Re: [Samba] security=server, port 445 and winnt

On dom, 2005-12-04 at 08:28 +1100, Andrew Bartlett wrote:
> On Fri, 2005-12-02 at 20:17 +0000, Bryan K. Wright wrote:
> > Hi folks,
> >
> > I'm running several samba servers that use "security=
> > server" and "password server" to point authentications to a
> > WinNT pdc. Snooping at the network traffic, I find that
> > the samba server initially tries to connect to the WinNT
> > server through port 445 (which fails), then reverts to 139
> > (which succeeds). I know it's possible to use the
> > "samba ports" parameter to control which ports the samba
> > server listens on, but this seems to have no effect on which
> > ports are used to talk to the password server.
> >
> > I'd like to tell the samba server not to try port
> > 445, since the failover seems to add a few seconds to the
> > time necessary for clients to establish a connection to the
> > samba server.
> >
> > Any ideas? BTW, the samba version is 3.0.20.
>
> I see two hack ideas: Hack the source to force the port parameter, or
> setup an firewall rule denying outbound connections to port 445 on the
> DC (therefore causing the fallback faster).

REJECTing is better, the DENY would make it wait a long timeout.

Simo.


--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba