So just spent most of the morning with our AD admin working on this
and think we've found a fix for us at least...
If on the Windows Server we go to Network Properties -> Internet
Protocol (TCP/IP) properties -> Advanced -> WINS tab and then Click
the "Disable NetBios over TCP/IP" button. OK out of the windows, then
go back and put the NetBios settings back to "Default"
A few more details for those interested:
We had 33 servers, mixed 2000, 2003 and 2003r2 (and one 2008), of
which 16 would not let Snow Leopard log on. Leopard clients worked
fine. The 'faulty' servers didn't have any pattern - ie: a mixed bag
of Windows versions and networks and such.
We did try the MS KB975467 patch mentioned, but that didn't help at
all unfortunately. The Netbios reset mentioned above has fixed the 5
servers we've tried it on so far so I think that might just be the
issue.
Good luck all and thanks for the feedback.
Jeff
On 7-Jan-10, at 9:57 AM, Jeremy Dennis wrote:
> Hi,
> I'm new to the list and found it through a Google search because I'm
> having
> a similar problem. I have one server running Server 2003 that I cannot
> connect to from Snow Leopard computers, yet I have another 2003
> server that
> I have no problems connecting to from the same Mac.
> I've been going through the servers to figure out what is different,
> and the
> only thing I've found so far was a security patch for MS KB975467
> that not
> applied on the problem server and was on the other one. The patch is
> described as "Vulnerability in the Local Security Authority Subsystem
> Service could allow denial of service" and I've applied it, but
> can't reboot
> the server yet. Jeff, do you know if your server has that patch?
> I did try the steps listed to turn on logging and the results are
> below.
> I've renamed the server info in the log, server1 is the one I can't
> connect
> to, server2 is the one I can.
> ---
> Thu Jan 7 10:59:26 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_url_to_dictionary-line:598 Server String = server1
> Thu Jan 7 10:59:26 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetServerFromURL-line:171 Server = server1
> Thu Jan 7 10:59:26 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: Using NetBIOS Name SILVERSTREAK
> Thu Jan 7 10:59:26 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: wins address 10.1.1.62 10.1.1.30 specified in the section
> default
> Thu Jan 7 10:59:26 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_negotiate: Kerberos spn hint = cifs/serv...@DOMAIN.ORG
> Thu Jan 7 10:59:26 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: Native OS = 'WINDOWS' Native Lanman = ''
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>: \[\[\[
> KRBCreateSessionInfo () - required parameters okay: iHN iAP -
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: krb5 call got -1765328160 (Configuration file
> does not
> specify default realm) on
> /SourceCache/KerberosHelper/KerberosHelper-62.1/Source/
> KerberosHelper.c:386
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>: \[\[\[
> parse_principal_name () decomposing cifs/serv...@DOMAIN.ORG
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>: \]\]\]
> parse_principal_name () - 0
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: processed host name = server1
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>:
> find_mapping: krb5_get_host_realm returned unusable realm!
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: getaddrinfo = success (0)
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: canonical host name = server1.domain.org
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>:
> find_mapping: krb5_get_host_realm returned unusable realm!
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: getnameinfo(10.1.1.161) -> server1.domain.org
> result 0
> success
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>:
> find_mapping: krb5_get_host_realm returned unusable realm!
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: getnameinfo(10.1.1.161) -> server1.domain.org
> result 0
> success
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>:
> find_mapping: krb5_get_host_realm returned unusable realm!
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>:
> find_mapping: krb5_get_host_realm returned unusable realm!
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: No mapping for host name = server1.domain.org
> found
> Thu Jan 7 10:59:27 silverstreak NetAuthAgent[269] <Debug>: \]\]\]
> KRBCreateSessionInfo () = -108
> Thu Jan 7 10:59:27 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetServerFromURL-line:171 Server = server1
> Thu Jan 7 10:59:27 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_negotiate: Kerberos spn hint = cifs/serv...@DOMAIN.ORG
> Thu Jan 7 10:59:27 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: Native OS = 'WINDOWS' Native Lanman = ''
> Thu Jan 7 10:59:27 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetServerFromURL-line:171 Server = server1
> Thu Jan 7 10:59:27 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_negotiate: Kerberos spn hint = cifs/serv...@DOMAIN.ORG
> Thu Jan 7 10:59:27 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: Native OS = 'WINDOWS' Native Lanman = ''
> Thu Jan 7 10:59:33 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetServerFromURL-line:171 Server = server1
> Thu Jan 7 10:59:33 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_negotiate: Kerberos spn hint = cifs/serv...@DOMAIN.ORG
> Thu Jan 7 10:59:33 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: Native OS = 'WINDOWS' Native Lanman = ''
> Thu Jan 7 10:59:33 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_dictionary_to_urlstring-line:780 Username String =
> jdennis
> Thu Jan 7 10:59:33 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_dictionary_to_urlstring-line:781 Domain String = ad
> Thu Jan 7 10:59:33 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetServerFromURL-line:171 Server = server1
> Thu Jan 7 10:59:33 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetWorkgroupFromURL-line:251 Workgroup = ad
> Thu Jan 7 10:59:33 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetUserNameFromURL-line:285 Username = jdennis
> Thu Jan 7 10:59:33 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SMB_OpenSession: - error = 22!
