Unsolved

This post is more than 5 years old

29 Posts

25028

June 12th, 2013 11:00

Cannot access CIFS shares after installing 2008R2 server.

I've deployed a new Windows 2008R2 server in an existing domain with 2 other non-R2 2008 DCs, but my users are having trouble accessing a the EMC fileshare when they are connected to this new server. They cannot access other non EMC shares just fine.

Does anyone have any ideas on what could be wrong?

Here are some details:

1. New server has roles of DNS, DHCP and AD and looks successful from DNS test and from replication of DHCP and AD from other servers.

2. Our celerra file share is named "fileserv" and when users tried to access it through existing drive mapping, they get prompted for Windows Credentials and says "Access is Denied".

3. If I try to access by running \\fileserv, they get the same error.

4. ping tests to fileserv and ip address are successful.

5. If I try to access by running \\ipaddress, they get the same error.

6. "fileserv" name in DNS actually points to same ip address as "emc-san1" (another alias)

7. If I try to access files by using \\emc-san1 , shares ARE accessible and normal.

8. If I try the "net use" cmd, I see that the existing drive mappings to "fileserv" say they are Unavailable.

8. We have load balancing dhcp servers and only users connected to this dhcp server (the new R2 server) are getting this error. Users still connected to the older non-r2 servers are connecting just fine.

9. I even just tried creating a new DNS record called "testserv" and tried to access file shares via \\testserv and get the same error.

10. Just ungraded the software on the celerra from 5.6.47 to 6 and I'm still getting this issue.

11. We have a printer here that has the Scan to File option where it will scan a document and upload it our fileserver while connecting to it via SMB. This feature no longer works after introducing this R2 server into our domain.

12. It's bugging me because ONLY access to the EMC is wonky. All non EMC shares work fine. If I reboot the R2 server, affected users will work for a little while, but then some users can't connect anymore. It almost seems like it is intermittent, or there is a connection limit and then blocks more users.

For the current workaround, I'm remapping to the "emc-san1" for my users to access files.

Note: I still want my users to ultimately connect to fileserv instead of emc-san1 because we might be removing the emc san soon and I can point "fileserv" to the new storage device.

Any ideas on this?

29 Posts

July 25th, 2013 09:00

So I was wondering that kind of thing too…

So I tried removing the R2 DC and unretired an older R1 DC (which was completely working) to switch back to a completely R1 domain but it still happened. Does that help with anything?

33 Posts

July 25th, 2013 16:00

Not if the whole AD has decided to enforce SMB2 protocol.

Check what protcol the Domain Controller is doing by using the "audit" option of the server server_cifs command.

          server_cifs -option audit

Look for CurrentDC and Proto settings.

If there is nothing interesting in the "server_log " that gives a hint as to why clients can't access the shares, then the best plan would be to look at a network trace between client and Celerra to see what the problem is. (Remember to capture at least 1514 bytes per packet to get the SMB information)

110 Posts

August 5th, 2013 01:00

If the share is only CIFS then you can find the limit on the CIFS share properties.

If its NFS then please check the NFS share properties

29 Posts

August 5th, 2013 14:00

kajibade

Kajiblade,

I think you may be onto something here…

I ran the server_cifs and the audit option command and here are my results:

server_cifs server_2

server_2 :

256 Cifs threads started

Security mode = NT

Max protocol = SMB2

I18N mode = UNICODE

Home Directory Shares DISABLED

Usermapper auto broadcast enabled

Usermapper[0] = [127.0.0.1] state:active (auto discovered)

Enabled interfaces: (All interfaces are enabled)

Disabled interfaces: (No interface disabled)

DOMAIN MyNetwork FQDN=MyNetwork.net SITE=MyNetwork RC=4

SID=S-1-5-15-2f7ee785-3973dd20-28a68b82-ffffffff

>DC=JA-DC1(172.20.3.4) ref=50 time=1 ms (Closest Site)

CIFS Server JA-SM-STORAGE1[MyNetwork] RC=49

Full computer name=ja-sm-storage1.MyNetwork.net realm=MyNetwork.NET

Comment='EMC-SNAS:T6.0.70.4'

if=Production_Interface_0 l=172.20.3.7 b=172.20.255.255 mac=0:60:16:3e:a0:d4

  FQDN=ja-sm-storage1.MyNetwork.net

Password change interval: 0 minutes

Last password change: Mon Jul 22 06:42:37 2013 GMT

Password versions: 3, 2

************************************************************

Any here is my results from the –option audit command:

[nasadmin@JA-SM-SAN1 ~]$ server_cifs server_2 -option audit

server_2 :

|||| AUDIT Ctx=0x0037a53008, ref=2, XP Client(IBM-MJHFP45) Port=3779/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=NT1, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| 0 FNN in FNNlist NbUsr=1 NbCnx=3

||| Uid=0x3f NTcred(0x009cb06808 RC=4 NTLMSSP Capa=0x11001) 'JUMP\mark'

|| Cnxp(0x00b528a408), Name=Shared Files, cUid=0x3f Tid=0x3f, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=3

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x00c1881408), Name=IT, cUid=0x3f Tid=0x40, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\IT

|| Cnxp(0x0075bffc08), Name=Past Projects, cUid=0x3f Tid=0x59, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Archive_File_Storage\Past Projects

|||| AUDIT Ctx=0x008b2b9408, ref=2, W2K8 Client(JA-DC1) Port=58803/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=NT1, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x3f NTcred(0x00618ae808 RC=2 NTLMSSP Capa=0x2001) 'JUMP\jumpadmin'

|| Cnxp(0x009ab13408), Name=HR, cUid=0x3f Tid=0x40, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\HR

|||| AUDIT Ctx=0x0096b8cc08, ref=2, W2K8 Client(IBM-LKRZKN8) Port=54960/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=43286c83-ea17-11e2-85fd-001a4d14ba60

||| SMB2 credits: Granted=37, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=3

||| Uid=0x1 NTcred(0x0067d5e408 RC=5 NTLMSSP Capa=0x2001) 'JUMP\ailene'

|| Cnxp(0x009c2a5808), Name=HR, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\HR

|| Cnxp(0x00c11c4808), Name=Past Projects, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Archive_File_Storage\Past Projects

|| Cnxp(0x0082b8e808), Name=Shared Files, cUid=0x1 Tid=0x4, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x00c9d0b408, ref=2, W2K8 Client(172.20.70.3) Port=54964/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=43286c83-ea17-11e2-85fd-001a4d14ba60

