Netzwerk Verbindungsabbrüche

german

#1

ich habe UCS-Server 3.2-2 errata138 installiert. Bei einem
Mitarbeiter wurde eine neue CAD Softw[ul][/ul]are installiert die regelmäßig mit einem
Netzwerkfehler abstürzt. Im Samba Logfile finde ich folgende Einträge:

[code]> create_connection_session_info failed: NT_STATUS_ACCESS_DENIED

[2014/09/05 10:37:42.085769, 1, pid=20601]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.26 (ipv4:192.168.0.26:63999) closed connection to service sysvol
[2014/09/05 10:40:33.116651, 1, pid=21001]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:40:33.703083, 1, pid=21045]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:44:04.512044, 1, pid=21248]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:44:05.096312, 1, pid=21292]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:45:29.337698, 1, pid=5203]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:56104) closed connection to service cb
[2014/09/05 10:45:29.337796, 1, pid=5203]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:56104) closed connection to service Archiv
[2014/09/05 10:45:29.337863, 1, pid=5203]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:56104) closed connection to service CAD
[2014/09/05 10:45:29.337927, 1, pid=5203]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:56104) closed connection to service Vermietung
[2014/09/05 10:45:29.337989, 1, pid=5203]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:56104) closed connection to service Vertrieb
[2014/09/05 10:45:29.338051, 1, pid=5203]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:56104) closed connection to service Projekte
[2014/09/05 10:46:18.433590, 1, pid=21658]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:46:19.021750, 1, pid=21702]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:46:56.961123, 1, pid=21812]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:46:57.902441, 1, pid=21856]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:47:38.772415, 1, pid=21906]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:47:39.362765, 1, pid=21950]
…/source3/smbd/service.c:550(make_connection_snum)
create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/09/05 10:54:12.223155, 1, pid=21604]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:50370) closed connection to service CAD
[2014/09/05 10:56:09.320173, 1, pid=22704]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:60327) closed connection to service sysvol
[2014/09/05 10:56:09.326069, 1, pid=22794]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:60336) closed connection to service cb
[2014/09/05 10:56:27.323100, 1, pid=22748]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:60331) closed connection to service netlogon
[2014/09/05 10:56:39.319116, 1, pid=22847]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:60342) closed connection to service sysvol
[2014/09/05 11:09:30.124106, 1, pid=21604]
…/source3/smbd/service.c:1122(close_cnum)
192.168.0.20 (ipv4:192.168.0.20:50370) closed connection to service cb[/code]

Und folögendes im syslog:

