Solved

Samba WINS server gives old IP address?

Posted on 2004-08-17
8
284 Views
Last Modified: 2013-12-19
I have a WORKGROUP Windows network with 2 Samba servers, PRIMARY and BACKUP.  PRIMARY is acting as a file server and a WINS server.  BACKUP is rigged to win browse master elections.  Typically everything works just fine.
 
The DHCP server is set to distribute the WINS server address.

There is a Windows 2000 server (SERVER) that was set to get an address with DHCP for some reason.  This makes it hard to monitor as its address changes so I want to move it to a static address.

When I change the IP address on SERVER, windows clients can non longer resolve it by name.  SERVER is set to register with the WINS server.  Many restarts.  nbtstat -RR, etc.

BACKUP is not set to use a WINS server.  It resolves via broadcast and smbclient -L //SERVER works great.

PRIMARY cannot resolve SERVER.  It gets the old address SERVER was at (10.0.0.150) when it was using a DHCP lease.  I suspect that's why the client machines get the same problem address.

Running smbclient under debug mode shows that it's getting its address from its own (local) WINS server.  I've deleted the contents of /var/cache/samba with samba stopped, to no avail.  There isn't an lmhosts file on the samba server, nor is there an entry for SERVER in /etc/hosts.  I tried adding a DNS entry for server but that didn't help, even with dns proxy set to be on.

PRIMARY can talk to SERVER by IP just fine, e.g. smbclient -I 10.0.0.10 -L //SERVER

'nmblookup SERVER' on PRIMARY returns the old address.

Exploring with nmblookup and nbtstat shows no additional WINS servers.  I've tried forcing elections to no avail.

So, somehow PRIMARY is getting the old address from somewhere, but I'm not seeing who could be offering that information or why it would trust that over the machine's own registration.  I don't actually have any reason to believe SERVER is registering via WINS successfully, but I don't have any reason to belive it's failing either.  There is nothing noted in SERVER's Event Log.

For now I've assigned SERVER a static lease to keep it still, but I'd like to get it out of the DHCP range.

Thanks for any insight.
0
Comment
Question by:bill_mcgonigle
  • 3
  • 3
8 Comments
 
LVL 37

Expert Comment

by:Bing CISM / CISSP
ID: 11826478
hi bill_mcgonigle,

it sounds that your samba based WINS servers have out-of-date records for the SERVER, just please delete the existing records for SERVER from the database of WINS and the active lease table of DHCP, then change SERVER's IP as you need.

hope it helps,
bbao
0
 

Author Comment

by:bill_mcgonigle
ID: 11826636
Hi, bbao,

   To the best of my knowledge that lives in /var/cache/samba/wins.dat, which was deleted.  Mysteriously, it's being repopulated with the wrong information.

Thanks,
-Bill
0
 
LVL 37

Expert Comment

by:Bing CISM / CISSP
ID: 11826651
you have a backup WINS server, the wrong information is reduplicated from the backup one? are you sure that both WINS databases are deleted?
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 

Author Comment

by:bill_mcgonigle
ID: 11826758
There's only one WINS server to the best of my knowledge.  Is there an implicit backup WINS server if you don't configure one?  There's certainly nothing on PRIMARY's configuration about replicating from any other WINS servers.
0
 

Author Comment

by:bill_mcgonigle
ID: 12064693
Thanks for the comments - this turned out to be a full filesystem on the WINS server, which was not able to record the new entry so it kept handing out the last one it had written to cache.
0
 
LVL 37

Expert Comment

by:Bing CISM / CISSP
ID: 12066788
hehe so strange reason. people always foget to check the most common things such as free space of the disk! ;)) i would recommend to make this question as PAQ with points refunded. regards,
0
 
LVL 1

Accepted Solution

by:
GhostMod earned 0 total points
ID: 12098435
PAQed, with points refunded (250)

GhostMod
Community Support Moderator
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Greetings, Experts! First let me state that this website is top notch. I thoroughly enjoy the community that is shared here; those seeking help and those willing to sacrifice their time to help. It is fantastic. I am writing this article at th…
I'm a big fan of Windows' offline folder caching and have used it on my laptops for over a decade.  One thing I don't like about it, however, is how difficult Microsoft has made it for the cache to be moved out of the Windows folder.  Here's how to …
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now