||| SMB2 credits: Granted=127, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x00c11c4008 RC=3 KERBEROS Capa=0x2) 'JUMP\ailene'

|| Cnxp(0x00b3b0b808), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x00d2cad408, ref=2, W2K Client(JUMPSERVER) Port=4749/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=NT1, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| 0 FNN in FNNlist NbUsr=1 NbCnx=3

||| Uid=0x4f NTcred(0x00c191cc08 RC=4 NTLMSSP Capa=0x10801) 'JUMP\jumpadmin'

|| Cnxp(0x00a09ea408), Name=Shared Files, cUid=0x4f Tid=0x42, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x010e218008), Name=Past Projects, cUid=0x4f Tid=0x45, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Archive_File_Storage\Past Projects

|| Cnxp(0x005eb88c08), Name=Finance, cUid=0x4f Tid=0x46, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Finance

|||| AUDIT Ctx=0x003010bc08, ref=2, W2K8 Client(IBM-LKPWDZ5) Port=55721/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=b783f417-efcc-11e2-8160-001a4d148d7a

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x00ba128008 RC=3 NTLMSSP Capa=0x2001) 'JUMP\leigh.consolacion'

|| Cnxp(0x00ca327008), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x00b5aa0808), Name=Past Projects, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Archive_File_Storage\Past Projects

|||| AUDIT Ctx=0x0096abd408, ref=2, W2K8 Client(172.20.3.5) Port=54693/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.02, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| SMB2 credits: Granted=127, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x009a71a008 RC=4 KERBEROS Capa=0x2) 'JUMP\jumpadmin'

|| Cnxp(0x009ab51808), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=3

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x00a09b6408, ref=2, W2K8 Client(JA-DC2) Port=54696/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.02, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| SMB2 credits: Granted=127, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x009ae90c08 RC=3 NTLMSSP Capa=0x2001) 'JUMP\jumpadmin'

|| Cnxp(0x009b4df408), Name=Past Projects, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Archive_File_Storage\Past Projects

|| Cnxp(0x00c1142008), Name=HR, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\HR

|||| AUDIT Ctx=0x00d1263c08, ref=2, W2K8 Client(JA-VM-SVR) Port=55952/139

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x00a5a14008=JA-VM-SVR

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=42554061-f3ce-11e2-b324-00262d0c7d8f

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x00ca287808 RC=2 KERBEROS Capa=0x2) 'JUMP\jumpadmin'

|| Cnxp(0x00300e7808), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x009c1b2808, ref=2, XP Client(IBM-KQXRR6A) Port=1475/139

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=NT1, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x3f NTcred(0x006dec4c08 RC=2 KERBEROS Capa=0x2) 'JUMP\2dproduction'

|| Cnxp(0x009b559c08), Name=Shared Files, cUid=0x3f Tid=0x3f, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x007efe3c08, ref=2, XP Client(IBM-KQXRR6A) Port=1477/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=NT1, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x3f NTcred(0x00d2e79408 RC=2 NTLMSSP Capa=0x11001) 'JUMP\2dproduction'

|| Cnxp(0x00c1142808), Name=Past Projects, cUid=0x3f Tid=0x3f, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Archive_File_Storage\Past Projects

|||| AUDIT Ctx=0x007f4f4408, ref=2, W2K8 Client(172.20.3.100) Port=54903/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=a528e5d7-f3f1-11e2-8c0a-00155d030a01

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=3

||| Uid=0x1 NTcred(0x00c5186808 RC=4 KERBEROS Capa=0x2) 'JUMP\jumpadmin'

|| Cnxp(0x00520a2008), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x009706c008), Name=Past Projects, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Archive_File_Storage\Past Projects

|| Cnxp(0x0104a58008), Name=HR, cUid=0x1 Tid=0x4, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\HR

|||| AUDIT Ctx=0x007176e808, ref=2, W2K8 Client(172.20.51.11) Port=54236/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=b783f417-efcc-11e2-8160-001a4d148d7a

||| SMB2 credits: Granted=297, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x0007acbc08 RC=7 KERBEROS Capa=0x2) 'JUMP\leigh'

|| Cnxp(0x00b9fb8008), Name=Finance, cUid=0x1 Tid=0x1, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=5

| Absolute path of the share=\Production_File_Storage\Finance

|| Cnxp(0x0096b00008), Name=Shared Files, cUid=0x1 Tid=0x5, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x00c2e1ac08, ref=2, W2K8 Client(172.20.50.220) Port=55246/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=c3c5ef8a-f3b4-11e2-83cf-0022681f9c8d

||| SMB2 credits: Granted=319, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x007f4f4c08 RC=2 KERBEROS Capa=0x2) 'JUMP\shi'

|| Cnxp(0x00c9f00408), Name=Shared Files, cUid=0x1 Tid=0x1, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=3

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x01073a3c08, ref=2, W2K8 Client(T400-L3B3769) Port=60718/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=c3c5ef8a-f3b4-11e2-83cf-0022681f9c8d

||| SMB2 credits: Granted=37, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x0007aca008 RC=4 NTLMSSP Capa=0x2001) 'JUMP\shi'

|| Cnxp(0x009c13ac08), Name=Past Projects, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Archive_File_Storage\Past Projects

|| Cnxp(0x007f3bd408), Name=Shared Files, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x011a609c08, ref=2, XP Client(IBM-LKTATG9) Port=1088/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=NT1, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x40 NTcred(0x009ad2cc08 RC=3 NTLMSSP Capa=0x11001) 'JUMP\sha'

|| Cnxp(0x00b1bb6008), Name=Shared Files, cUid=0x40 Tid=0x40, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x007f2b4808), Name=Past Projects, cUid=0x40 Tid=0x41, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Archive_File_Storage\Past Projects

|||| AUDIT Ctx=0x0096e49808, ref=2, XP Client(IBM-LKTATG9) Port=3250/139

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=NT1, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x40 NTcred(0x009ac95008 RC=2 KERBEROS Capa=0x2) 'JUMP\sha'

|| Cnxp(0x00a07bbc08), Name=Shared Files, cUid=0x40 Tid=0x40, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x01241ad808, ref=2, XP Client(IBM-MJHFP45) Port=2068/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=NT1, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x3f NTcred(0x00a7dc2c08 RC=2 NTLMSSP Capa=0x11001) 'JUMP\mar'

|| Cnxp(0x009b439808), Name=Shared Files, cUid=0x3f Tid=0x4b, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x00663b7808, ref=2, W2K8 Client(JA-NY-SVR) Port=54072/139

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=NT1, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| 0 FNN in FNNlist NbUsr=1 NbCnx=3

||| Uid=0x3f NTcred(0x011720e808 RC=4 NTLMSSP Capa=0x2001) 'JUMP\jumpadmin'

|| Cnxp(0x009ab07008), Name=Past Projects, cUid=0x3f Tid=0x3f, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Archive_File_Storage\Past Projects

|| Cnxp(0x009ab47808), Name=Shared Files, cUid=0x3f Tid=0x40, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x009ab1b008), Name=HR, cUid=0x3f Tid=0x41, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\HR

|||| AUDIT Ctx=0x0065caf808, ref=2, W2K8 Client(T400-L3B3937) Port=56556/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=ee2c06e4-ee3b-11e2-8a4a-00234df37e18

||| SMB2 credits: Granted=43, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=3

||| Uid=0x1 NTcred(0x007f3ee808 RC=4 NTLMSSP Capa=0x2001) 'JUMP\coen'

|| Cnxp(0x0067ec5808), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x00c1982808), Name=HR, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\HR

|| Cnxp(0x00c1a03c08), Name=Past Projects, cUid=0x1 Tid=0x4, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Archive_File_Storage\Past Projects

|||| AUDIT Ctx=0x0038505408, ref=2, W2K8 Client(T400-L3B3937) Port=56561/139

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=ee2c06e4-ee3b-11e2-8a4a-00234df37e18

||| SMB2 credits: Granted=39, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x009c154c08 RC=2 KERBEROS Capa=0x2) 'JUMP\coen'

|| Cnxp(0x0096a50c08), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x01164aa008, ref=2, W2K8 Client(T410-R9AKCB8) Port=64097/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=d5f25824-efc1-11e2-8b7f-889ffaf4cada

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x009c155c08 RC=3 NTLMSSP Capa=0x2001) 'JUMP\ry'

|| Cnxp(0x009ade2c08), Name=Past Projects, cUid=0x1 Tid=0x1, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Archive_File_Storage\Past Projects

|| Cnxp(0x0096fdcc08), Name=Shared Files, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x00a52ccc08, ref=2, W2K8 Client(172.20.50.17) Port=55721/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=d5f25824-efc1-11e2-8b7f-889ffaf4cada

||| SMB2 credits: Granted=37, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x006670e808 RC=5 KERBEROS Capa=0x2) 'JUMP\ry'

|| Cnxp(0x009ce8f408), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=3

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x007f315008, ref=2, W2K8 Client(T400-L3B3933) Port=55476/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=3073bc08-fde7-11e2-9659-00234df37dfe

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x00966f1008 RC=2 NTLMSSP Capa=0x2001) 'JUMP\dia'

|| Cnxp(0x00cdbd1008), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x00ce26dc08, ref=2, W2K8 Client(172.20.50.22) Port=55492/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=3073bc08-fde7-11e2-9659-00234df37dfe

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x0087956408 RC=6 KERBEROS Capa=0x2) 'JUMP\dia'

|| Cnxp(0x0112c1f408), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=5

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x009b640008), Name=Past Projects, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Archive_File_Storage\Past Projects

|||| AUDIT Ctx=0x00a27e7008, ref=2, W2K8 Client(X301-R8MGCFE) Port=49242/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=5eaaeb43-fdf3-11e2-8b8c-002713b887c9

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x0096ad6c08 RC=3 NTLMSSP Capa=0x2001) 'JUMP\jackie'

|| Cnxp(0x00968f4808), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x007f41f008), Name=Past Projects, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Archive_File_Storage\Past Projects

|||| AUDIT Ctx=0x00c1a2d008, ref=2, W2K8 Client(172.20.50.34) Port=49256/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=5eaaeb43-fdf3-11e2-8b8c-002713b887c9

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x0096a38008 RC=2 KERBEROS Capa=0x2) 'JUMP\jackie'

|| Cnxp(0x00969d0008), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x00c2e05c08, ref=2, W2K8 Client(172.20.50.26) Port=59915/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=0a4ab8bc-fbce-11e2-b928-889ffaf4c5b4

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x009f44b008 RC=4 KERBEROS Capa=0x2) 'JUMP\mike'

|| Cnxp(0x009ba10808), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=4

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x00ce261c08, ref=2, W2K8 Client(T410-R9AKCBD) Port=59935/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=0a4ab8bc-fbce-11e2-b928-889ffaf4c5b4

||| SMB2 credits: Granted=37, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x009db44008 RC=3 NTLMSSP Capa=0x2001) 'JUMP\mike'

|| Cnxp(0x01218c3c08), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x00cf06e808), Name=Past Projects, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Archive_File_Storage\Past Projects

|||| AUDIT Ctx=0x007f2bb008, ref=2, W2K8 Client(172.20.50.35) Port=54260/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=fc5066b1-fdf3-11e2-90fb-00234df37dfd

||| SMB2 credits: Granted=201, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x0037e1a808 RC=6 KERBEROS Capa=0x2) 'JUMP\tal'

|| Cnxp(0x011675e808), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=3

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x0086540808), Name=Past Projects, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Archive_File_Storage\Past Projects

|||| AUDIT Ctx=0x0071936c08, ref=2, W2K8 Client(172.20.50.37) Port=56777/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=a49d6a63-fdf9-11e2-bd82-889ffaf4c5ab

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x007ae1f408 RC=2 KERBEROS Capa=0x2) 'JUMP\jonato'

|| Cnxp(0x0096b43c08), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=2

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x0085ea5408, ref=2, W2K8 Client(172.20.50.38) Port=54177/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=6c7de4cd-f8bf-11e2-82d8-00234df2c2a2

||| SMB2 credits: Granted=201, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x00776d2c08 RC=5 KERBEROS Capa=0x2) 'JUMP\owepe'

|| Cnxp(0x00ca9a0408), Name=Shared Files, cUid=0x1 Tid=0x1, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=5

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x0072478408, ref=2, W2K8 Client(T400-L3B3766) Port=54200/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=6c7de4cd-f8bf-11e2-82d8-00234df2c2a2

||| SMB2 credits: Granted=61, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x009aea4c08 RC=6 NTLMSSP Capa=0x2001) 'JUMP\owepe'

|| Cnxp(0x00a0789808), Name=Past Projects, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=3

| Absolute path of the share=\Archive_File_Storage\Past Projects

|| Cnxp(0x009a6ee008), Name=Shared Files, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x009ac57808, ref=2, W2K8 Client(T400-R8YKHLT) Port=54105/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=0e7cae06-fdff-11e2-9450-506313c82250