Sep 5 10:37:06 isb-server named[1446]: client 192.168.0.26#63036: updating zone 'isb.dom/NONE': deleting rrset at 'isb-0914.isb.dom' A Sep 5 10:37:06 isb-server named[1446]: samba_dlz: subtracted rdataset isb-0914.isb.dom 'isb-0914.isb.dom.#011900#011IN#011A#011192.168.0.26' Sep 5 10:37:06 isb-server named[1446]: client 192.168.0.26#63036: updating zone 'isb.dom/NONE': adding an RR at 'isb-0914.isb.dom' A Sep 5 10:37:06 isb-server named[1446]: samba_dlz: added rdataset isb-0914.isb.dom 'isb-0914.isb.dom.#0111200#011IN#011A#011192.168.0.26' Sep 5 10:37:06 isb-server named[1446]: samba_dlz: subtracted rdataset isb.dom 'isb.dom.#01110800#011IN#011SOA#011isb-server.isb.dom. root.isb.dom. 54 28800 7200 604800 0' Sep 5 10:37:06 isb-server named[1446]: samba_dlz: added rdataset isb.dom 'isb.dom.#01110800#011IN#011SOA#011isb-server.isb.dom. root.isb.dom. 55 28800 7200 604800 0' Sep 5 10:37:06 isb-server named[1446]: samba_dlz: committed transaction on zone isb.dom Sep 5 10:38:29 isb-server dhcpd: DHCPINFORM from 192.168.0.26 via eth0: not authoritative for subnet 192.168.0.0 Sep 5 10:38:32 isb-server dhcpd: DHCPINFORM from 192.168.0.26 via eth0: not authoritative for subnet 192.168.0.0 Sep 5 10:38:40 isb-server dhcpd: DHCPINFORM from 192.168.0.23 via eth0: not authoritative for subnet 192.168.0.0 Sep 5 10:38:43 isb-server dhcpd: DHCPINFORM from 192.168.0.23 via eth0: not authoritative for subnet 192.168.0.0 Sep 5 10:39:01 isb-server /USR/SBIN/CRON[20817]: (root) CMD ( [ -x /usr/lib/php5/maxlifetime ] && [ -d /var/lib/php5 ] && find /var/lib/php5/ -type f -cmin +$(/usr/lib/php5/maxlifetime) -delete) Sep 5 10:40:02 isb-server /USR/SBIN/CRON[20917]: (root) CMD ( if [ -x /usr/sbin/univention-umount-homedirs ]; then /usr/sbin/univention-umount-homedirs; fi) Sep 5 10:40:02 isb-server /USR/SBIN/CRON[20919]: (root) CMD (/usr/share/univention-ssl/ssl-sync >>/var/log/univention/ssl-sync.log 2>&1) Sep 5 10:40:02 isb-server /USR/SBIN/CRON[20926]: (root) CMD (if [ -x /usr/bin/mrtg ] && [ -r /etc/mrtg.cfg ]; then mkdir -p /var/log/mrtg ; env LANG=C /usr/bin/mrtg /etc/mrtg.cfg 2>&1 | tee -a /var/log/mrtg/mrtg.log ; fi) Sep 5 10:40:02 isb-server /USR/SBIN/CRON[20937]: (root) CMD (/usr/sbin/jitter 60 /usr/share/univention-samba4/scripts/sysvol-sync.sh >>/var/log/univention/sysvol-sync.log 2>&1) Sep 5 10:45:02 isb-server /USR/SBIN/CRON[21471]: (root) CMD (if [ -x /usr/bin/mrtg ] && [ -r /etc/mrtg.cfg ]; then mkdir -p /var/log/mrtg ; env LANG=C /usr/bin/mrtg /etc/mrtg.cfg 2>&1 | tee -a /var/log/mrtg/mrtg.log ; fi) Sep 5 10:45:02 isb-server /USR/SBIN/CRON[21475]: (root) CMD ( [ -x /usr/lib/univention-pam/ldap-group-to-file.py ] && /usr/lib/univention-pam/ldap-group-to-file.py --check_member) Sep 5 10:45:02 isb-server /USR/SBIN/CRON[21476]: (root) CMD (/usr/sbin/univention-mrtg) Sep 5 10:45:02 isb-server /USR/SBIN/CRON[21478]: (root) CMD (/usr/sbin/jitter 60 /usr/share/univention-samba4/scripts/sysvol-sync.sh >>/var/log/univention/sysvol-sync.log 2>&1) Sep 5 10:45:10 isb-server named[1446]: error (network unreachable) resolving 'googleads.g.doubleclick.net/A/IN': 2001:503:231d::2:30#53 Sep 5 10:45:18 isb-server named[1446]: error (network unreachable) resolving 'googleads.g.doubleclick.net/A/IN': 2001:503:a83e::2:30#53 Sep 5 10:45:20 isb-server named[1446]: error (network unreachable) resolving 'b.gtld-servers.net/A/IN': 2001:500:2::c#53 Sep 5 10:45:20 isb-server named[1446]: error (network unreachable) resolving 'd.gtld-servers.net/AAAA/IN': 2001:500:2::c#53 ... Sep 5 10:45:26 isb-server named[1446]: success resolving 'googleads.g.doubleclick.net/A' (in 'doubleclick.net'?) after disabling EDNS Sep 5 10:45:26 isb-server named[1446]: success resolving 'b.gtld-servers.net/A' (in 'net'?) after disabling EDNS Sep 5 10:45:26 isb-server named[1446]: success resolving 'd.gtld-servers.net/AAAA' (in 'net'?) after disabling EDNS ... Sep 5 10:47:27 isb-server named[1446]: clients-per-query decreased to 11 Sep 5 10:48:40 isb-server dhcpd: DHCPINFORM from 192.168.0.26 via eth0: not authoritative for subnet 192.168.0.0 Sep 5 10:48:43 isb-server dhcpd: DHCPINFORM from 192.168.0.26 via eth0: not authoritative for subnet 192.168.0.0 Sep 5 10:48:51 isb-server dhcpd: DHCPINFORM from 192.168.0.23 via eth0: not authoritative for subnet 192.168.0.0 Sep 5 10:48:54 isb-server dhcpd: DHCPINFORM from 192.168.0.23 via eth0: not authoritative for subnet 192.168.0.0 Sep 5 10:50:01 isb-server /USR/SBIN/CRON[22178]: (root) CMD ( if [ -x /usr/sbin/univention-umount-homedirs ]; then /usr/sbin/univention-umount-homedirs; fi) Sep 5 10:50:01 isb-server /USR/SBIN/CRON[22182]: (root) CMD (/usr/sbin/jitter 60 /usr/share/univention-samba4/scripts/sysvol-sync.sh >>/var/log/univention/sysvol-sync.log 2>&1) Sep 5 10:50:01 isb-server /USR/SBIN/CRON[22185]: (root) CMD (if [ -x /usr/bin/mrtg ] && [ -r /etc/mrtg.cfg ]; then mkdir -p /var/log/mrtg ; env LANG=C /usr/bin/mrtg /etc/mrtg.cfg 2>&1 | tee -a /var/log/mrtg/mrtg.log ; fi) Sep 5 10:50:11 isb-server dhcpd: DHCPINFORM from 192.168.0.13 via eth0: not authoritative for subnet 192.168.0.0 Sep 5 10:50:14 isb-server dhcpd: DHCPINFORM from 192.168.0.13 via eth0: not authoritative for subnet 192.168.0.0 Sep 5 10:55:01 isb-server /USR/SBIN/CRON[22578]: (root) CMD (/usr/sbin/jitter 60 /usr/share/univention-samba4/scripts/sysvol-sync.sh >>/var/log/univention/sysvol-sync.log 2>&1) Sep 5 10:55:01 isb-server /USR/SBIN/CRON[22581]: (root) CMD (if [ -x /usr/bin/mrtg ] && [ -r /etc/mrtg.cfg ]; then mkdir -p /var/log/mrtg ; env LANG=C /usr/bin/mrtg /etc/mrtg.cfg 2>&1 | tee -a /var/log/mrtg/mrtg.log ; fi) Sep 5 10:55:27 isb-server dhcpd: LDAP server was down, trying to reconnect... Sep 5 10:55:27 isb-server dhcpd: DHCPREQUEST for 192.168.0.20 from 9c:b6:54:ea:78:08 (isb-03144) via eth0 Sep 5 10:55:27 isb-server dhcpd: DHCPACK on 192.168.0.20 to 9c:b6:54:ea:78:08 (isb-03144) via eth0 Sep 5 10:55:30 isb-server dhcpd: DHCPREQUEST for 192.168.0.20 from 9c:b6:54:ea:78:08 (isb-03144) via eth0 Sep 5 10:55:30 isb-server dhcpd: DHCPACK on 192.168.0.20 to 9c:b6:54:ea:78:08 (isb-03144) via eth0 Sep 5 10:55:36 isb-server dhcpd: DHCPINFORM from 192.168.0.20 via eth0: not authoritative for subnet 192.168.0.0 Sep 5 10:55:38 isb-server named[1446]: samba_dlz: starting transaction on zone isb.dom Sep 5 10:55:38 isb-server named[1446]: client 192.168.0.20#56557: update 'isb.dom/IN' denied Sep 5 10:55:38 isb-server named[1446]: samba_dlz: cancelling transaction on zone isb.dom Sep 5 10:55:39 isb-server named[1446]: samba_dlz: starting transaction on zone isb.dom Sep 5 10:55:39 isb-server named[1446]: samba_dlz: disallowing update of signer=isb-03144\$\@ISB.DOM name=isb-03144.isb.dom type=AAAA error=insufficient access rights Sep 5 10:55:39 isb-server named[1446]: client 192.168.0.20#52320: updating zone 'isb.dom/NONE': update failed: rejected by secure update (REFUSED) Sep 5 10:55:39 isb-server named[1446]: samba_dlz: cancelling transaction on zone isb.dom Sep 5 10:55:39 isb-server dhcpd: DHCPINFORM from 192.168.0.20 via eth0: not authoritative for subnet 192.168.0.0 Sep 5 10:57:03 isb-server dhcpd: DHCPINFORM from 192.168.0.20 via eth0: not authoritative for subnet 192.168.0.0 Sep 5 10:57:06 isb-server dhcpd: DHCPINFORM from 192.168.0.20 via eth0: not authoritative for subnet 192.168.0.0

