 192.168.0.26 via eth0: not authoritative for subnet 192.168.0.0
Sep 5 10:38:32 isb-server dhcpd: DHCPINFORM from 192.168.0.26 via eth0: not authoritative for subnet 192.168.0.0
Sep 5 10:38:40 isb-server dhcpd: DHCPINFORM from 192.168.0.23 via eth0: not authoritative for subnet 192.168.0.0
Sep 5 10:38:43 isb-server dhcpd: DHCPINFORM from 192.168.0.23 via eth0: not authoritative for subnet 192.168.0.0
Sep 5 10:39:01 isb-server /USR/SBIN/CRON[20817]: (root) CMD ( [ -x /usr/lib/php5/maxlifetime ] && [ -d /var/lib/php5 ] && find /var/lib/php5/ -type f -cmin +$(/usr/lib/php5/maxlifetime) -delete)
Sep 5 10:40:02 isb-server /USR/SBIN/CRON[20917]: (root) CMD ( if [ -x /usr/sbin/univention-umount-homedirs ]; then /usr/sbin/univention-umount-homedirs; fi)
Sep 5 10:40:02 isb-server /USR/SBIN/CRON[20919]: (root) CMD (/usr/share/univention-ssl/ssl-sync >>/var/log/univention/ssl-sync.log 2>&1)
Sep 5 10:40:02 isb-server /USR/SBIN/CRON[20926]: (root) CMD (if [ -x /usr/bin/mrtg ] && [ -r /etc/mrtg.cfg ]; then mkdir -p /var/log/mrtg ; env LANG=C /usr/bin/mrtg /etc/mrtg.cfg 2>&1 | tee -a /var/log/mrtg/mrtg.log ; fi)
Sep 5 10:40:02 isb-server /USR/SBIN/CRON[20937]: (root) CMD (/usr/sbin/jitter 60 /usr/share/univention-samba4/scripts/sysvol-sync.sh >>/var/log/univention/sysvol-sync.log 2>&1)
Sep 5 10:45:02 isb-server /USR/SBIN/CRON[21471]: (root) CMD (if [ -x /usr/bin/mrtg ] && [ -r /etc/mrtg.cfg ]; then mkdir -p /var/log/mrtg ; env LANG=C /usr/bin/mrtg /etc/mrtg.cfg 2>&1 | tee -a /var/log/mrtg/mrtg.log ; fi)
Sep 5 10:45:02 isb-server /USR/SBIN/CRON[21475]: (root) CMD ( [ -x /usr/lib/univention-pam/ldap-group-to-file.py ] && /usr/lib/univention-pam/ldap-group-to-file.py --check_member)
Sep 5 10:45:02 isb-server /USR/SBIN/CRON[21476]: (root) CMD (/usr/sbin/univention-mrtg)
Sep 5 10:45:02 isb-server /USR/SBIN/CRON[21478]: (root) CMD (/usr/sbin/jitter 60 /usr/share/univention-samba4/scripts/sysvol-sync.sh >>/var/log/univention/sysvol-sync.log 2>&1)
Sep 5 10:45:10 isb-server named[1446]: error (network unreachable) resolving 'googleads.g.doubleclick.net/A/IN': 2001:503:231d::2:30#53
Sep 5 10:45:18 isb-server named[1446]: error (network unreachable) resolving 'googleads.g.doubleclick.net/A/IN': 2001:503:a83e::2:30#53
Sep 5 10:45:20 isb-server named[1446]: error (network unreachable) resolving 'b.gtld-servers.net/A/IN': 2001:500:2::c#53
Sep 5 10:45:20 isb-server named[1446]: error (network unreachable) resolving 'd.gtld-servers.net/AAAA/IN': 2001:500:2::c#53
...
Sep 5 10:45:26 isb-server named[1446]: success resolving 'googleads.g.doubleclick.net/A' (in 'doubleclick.net'?) after disabling EDNS
Sep 5 10:45:26 isb-server named[1446]: success resolving 'b.gtld-servers.net/A' (in 'net'?) after disabling EDNS
Sep 5 10:45:26 isb-server named[1446]: success resolving 'd.gtld-servers.net/AAAA' (in 'net'?) after disabling EDNS
...