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x00a499f008 RC=3 NTLMSSP Capa=0x2001) 'JUMP\josds'

|| Cnxp(0x00a0a62408), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x0072479c08), Name=Past Projects, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Archive_File_Storage\Past Projects

|||| AUDIT Ctx=0x0096930408, ref=2, W2K8 Client(172.20.50.39) Port=54120/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=0e7cae06-fdff-11e2-9450-506313c82250

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x00c0a79808 RC=3 KERBEROS Capa=0x2) 'JUMP\josds'

|| Cnxp(0x0058b97808), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x0061b35008, ref=2, W2K8 Client(T410-R9AKCB6) Port=58843/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=8b066837-fe00-11e2-8727-889ffaf4c5e4

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x009ad17008 RC=3 NTLMSSP Capa=0x2001) 'JUMP\joy'

|| Cnxp(0x006d46a408), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x00664bb808), Name=Past Projects, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Archive_File_Storage\Past Projects

|||| AUDIT Ctx=0x0061b3f408, ref=2, W2K8 Client(172.20.50.40) Port=58858/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=8b066837-fe00-11e2-8727-889ffaf4c5e4

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x006f772808 RC=2 KERBEROS Capa=0x2) 'JUMP\joy'

|| Cnxp(0x00c0812408), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x00c1a0d808, ref=2, W2K8 Client(172.20.50.32) Port=55707/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=065957fe-f095-11e2-a0d2-5cac4cbdfa20

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x009a347008 RC=2 KERBEROS Capa=0x2) 'JUMP\jaman'

|| Cnxp(0x00383c0c08), Name=Shared Files, cUid=0x1 Tid=0x1, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x009685c808, ref=2, W2K8 Client(T410-R9AKCB4) Port=55710/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=065957fe-f095-11e2-a0d2-5cac4cbdfa20

||| SMB2 credits: Granted=33, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x00a7ec6808 RC=3 NTLMSSP Capa=0x2001) 'JUMP\jaman'

|| Cnxp(0x0065f4c808), Name=Past Projects, cUid=0x1 Tid=0x1, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Archive_File_Storage\Past Projects

|| Cnxp(0x00cf174808), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x012309ac08, ref=2, W2K8 Client(172.20.50.20) Port=60155/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=79c26672-fb9e-11e2-89b8-0022680b52ca

||| SMB2 credits: Granted=127, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x00888f0808 RC=3 KERBEROS Capa=0x2) 'JUMP\anna'

|| Cnxp(0x00c185a808), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=2

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x007f441c08, ref=2, W2K8 Client(T400-L3B3763) Port=60158/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=79c26672-fb9e-11e2-89b8-0022680b52ca

||| SMB2 credits: Granted=37, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x005bc99c08 RC=3 NTLMSSP Capa=0x2001) 'JUMP\anna'

|| Cnxp(0x00d2e3d808), Name=Past Projects, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Archive_File_Storage\Past Projects

|| Cnxp(0x00618ae008), Name=Shared Files, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x00ca24e408, ref=2, W2K8 Client(172.20.50.14) Port=59803/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=31f83b0b-fde2-11e2-98ee-00234df37e14

||| SMB2 credits: Granted=33, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x009c2b5808 RC=4 KERBEROS Capa=0x2) 'JUMP\gras'

|| Cnxp(0x009692dc08), Name=Shared Files, cUid=0x1 Tid=0x1, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=5

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x007f397408, ref=2, W2K8 Client(T400-L3B3935) Port=59855/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=31f83b0b-fde2-11e2-98ee-00234df37e14

||| SMB2 credits: Granted=33, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x009c273808 RC=3 NTLMSSP Capa=0x2001) 'JUMP\gras'

|| Cnxp(0x009b548808), Name=Shared Files, cUid=0x1 Tid=0x1, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x009bd87808), Name=Past Projects, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Archive_File_Storage\Past Projects

|||| AUDIT Ctx=0x011fd03808, ref=2, W2K8 Client(T410-R9AKCBF) Port=49397/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=f6380978-fe04-11e2-a5a4-f0def139c8cc

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x00af01c408 RC=2 NTLMSSP Capa=0x2001) 'JUMP\pen'

|| Cnxp(0x007247d008), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

|||| AUDIT Ctx=0x00c1147c08, ref=2, W2K8 Client(172.20.50.33) Port=49422/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=f6380978-fe04-11e2-a5a4-f0def139c8cc

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=2

||| Uid=0x1 NTcred(0x00ce253c08 RC=3 KERBEROS Capa=0x2) 'JUMP\pen'

|| Cnxp(0x005d2dcc08), Name=Shared Files, cUid=0x1 Tid=0x2, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\Shared Files

|| Cnxp(0x00b5ad9008), Name=Past Projects, cUid=0x1 Tid=0x3, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Archive_File_Storage\Past Projects

|||| AUDIT Ctx=0x00969de008, ref=2, W2K8 Client(172.20.50.28) Port=62060/445

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=SMB2.10, Arch=Win2K8, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| Client GUID=303baa6c-fd5b-11e2-a355-00234df2c29c

||| SMB2 credits: Granted=31, Max=500

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x1 NTcred(0x0007acac08 RC=2 KERBEROS Capa=0x2) 'JUMP\bier'

|| Cnxp(0x00c17ea808), Name=Finance, cUid=0x1 Tid=0x1, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=1

| Absolute path of the share=\Production_File_Storage\Finance

|||| AUDIT Ctx=0x00968f5408, ref=2, XP Client(IBM-LKNBPD1) Port=4450/139

||| JA-SM-STORAGE1[JUMP] on if=Production_Interface_0

||| CurrentDC 0x0096e68408=JA-DC1

||| Proto=NT1, Arch=Win2K, RemBufsz=0xffff, LocBufsz=0xffff, popupMsg=1

||| 0 FNN in FNNlist NbUsr=1 NbCnx=1

||| Uid=0x3f NTcred(0x0061824808 RC=2 KERBEROS Capa=0x2) 'JUMP\sara'

|| Cnxp(0x00b418e408), Name=Shared Files, cUid=0x3f Tid=0x3f, Ref=1, Aborted=0

| readOnly=0, umask=22, opened files/dirs=0

| Absolute path of the share=\Production_File_Storage\Shared Files

total smb_streamCtx: 47

Sorry for the crazy length, I wanted to paste everything so you’d see it…

Thanks!