kann jemand sehen um welches Problem es sich handeln könnte ?

Danke 1


#2

Die Meldungen in der Syslog sehen nicht so aus als hätten sie etwas damit zu tun. Wenn ich das richtig sehe gab es seit Errata 138 einige Samba-Updates. Vielleicht bringt’s das ja schon?


#3

Hallo,

ist auszuschließen, daß hier evtl. eine Netzwerkkomponente als Grund für den Netzwerkfehler in Frage kommt.

Wie lautet die genaue Fehlermeldung, mit welcher die CAD Anwendung abstürzt bzw. existieren diesbezüglich Einträge in den möglicherweise vorhandenen Logs dieser Software.

Desweiteren bestünde die Möglichkeit das Samba Debuglevel auf 5 zu erhöhen und das Problem nochmals zu reproduzieren, da in den momentanen Logs meines Erachtens nichts auffälliges zu sehen ist.

ucr set samba/debug/level='5'

Viele Grüße
Ulf Friedel


#4

Hallo Ulf,

Netzwerkkomponenten habe ich ausgeschlossen. Bei einer neu erfolgten Installation auf einem 2. Arbeitsplatz treten die gleichen Probleme auf. Bei der Software handelt es sich um Allplan von Nemetschek. Diese Software hat die besonderheit das man eigentlich gar nicht abspeichern kann, sondern das System selbst nach jedem Schritt die Daten sichert. Logdateien von diesem Programm gibt es nicht. Die Fehlermeldung des Programms lautet: Fehler 64 Netzwerkfehler. Der Support von allplan hat mich gebeten nach der Namensauflösung zu schauen, die funktioniert aber.
Updates habe ich alle eingespielt. Werde den Loglevel erhöhen und auf den nächsten Absturz warten.

Grüße
Harald


#5

Hallo,

ich weiß jetzt nicht genau welche Version Sie verwenden, aber trifft die Fehlerbeschreibung und Version in der Warnung des Herstellers im Beitrag Allplan 2014-1 (V:2014) ungefähr auf Sie zu? Eventuell ist dieser Bug noch garnicht vollständig behoben.

Viele Grüße
Ulf Friedel