[FoLUG] Aiuto su vpn

Piero Conte p.conte@tin.it
Lun 24 Lug 2006 14:32:16 CEST


Ivan ho fatto ulteriori prove, ma non sono riuscito a risolvere nulla.

Premetto che sul vpn server il servizio iptables è stoppato, che il
client riesce a collegarsi alla pagina di prova del web server (ho attivato
anche il servizio httpd) e riesce a fare il telnet. Non ho provato ssh in
quanto il client (xp) non aveve putty.

Allego i file di log che ho anche commentato per rendere la situazione
più chiara.Posso anche aggiungere che con mia grande meraviglia dal
vpn server non riesco a fare il ping a 82.50.153.113 che dovrebbe essere
l'indirizzo pubblico del client.
Ho anche ipotizzato che il mancato funzionamento di smb sia dovuto a
telecom che interdice il passaggio di certi pacchetti. Dovrei fare forse
una prova con altri client (devo solo trovare la persona disposta)

Comunque ecco i log con la speranza che qualcuno mi dia una mano.

ringrazio

piero


> e' tempo di guardare il log, allora. in /var/log/samba/ ci sono log.smbd
> e log.nomedellamacchinachesistacollegando. metti in tail -n entrambi e
> poi guarda che dicono mentre provi a collegarti.
> inoltre, se non dovesse bastare, .........
>   
> ------------------------------------------------------------------------
>
> _

-------------- parte successiva --------------
[2006/07/21 17:34:41, 1] libsmb/ntlmssp.c:ntlmssp_update(259)
  got NTLMSSP command 3, expected 1
[2006/07/21 17:34:41, 1] smbd/service.c:make_connection(770)
  make_connection: refusing to connect with no session setup
[2006/07/21 17:35:05, 1] smbd/service.c:make_connection(770)
  make_connection: refusing to connect with no session setup
[2006/07/21 17:35:29, 1] smbd/service.c:make_connection(770)
  make_connection: refusing to connect with no session setup
[2006/07/21 17:35:34, 0] lib/util_sock.c:read_data(529)
  read_data: read failure for 4 bytes to client 82.48.58.174. Error = Connection reset by peer


[2006/07/22 16:27:33, 1] libsmb/clispnego.c:parse_negTokenTarg(251)
  Failed to parse negTokenTarg at offset 21

[2006/07/22 16:30:43, 1] libsmb/ntlmssp.c:ntlmssp_update(259)
  got NTLMSSP command 3, expected 1


[2006/07/22 16:27:33, 1] libsmb/clispnego.c:parse_negTokenTarg(251)
  Failed to parse negTokenTarg at offset 21

[2006/07/21 17:36:08, 1] libsmb/clispnego.c:parse_negTokenTarg(251)
  Failed to parse negTokenTarg at offset 21

[2006/07/20 14:29:10, 1] libsmb/ntlmssp.c:ntlmssp_update(259)
  got NTLMSSP command 3, expected 1

[2006/07/22 16:26:54, 1] libsmb/ntlmssp.c:ntlmssp_update(259)
  got NTLMSSP command 3, expected 1
[2006/07/22 16:31:15, 1] libsmb/ntlmssp.c:ntlmssp_update(259)
  got NTLMSSP command 3, expected 1