29 Posts

August 5th, 2013 14:00

I logged into the Unisphere web UI and found the properties to the CIFS server. Under User Limit, the field is blank.

Is that what you are referring to?

33 Posts

August 6th, 2013 09:00

Greetings,

The output shows that the Celerra Data Mover Max Protocol setting has changed to SMB2 as expected with an upgrade from NAS 5.6 to NAS 6.0. There are a number of different clients connecting with an array of SMB protocol levels.

CIFS Server is  JA-SM-STORAGE1 on Data Mover Running 6.0.70.4

Max Protocol = SMB2

Joined to Domain JUMP

Current DC = JA-DC1 - A server running W2K8

JA-DC1 is also a client of JA-SM-STORAGE1 using NT1 protocol <-- Why not connecting with SMB2.02 or SMB2.10?

There are a number of W2K8 clients accessing shares via SMB2.10

There are a number of WinXP clients accessing shares via NT1

There is one W2K client (JUMPSERVER)  accessing shares via NT1

There is one W2K8 client (JA-NY-SVR)  accessing shares via NT1

There is one W2K8 client (JA-DC2)  accessing shares via SMB2.02

There is one W2K8 client (172.20.3.5)  accessing shares via SMB2.02

However, it is strange that the protocol that


What is the pattern with the clients that can't connect?

29 Posts

August 6th, 2013 10:00

Kajibade,

I should point out that we have different servers running different versions of Windows Server, so there are different versions of SMB running. I believe that 2K8 R1 doesn’t support SMB2.1 like 2K8R2 does. Anyways, this is the list:

JA-DC1 : Win 2K8 R1

JA-DC2 : 2K8 R1

JUMPSERVER: W2K

JA-NY-SVR: 2K8R2

172.20.3.5 : That is actually JA-DC2…not sure why its showing up like that in your list

Client machines are a mix of Win XP and Win 7

I can replicate the pattern if I turn on AD services on JA-DC2. Originally, DC1 and DC2 were our two DCs. I removed AD, DNS, DHCP from DC2, upgraded DART to 6.0 and then re-added the DC roles to DC2. Now, whenever I turn on the AD services on DC2, clients as well as some servers, cannot connect to the CIFS share via a Host record in DNS called “fileserver”, and also cannot connect via
IP address. They can, however, access it through the JA-SM-STORAGE1 name.

Does that help with anything?

33 Posts

August 6th, 2013 11:00

OK. So it is not about access protocols; it seems to be about name resolution of any A, PTR and alias records setup in DNS when W2K8 R2 Domain Services are enabled.

What setting is shown when you look at the way the Data Mover plays with Dynamic DNS?

Use command "server_param -facility dns -info updateMode -verbose " to see what the DM is trying to do when it interacts with the DNS domain.

This is a display only command (no impact)

29 Posts

August 6th, 2013 12:00

I thought it was R2 related, but JA-DC1 and DC22 are not R2 servers. Does that matter?

Also, the connectivity doesn’t seem to be affecting ALL DNS names. Clients cannot connect to the CIFS server at
fileserver
fileserver> or the CIFS IP Address, but they CAN connect via
ja-sm-storage1
ja-sm-storage1> and all other hosts via their A records. It seems as if any NEW DC that is introduced, whether its R2 or R1, will give ‘access is denied’ errors to clients connecting to our CIFS.

The only workaround I have so far is the STOP AD services on DC2 to ensure all my users can connect to the files.

Here is the result of the command with DC2 stopped:

server_param server_2 -facility dns -info updateMode -verbose

server_2 :

name = updateMode

facility_name = dns

default_value = 2

current_value = 0

configured_value = 0

user_action = none

change_effective = immediate

range = (0,2)

description = Update mode for DNS (default: secure)

detailed_description

By default, the Data Mover will issue secure Dynamic DNS updates to the DNS server for the DNS domain it joins. param dns updateMode=0, no updates param dns updateMode=1, insecure updates param dns updateMode=2, secure updates (default)

Thanks again!

33 Posts

August 7th, 2013 07:00

So, now I am wondering if the note mentioned in this Technet article applies. http://technet.microsoft.com/en-us/library/cc753014.aspx

This references 2008 AD integrated DNS zones requiring clients to use secure dynamic updates.

The Data Mover here has the setting updateMode=0 (and it was deliberately configured that way, in the past, since it is not the default in NAS 6.0)

What kind of messages are logged on the Data Mover or in the DNS server when the clients get “Access Denied” errors?

29 Posts

August 7th, 2013 10:00

Do you know how I can check for those messages in the Data Mover? Your commands have been super helpful!

Can’t we just change the updatemode now that you have a better sense of what kind of servers I’m running?

33 Posts

August 7th, 2013 13:00

You can use "server_log -a -s " to show the full log of messages on the running Data Mover, with human-readable date and time stamps. Look for messages related to "DNS" or "GSS-API" that could account for the clients getting "Access Denied" errors. You can also use the event viewer in the Unisphere GUI to see the logs.

For any cryptic, numerical Message ID's, use the "nas_message -info " command to get a translation.

Use command "server_param -facility dns -modifyupdateMode -value 2 " to enable secure DNS update behaviour on the Data Mover. I think that this change requires a Data Mover reboot to take effect, so choose a time when you will not impact your business.

29 Posts

August 7th, 2013 16:00

So I turned on DC2 and waiting about 40 minutes because that is how I can replicate this issue. After waiting a while, I tried to have our network scanner scan a document directly to our SAN. Our scanner uses the SMB protocol, btw. As predicted, it errored out and then I collected the log. It was quite long so I just pasted two different sections. The first part is when the scan was successful (with JA-DC2 turned OFF). Then I turned on server and the bottom part is of the error.

Successful access:

2013-08-07 16:12:53: SMB: 6: SSX Auth. successful for user jump\scandocs

2013-08-07 16:12:53: SMB: 7: cifsMangle: Mangling op 3: Input "scandocs", output "scandocs"

2013-08-07 16:12:53: SMB: 7: cifsMangle: Mangling op 3: Input "JUMP", output "jump"

2013-08-07 16:12:53: SMB: 6: NTLMSSP1 Empty Blob Len = 9

2013-08-07 16:12:53: SMB: 6: SSXAuth_SERVER_EXT14 aT=4 mT=3 0x0

2013-08-07 16:12:53: SMB: 6: SSXDA: completed for uid=0x3f

2013-08-07 16:12:53: SMB: 6: User JUMP\scandocs primary GID set to 0x8004 (Unix=0x8000)

2013-08-07 16:12:53: SMB: 6: Successful NTLMSSP Logon for user JUMP\scandocs Client=XRX0000AAD605B9 ntCapa=0x2001

5202d476 DC0x0096e68418 JA-DC1[JUMP] 44 setCurrentDC Ctx=0x010fec0808 Old=0x0096e68408 New=0x0000000000

5202d476 DC0x0096e68418 JA-DC1[JUMP] 45 setCurrentDC Ctx=0x0066649808 Old=0x0000000000 New=0x0096e68408

2013-08-07 16:12:54: SMB: 6: replyNT1[KerbBlob]

client=172.20.4.1 Port[41954/445] capa=0x8801/0x8000f3fd

2013-08-07 16:12:54: SMB: 6: NTLMSSP1 flags=0x60088215

2013-08-07 16:12:54: SMB: 6: SSXAuth_readNTLMSSP1=0x0 Flags=0x60088215

2013-08-07 16:12:54: SMB: 6: SSXAuth_NTLMSSP1=0xc0000016 Machine='172.20.4.1'

2013-08-07 16:12:54: SMB: 6: SSXAuth_SERVER_EXT13 aT=3 mT=1 0xc0000016

2013-08-07 16:12:54: SMB: 6: NTLMSSP2U client=XRX0000AAD605B9 (172.20.4.1 / 172.20.4.1) notASCII=0 Flags=0x60088205

2013-08-07 16:12:54: SMB: 6: authenticate jump\scandocs S=0 UserAuthenticated

5202d476 DC0x0096e68418 JA-DC1[JUMP] 48 DCsetNew=0x0096e68408 Old=0x0000000000

2013-08-07 16:12:54: SMB: 6: SSX Auth. successful for user jump\scandocs

2013-08-07 16:12:54: SMB: 7: cifsMangle: Mangling op 3: Input "scandocs", output "scandocs"

2013-08-07 16:12:54: SMB: 7: cifsMangle: Mangling op 3: Input "JUMP", output "jump"

2013-08-07 16:12:54: SMB: 6: NTLMSSP1 Empty Blob Len = 9

2013-08-07 16:12:54: SMB: 6: SSXAuth_SERVER_EXT14 aT=4 mT=3 0x0

2013-08-07 16:12:54: SMB: 6: SSXDA: completed for uid=0x3f

2013-08-07 16:12:54: SMB: 6: User JUMP\scandocs primary GID set to 0x8004 (Unix=0x8000)

2013-08-07 16:12:54: SMB: 6: Successful NTLMSSP Logon for user JUMP\scandocs Client=XRX0000AAD605B9 ntCapa=0x2001

5202d476 DC0x0096e68418 JA-DC1[JUMP] 44 setCurrentDC Ctx=0x0066649808 Old=0x0096e68408 New=0x0000000000

5202d476 DC0x0096e68418 JA-DC1[JUMP] 45 setCurrentDC Ctx=0x00c115f008 Old=0x0000000000 New=0x0096e68408

2013-08-07 16:12:54: SMB: 6: replyNT1[KerbBlob]

client=172.20.4.1 Port[41955/445] capa=0x8801/0x8000f3fd

2013-08-07 16:12:54: SMB: 6: NTLMSSP1 flags=0x60088215

2013-08-07 16:12:54: SMB: 6: SSXAuth_readNTLMSSP1=0x0 Flags=0x60088215

2013-08-07 16:12:54: SMB: 6: SSXAuth_NTLMSSP1=0xc0000016 Machine='172.20.4.1'

2013-08-07 16:12:54: SMB: 6: SSXAuth_SERVER_EXT13 aT=3 mT=1 0xc0000016

2013-08-07 16:12:54: SMB: 6: NTLMSSP2U client=XRX0000AAD605B9 (172.20.4.1 / 172.20.4.1) notASCII=0 Flags=0x60088205

2013-08-07 16:12:54: SMB: 6: authenticate jump\scandocs S=0 UserAuthenticated

5202d476 DC0x0096e68418 JA-DC1[JUMP] 48 DCsetNew=0x0096e68408 Old=0x0000000000

2013-08-07 16:12:54: SMB: 6: SSX Auth. successful for user jump\scandocs

2013-08-07 16:12:54: SMB: 7: cifsMangle: Mangling op 3: Input "scandocs", output "scandocs"

2013-08-07 16:12:54: SMB: 7: cifsMangle: Mangling op 3: Input "JUMP", output "jump"

2013-08-07 16:12:54: SMB: 6: NTLMSSP1 Empty Blob Len = 9

2013-08-07 16:12:54: SMB: 6: SSXAuth_SERVER_EXT14 aT=4 mT=3 0x0

2013-08-07 16:12:54: SMB: 6: SSXDA: completed for uid=0x3f

2013-08-07 16:12:54: SMB: 6: User JUMP\scandocs primary GID set to 0x8004 (Unix=0x8000)

2013-08-07 16:12:54: SMB: 6: Successful NTLMSSP Logon for user JUMP\scandocs Client=XRX0000AAD605B9 ntCapa=0x2001

5202d476 DC0x0096e68418 JA-DC1[JUMP] 44 setCurrentDC Ctx=0x00c115f008 Old=0x0096e68408 New=0x0000000000

Failed Access:

2013-08-07 16:32:16: LDAP: 11: LdapClient::searchOn: client @ = 0x00333c5858, DN = , scope = 0

2013-08-07 16:32:16: LDAP: 11: LdapService::connect: sslClient is NULL

2013-08-07 16:32:16: LDAP: 11: LdapUdpXportImpl::read: select timeout = 200

2013-08-07 16:32:16: LDAP: 11: LdapService::shutdown: @ = 0x00694b9408, connection = 0x00ca042c08

2013-08-07 16:32:16: LDAP: 11: LdapClient::searchOn: client @ = 0x00333c5858, DN = , scope = 0

2013-08-07 16:32:16: LDAP: 11: LdapService::connect: sslClient is NULL

2013-08-07 16:32:16: LDAP: 11: LdapUdpXportImpl::read: select timeout = 200

2013-08-07 16:32:16: LDAP: 11: LdapUdpXportImpl::read: errno = 5

2013-08-07 16:32:16: LDAP: 11: LdapService::shutdown: @ = 0x00d2655a08, connection = 0x0007875b08