Sep 5 10:47:27 isb-server named[1446]: clients-per-query decreased to 11
Sep 5 10:48:40 isb-server dhcpd: DHCPINFORM from 192.168.0.26 via eth0: not authoritative for subnet 192.168.0.0
Sep 5 10:48:43 isb-server dhcpd: DHCPINFORM from 192.168.0.26 via eth0: not authoritative for subnet 192.168.0.0
Sep 5 10:48:51 isb-server dhcpd: DHCPINFORM from 192.168.0.23 via eth0: not authoritative for subnet 192.168.0.0
Sep 5 10:48:54 isb-server dhcpd: DHCPINFORM from 192.168.0.23 via eth0: not authoritative for subnet 192.168.0.0
Sep 5 10:50:01 isb-server /USR/SBIN/CRON[22178]: (root) CMD ( if [ -x /usr/sbin/univention-umount-homedirs ]; then /usr/sbin/univention-umount-homedirs; fi)
Sep 5 10:50:01 isb-server /USR/SBIN/CRON[22182]: (root) CMD (/usr/sbin/jitter 60 /usr/share/univention-samba4/scripts/sysvol-sync.sh >>/var/log/univention/sysvol-sync.log 2>&1)
Sep 5 10:50:01 isb-server /USR/SBIN/CRON[22185]: (root) CMD (if [ -x /usr/bin/mrtg ] && [ -r /etc/mrtg.cfg ]; then mkdir -p /var/log/mrtg ; env LANG=C /usr/bin/mrtg /etc/mrtg.cfg 2>&1 | tee -a /var/log/mrtg/mrtg.log ; fi)
Sep 5 10:50:11 isb-server dhcpd: DHCPINFORM from 192.168.0.13 via eth0: not authoritative for subnet 192.168.0.0
Sep 5 10:50:14 isb-server dhcpd: DHCPINFORM from 192.168.0.13 via eth0: not authoritative for subnet 192.168.0.0
Sep 5 10:55:01 isb-server /USR/SBIN/CRON[22578]: (root) CMD (/usr/sbin/jitter 60 /usr/share/univention-samba4/scripts/sysvol-sync.sh >>/var/log/univention/sysvol-sync.log 2>&1)
Sep 5 10:55:01 isb-server /USR/SBIN/CRON[22581]: (root) CMD (if [ -x /usr/bin/mrtg ] && [ -r /etc/mrtg.cfg ]; then mkdir -p /var/log/mrtg ; env LANG=C /usr/bin/mrtg /etc/mrtg.cfg 2>&1 | tee -a /var/log/mrtg/mrtg.log ; fi)
Sep 5 10:55:27 isb-server dhcpd: LDAP server was down, trying to reconnect...
Sep 5 10:55:27 isb-server dhcpd: DHCPREQUEST for 192.168.0.20 from 9c:b6:54:ea:78:08 (isb-03144) via eth0
Sep 5 10:55:27 isb-server dhcpd: DHCPACK on 192.168.0.20 to 9c:b6:54:ea:78:08 (isb-03144) via eth0
Sep 5 10:55:30 isb-server dhcpd: DHCPREQUEST for 192.168.0.20 from 9c:b6:54:ea:78:08 (isb-03144) via eth0
Sep 5 10:55:30 isb-server dhcpd: DHCPACK on 192.168.0.20 to 9c:b6:54:ea:78:08 (isb-03144) via eth0
Sep 5 10:55:36 isb-server dhcpd: DHCPINFORM from 192.168.0.20 via eth0: not authoritative for subnet 192.168.0.0
Sep 5 10:55:38 isb-server named[1446]: samba_dlz: starting transaction on zone isb.dom
Sep 5 10:55:38 isb-server named[1446]: client 192.168.0.20#56557: update 'isb.dom/IN' denied
Sep 5 10:55:38 isb-server named[1446]: samba_dlz: cancelling transaction on zone isb.dom
Sep 5 10:55:39 isb-server named[1446]: samba_dlz: starting transaction on zone isb.dom
Sep 5 10:55:39 isb-server named[1446]: samba_dlz: disallowing update of signer=isb-03144\$\@ISB.DOM name=isb-03144.isb.dom type=AAAA error=insufficient access rights
Sep 5 10:55:39 isb-server named[1446]: client 192.168.0.20#52320: updating zone 'isb.dom/NONE': update failed: rejected by secure update (REFUSED)
Sep 5 10:55:39 isb-server named[1446]: samba_dlz: cancelling transaction on zone isb.dom
Sep 5 10:55:39 isb-server dhcpd: DHCPINFORM from 192.168.0.20 via eth0: not authoritative for subnet 192.168.0.0
Sep 5 10:57:03 isb-server dhcpd: DHCPINFORM from 192.168.0.20 via eth0: not authoritative for subnet 192.168.0.0
Sep 5 10:57:06 isb-server dhcpd: DHCPINFORM from 192.168.0.20 via eth0: not authoritative for subnet 192.168.0.0
kann jemand sehen um welches Problem es sich handeln könnte ?
Danke 1