Questa è la routing table del client
===========================================================================
Elenco interfacce
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 0f 3d d0 87 17 ...... Alice ADSL 302T USB Remote NDIS driver - Miniport dell'Utilità di pianificazione pacchetti
0x20004 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface
0x30005 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface
===========================================================================
===========================================================================
Route attive:
Indirizzo rete             Mask             Gateway       Interfac.  Metric
          0.0.0.0          0.0.0.0    82.50.153.113   82.50.153.113	  2
          0.0.0.0          0.0.0.0      192.168.1.1     192.168.1.2	  32
          0.0.0.0          0.0.0.0   192.168.100.21  192.168.100.21	  1
     82.48.48.215  255.255.255.255    82.50.153.113   82.50.153.113	  1
    82.50.153.113  255.255.255.255        127.0.0.1       127.0.0.1	  50
   82.255.255.255  255.255.255.255    82.50.153.113   82.50.153.113	  50
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1	  1
      192.168.1.0    255.255.255.0      192.168.1.2     192.168.1.2	  30
      192.168.1.2  255.255.255.255        127.0.0.1       127.0.0.1	  30
    192.168.1.255  255.255.255.255      192.168.1.2     192.168.1.2	  30
    192.168.100.1  255.255.255.255    82.50.153.113   82.50.153.113	  1
   192.168.100.21  255.255.255.255        127.0.0.1       127.0.0.1	  50
  192.168.100.255  255.255.255.255   192.168.100.21  192.168.100.21	  50
        224.0.0.0        240.0.0.0      192.168.1.2     192.168.1.2	  30
        224.0.0.0        240.0.0.0    82.50.153.113   82.50.153.113	  2
        224.0.0.0        240.0.0.0   192.168.100.21  192.168.100.21	  1
  255.255.255.255  255.255.255.255      192.168.1.2     192.168.1.2	  1
Gateway predefinito:    192.168.100.21
===========================================================================
Route permanenti:
-------------- parte successiva --------------
[2006/07/24 10:20:09, 1] libsmb/clispnego.c:parse_negTokenTarg(251)
  Failed to parse negTokenTarg at offset 21
-------------- parte successiva --------------
[2006/07/24 11:35:18, 0] nmbd/nmbd.c:main(728)
  Netbios nameserver version 3.0.21b-2 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2006
[2006/07/24 11:35:18, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327)
  become_domain_master_browser_wins:
  Attempting to become domain master browser on workgroup MYGROUP, subnet UNICAST_SUBNET.
[2006/07/24 11:35:18, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341)
  become_domain_master_browser_wins: querying WINS server from IP 192.168.70.1 for domain master browser name MYGROUP<1b> on workgroup MYGROUP
[2006/07/24 11:35:18, 0] nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *****
  
  Samba server S2000 is now a domain master browser for workgroup MYGROUP on subnet UNICAST_SUBNET
  
  *****
[2006/07/24 11:35:18, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(282)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup MYGROUP on subnet 192.168.50.1
[2006/07/24 11:35:19, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(295)
  become_domain_master_browser_bcast: querying subnet 192.168.50.1 for domain master browser on workgroup MYGROUP
[2006/07/24 11:35:19, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(282)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup MYGROUP on subnet 192.168.70.1
[2006/07/24 11:35:19, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(295)
  become_domain_master_browser_bcast: querying subnet 192.168.70.1 for domain master browser on workgroup MYGROUP
[2006/07/24 11:35:19, 0] libsmb/nmblib.c:send_udp(791)
  Packet send failed to 192.168.200.100(137) ERRNO=Network is unreachable
[2006/07/24 11:35:19, 0] nmbd/nmbd_packets.c:send_netbios_packet(163)
  send_netbios_packet: send_packet() to IP 192.168.200.100 port 137 failed
[2006/07/24 11:35:19, 0] nmbd/nmbd_nodestatus.c:node_status(88)
  node_status: Failed to send packet trying to get node status for name *<00>, IP address 192.168.200.100
[2006/07/24 11:35:28, 0] nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *****
  
  Samba server S2000 is now a domain master browser for workgroup MYGROUP on subnet 192.168.50.1
  
  *****
[2006/07/24 11:35:28, 0] nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *****
  
  Samba server S2000 is now a domain master browser for workgroup MYGROUP on subnet 192.168.70.1
  
  *****
[2006/07/24 11:35:41, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *****
  
  Samba name server S2000 is now a local master browser for workgroup MYGROUP on subnet 192.168.50.1
  
  *****
[2006/07/24 11:35:41, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *****
  
  Samba name server S2000 is now a local master browser for workgroup MYGROUP on subnet 192.168.70.1
  
  *****
-------------- parte successiva --------------
[2006/07/24 10:57:22, 0] lib/util_sock.c:get_peer_addr(1225)
  getpeername failed. Error was Transport endpoint is not connected
[2006/07/24 10:57:23, 0] lib/util_sock.c:get_peer_addr(1225)
  getpeername failed. Error was Transport endpoint is not connected
[2006/07/24 10:57:24, 0] lib/util_sock.c:get_peer_addr(1225)
  getpeername failed. Error was Transport endpoint is not connected
[2006/07/24 10:57:25, 0] lib/util_sock.c:get_peer_addr(1225)
  getpeername failed. Error was Transport endpoint is not connected
[2006/07/24 10:57:25, 0] lib/util_sock.c:get_peer_addr(1225)
  getpeername failed. Error was Transport endpoint is not connected
[2006/07/24 10:57:25, 0] lib/util_sock.c:get_peer_addr(1225)
  getpeername failed. Error was Transport endpoint is not connected
[2006/07/24 11:35:18, 0] smbd/server.c:main(805)
  smbd version 3.0.21b-2 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2006
-------------- parte successiva --------------
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.10.3/395 - Release Date: 21/07/2006


Maggiori informazioni sulla lista FoLUG