2013-08-07 16:32:16: LDAP: 11: LdapClient::searchOn: client @ = 0x00333c5858, DN = , scope = 0

2013-08-07 16:32:16: LDAP: 11: LdapService::connect: sslClient is NULL

2013-08-07 16:32:16: LDAP: 11: LdapUdpXportImpl::read: select timeout = 200

2013-08-07 16:32:16: LDAP: 11: LdapUdpXportImpl::read: errno = 5

2013-08-07 16:32:16: LDAP: 11: LdapService::shutdown: @ = 0x003011b808, connection = 0x007877aa08

2013-08-07 16:32:16: LDAP: 11: LdapClient::searchOn: client @ = 0x00333c5858, DN = , scope = 0

2013-08-07 16:32:16: LDAP: 11: LdapService::connect: sslClient is NULL

2013-08-07 16:32:16: LDAP: 11: LdapUdpXportImpl::read: select timeout = 200

2013-08-07 16:32:16: LDAP: 11: LdapService::shutdown: @ = 0x0065ee7408, connection = 0x0048064308

2013-08-07 16:32:16: LDAP: 11: LdapClient::searchOn: client @ = 0x00333c5858, DN = , scope = 0

2013-08-07 16:32:16: LDAP: 11: LdapService::connect: sslClient is NULL

2013-08-07 16:32:16: LDAP: 11: LdapUdpXportImpl::read: select timeout = 200

2013-08-07 16:32:16: LDAP: 11: LdapService::shutdown: @ = 0x00389cf208, connection = 0x0105648c08

2013-08-07 16:32:16: SMB: 6: W2KgetInitialDC:favorite DC=JA-DC2 (old=JA-DC1) IP=172.20.3.5/172.20.3.4 domain=jumpassociates.net

5202d900 DC0x00b5ab5418 JA-DC2[JUMP] 4 setCurrentDC Ctx=0x00b922c008 Old=0x0000000000 New=0x00b5ab5408

5202d900 DC0x00b5ab5418 JA-DC2[JUMP] 10 IPC_Connect: :ConnectReset PID=0x1001

5202d900 DC0x00b5ab5418 JA-DC2[JUMP] 11 Try to connect port=445

2013-08-07 16:32:16: SMB: 6: >DC=JA-DC2(172.20.3.5) R=11 T=1 ms S=0,0x1/-1

2013-08-07 16:32:16: KERBEROS: 11: krb5_sendto_kdc

2013-08-07 16:32:16: KERBEROS: 11: krb5use_dns: use dns = yes

2013-08-07 16:32:16: KERBEROS: 11: krb5_locate_srv_dns: for service _kerberos at realm JUMPASSOCIATES.NET, # KDC: 2

2013-08-07 16:32:16: KERBEROS: 11: krb5_locate_srv_dns: name ja-dc2.jumpassociates.net

2013-08-07 16:32:16: KERBEROS: 11: krb5_locate_srv_dns: prior. 0

2013-08-07 16:32:16: KERBEROS: 11: krb5_locate_srv_dns: port 88

2013-08-07 16:32:16: KERBEROS: 11: krb5_locate_srv_dns: IP @ 172.20.3.5

2013-08-07 16:32:16: KERBEROS: 11: krb5_locate_srv_dns: name ja-dc1.jumpassociates.net

2013-08-07 16:32:16: KERBEROS: 11: krb5_locate_srv_dns: prior. 0

2013-08-07 16:32:16: KERBEROS: 11: krb5_locate_srv_dns: port 88

2013-08-07 16:32:16: KERBEROS: 11: krb5_locate_srv_dns: IP @ 172.20.3.4

2013-08-07 16:32:16: KERBEROS: 11: krb5_sendto_kdc: Auto addr 172.20.3.5

2013-08-07 16:32:16: KERBEROS: 11: krb5_sendto_kdc:

addr 172.20.3.5 == 172.20.3.4

2013-08-07 16:32:16: KERBEROS: 11: krb5_sendto_kdc:

addr 172.20.3.5 == 172.20.3.5

2013-08-07 16:32:16: KERBEROS: 11: krb5_sendto_kdc:elevate entry addr 172.20.3.5

2013-08-07 16:32:16: KERBEROS: 11: krb5_sendto_kdc: 2addr 172.20.3.5

2013-08-07 16:32:16: KERBEROS: 11: krb5_sendto_kdc: proto is TCP

2013-08-07 16:32:17: KERBEROS: 11: krb5_sendto_kdc:

addr 172.20.3.5 == 172.20.3.5

2013-08-07 16:32:17: KERBEROS: 11: krb5_sendto_kdc:first entry addr 172.20.3.5 idx 0 list count 3

2013-08-07 16:32:17: KERBEROS: 11: krb5_send_tgs: return from krb5_sendto_kdc: retval = 0

2013-08-07 16:32:17: SMB: 6: KC_buildKrbCred(CIFS/JA-DC2@JUMPASSOCIATES.NET) Send init_sec_context sz=1301 rflags=0x1b6

2013-08-07 16:32:17: SMB: 6: DC_GetBlob srv=ja-sm-storage1 svc=CIFS@JA-DC2.JUMPASSOCIATES.NET OK (1)

2013-08-07 16:32:17: SMB: 6: >DC=JA-DC2(172.20.3.5) R=11 T=1 ms S=0,0x1/-1

2013-08-07 16:32:17: KERBEROS: 11: krb5_sname_to_principal: getHostByNameOrdered - hostname ja-sm-storage1.jumpassociates.net - returned hostname ja-sm-storage1.jumpassociates.net

2013-08-07 16:32:17: KERBEROS: 11: krb5_get_host_realm : Using realm 'JUMPASSOCIATES.NET' for host 'ja-sm-storage1.jumpassociates.net'

2013-08-07 16:32:17: KERBEROS: 11: acquire_accept_cred: principal = CIFS/ja-sm-storage1.jumpassociates.net@JUMPASSOCIATES.NET

2013-08-07 16:32:17: SMB: 6: SSXAKsc host=CIFS@ja-sm-storage1.jumpassociates.net

2013-08-07 16:32:17: SMB: 6: checkDCBlob:TicketFlags doesn't match 0x17/0x3

2013-08-07 16:32:17: SMB: 6: SSXKrbChk accept_sec_context='No error. No error. ' (0x0,0) ntStatus=SUCCESS