> Thu Jan 7 10:59:42 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetServerFromURL-line:171 Server = server2
> Thu Jan 7 10:59:42 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: Using NetBIOS Name SILVERSTREAK
> Thu Jan 7 10:59:42 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: wins address 10.1.1.62 10.1.1.30 specified in the section
> default
> Thu Jan 7 10:59:42 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_negotiate: Kerberos spn hint = cifs/serv...@DOMAIN.ORG
> Thu Jan 7 10:59:42 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: Native OS = 'WINDOWS' Native Lanman = ''
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>: \[\[\[
> KRBCreateSessionInfo () - required parameters okay: iHN iAP -
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: krb5 call got -1765328160 (Configuration file
> does not
> specify default realm) on
> /SourceCache/KerberosHelper/KerberosHelper-62.1/Source/
> KerberosHelper.c:386
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>: \[\[\[
> parse_principal_name () decomposing cifs/serv...@DOMAIN.ORG
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>: \]\]\]
> parse_principal_name () - 0
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: processed host name = server2
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>:
> find_mapping: krb5_get_host_realm returned unusable realm!
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: getaddrinfo = success (0)
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: canonical host name = server2.domain.org
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>:
> find_mapping: krb5_get_host_realm returned unusable realm!
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: getnameinfo(10.1.1.112) -> server2.domain.org
> result 0
> success
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>:
> find_mapping: krb5_get_host_realm returned unusable realm!
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: getnameinfo(10.1.1.112) -> server2.domain.org
> result 0
> success
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>:
> find_mapping: krb5_get_host_realm returned unusable realm!
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>:
> find_mapping: krb5_get_host_realm returned unusable realm!
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>:
> KRBCreateSessionInfo: No mapping for host name = server2.domain.org
> found
> Thu Jan 7 10:59:43 silverstreak NetAuthAgent[269] <Debug>: \]\]\]
> KRBCreateSessionInfo () = -108
> Thu Jan 7 10:59:43 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetServerFromURL-line:171 Server = server2
> Thu Jan 7 10:59:43 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_negotiate: Kerberos spn hint = cifs/serv...@DOMAIN.ORG
> Thu Jan 7 10:59:43 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: Native OS = 'WINDOWS' Native Lanman = ''
> Thu Jan 7 10:59:43 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetServerFromURL-line:171 Server = server2
> Thu Jan 7 10:59:43 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_negotiate: Kerberos spn hint = cifs/serv...@DOMAIN.ORG
> Thu Jan 7 10:59:43 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: Native OS = 'WINDOWS' Native Lanman = ''
> Thu Jan 7 10:59:49 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetServerFromURL-line:171 Server = server2
> Thu Jan 7 10:59:49 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_negotiate: Kerberos spn hint = cifs/serv...@DOMAIN.ORG
> Thu Jan 7 10:59:49 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: Native OS = 'WINDOWS' Native Lanman = ''
> Thu Jan 7 10:59:49 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_dictionary_to_urlstring-line:780 Username String =
> jdennis
> Thu Jan 7 10:59:49 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_dictionary_to_urlstring-line:781 Domain String = ad
> Thu Jan 7 10:59:49 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetServerFromURL-line:171 Server = server2
> Thu Jan 7 10:59:49 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetWorkgroupFromURL-line:251 Workgroup = ad
> Thu Jan 7 10:59:49 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: SetUserNameFromURL-line:285 Username = jdennis
> Thu Jan 7 10:59:49 silverstreak
> /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/
> NetAuthAgent[269]
> <Debug>: smb_open_session: User session shared as jdennis
> ---
> I'm going to reboot the server tonight to see if the security update
> fixed it.
> Jeremy Dennis
> North Allegheny School District
> _____________________________________________________
> MacEnterprise, Inc
> http://www.macenterprise.org
> Subscription Options and Archives
> http://lists.psu.edu/archives/macenterprise.html
_____________________________________________________
MacEnterprise, Inc
http://www.macenterprise.org Subscription Options and Archives
http://lists.psu.edu/archives/macenterprise.html