2013-08-07 16:32:17: SMB: 6: >DC=JA-DC2(172.20.3.5) R=11 T=1 ms S=0,0x1/-1

2013-08-07 16:32:17: SMB: 6: buildMbsPassword(0x00c199c208) JA-SM-STORAGE1 vno=3 L=256 maxLength=65535

2013-08-07 16:32:17: SMB: 6: sendW2KEnumTrustedDomains for srv=JA-SM-STORAGE1 on domain 'JUMP'

5202d901 DC0x00b5ab5418 JA-DC2[JUMP] 11 DCsetNew=0x00b5ab5408 Old=0x0000000000

5202d901 DC0x00b5ab5418 JA-DC2[JUMP] 12 DCsetNew=0x00b5ab5408 Old=0x0000000000

5202d901 DC0x00b5ab5418 JA-DC2[JUMP] 10 DCsetNew=0x00b5ab5408 Old=0x0000000000

5202d901 DC0x00b5ab5418 JA-DC2[JUMP] 10 DCsetNew=0x00b5ab5408 Old=0x0000000000

5202d901 DC0x00b5ab5418 JA-DC2[JUMP] 10 DCsetNew=0x00b5ab5408 Old=0x0000000000

2013-08-07 16:32:17: SMB: 6: replyNT1[KerbBlob]

client=172.20.4.1 Port[41963/445] capa=0x8801/0x8000f3fd

2013-08-07 16:32:17: SMB: 6: NTLMSSP1 flags=0x60088215

2013-08-07 16:32:17: SMB: 6: SSXAuth_readNTLMSSP1=0x0 Flags=0x60088215

2013-08-07 16:32:17: SMB: 6: SSXAuth_NTLMSSP1=0xc0000016 Machine='172.20.4.1'

2013-08-07 16:32:17: SMB: 6: SSXAuth_SERVER_EXT13 aT=3 mT=1 0xc0000016

2013-08-07 16:32:17: SMB: 6: NTLMSSP2U client=XRX0000AAD605B9 (172.20.4.1 / 172.20.4.1) notASCII=0 Flags=0x60088205

2013-08-07 16:32:17: SMB: 6: authenticate jump\scandocs S=20 SamLogonPipeAccessDenied

2013-08-07 16:32:17: SMB: 6: authLogon=SamLogonPipeAccessDenied Es=0x0 Em=ACCESS_DENIED U='scandocs' D='jump'

2013-08-07 16:32:17: SMB: 6: SamLogonPipeAccessDenied DC=JA-DC2 rebuild status=SecureChannelOK

5202d901 DC0x00b5ab5418 JA-DC2[JUMP] 8 DCsetNew=0x00b5ab5408 Old=0x0000000000

2013-08-07 16:32:17: SMB: 6: SSXAuth_SERVER_EXT14 aT=4 mT=3 0xc0000022

2013-08-07 16:32:17: SMB: 6: SSXDA_remove(0x3f,XRX0000AAD605B9) status=0xc0000022 auth=1

2013-08-07 16:32:17: SMB: 6: SessSetupX failed with ACCESS_DENIED

5202d901 DC0x00b5ab5418 JA-DC2[JUMP] 4 setCurrentDC Ctx=0x00b922c008 Old=0x00b5ab5408 New=0x0000000000

2013-08-07 16:32:46: SMB: 6: NTLMSSP1 flags=0xa2088207

2013-08-07 16:32:46: SMB: 6: SSXAuth_readNTLMSSP1=0x0 Flags=0xa2088207

2013-08-07 16:32:46: SMB: 6: SSXAuth_NTLMSSP1=0xc0000016 Machine='IBM-MJHFP45'

2013-08-07 16:32:46: SMB: 6: SSXAuth_SERVER_EXT13 aT=3 mT=1 0xc0000016

2013-08-07 16:32:46: SMB: 6: NTLMSSP1 Empty Blob Len = 9

2013-08-07 16:32:46: SMB: 6: SSXAuth_SERVER_EXT14 aT=4 mT=3 0x0

2013-08-07 16:32:46: SMB: 6: SSXDA: completed for uid=0x53

2013-08-07 16:32:46: SMB: 6: Successful ANONYMOUS Logon for user \(NULL) Client=IBM-MJHFP45 ntCapa=0x4

2013-08-07 16:32:50: SMB: 6: DCT=1375918370856 preconnectDC dns

2013-08-07 16:32:55: SMB: 6: userLogoffX= uid=0x53

Hopefully that will paint a better picture of what is going on.

I’m going to enable Secure DNS tonight, during off hours.

Thanks!

674 Posts

August 7th, 2013 22:00

JAssociates wrote:

I thought it was R2 related, but JA-DC1 and DC22 are not R2 servers. Does that matter?

Also, the connectivity doesn’t seem to be affecting ALL DNS names. Clients cannot connect to the CIFS server at
fileserver<file:///
fileserver> or the CIFS IP Address, but they CAN connect via
ja-sm-storage1<file:///
ja-sm-storage1> and all other hosts via their A records.  It seems as if any NEW DC that is introduced, whether its R2 or R1, will give ‘access is denied’ errors to clients connecting to our CIFS.

So all clients can access the Cifs server of the datamover ja-sm-storage1 using the name ja-sm-storage1.

Connecting to a cifs share using an alias (or not its original compname) seems to be tricky (f.e. kerberos name checking).

Take a look at a procedure at Connecting to SMB share with an alias name (CNAME) | HomeWorks's Blog

The DisableStrictNameChecking parameter needs also to be configured on the datamover, see ETA emc158629

[nasadmin@beckham ~]$ server_param server_2 -f cifs -info LanmanServer.disableNameChecking -v
server_2 :
name = LanmanServer.disableNameChecking
facility_name = cifs
default_value = 0
current_value = 0
configured_value = 1
user_action = reboot DataMover
change_effective = reboot DataMover
range = (0,1)
description = Disables checking of the server's principal name of the client's kerberos ticket.

detailed_description
When set to 1, this parameter disables the control of the server's principal name of the client's kerberos ticket. The client is then allowed to connect with a DNS alias (please refer to Microsoft article 281308). When set to 0, the client is only allowed to connect using the primary computer name.

33 Posts

August 8th, 2013 05:00

Thanks Peter:

It looks like you have found the real answer.

No Events found!

Top