Enable the option (temporarily) 'cifs.trace_dc_connection'. The output (via screen\messages file) will help.
It may not be an issue with complete connectivity drop, but the DC is definitely rejecting the RPC request to look up group membership (SamrGetAliasMembership).
Glenn
-----Original Message----- From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Borzenkov, Andrey Sent: Tuesday, November 28, 2006 4:40 AM To: Simon Vallet; toasters@mathworks.com Subject: RE: Intermittent "Permission denied" on NTFS qtree
Hi,
You apparently have some intermittent connectivity problems with DC. As for error messages - this indicates that the domain controller sometimes does not respond, or that connectivity with it was briefly interrupted, which somehow proves connectivity problem.
Regards
Andrey Borzenkov Senior system engineer IT Product Services Fujitsu Siemens Computers Russian Federation
Telephone: +7(495)737-2723 Email: mailto:Andrey.Borzenkov@fujitsu-siemens.com Internet: http://www.fujitsu-siemens.com
-----Original Message----- From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Simon Vallet Sent: Monday, November 27, 2006 6:09 PM To: toasters@mathworks.com Subject: Intermittent "Permission denied" on NTFS qtree
Hi,
we've been trying to solve an intermittent "Permission denied" access problem on a NTFS qtree for some time now, to no avail, so maybe some of you will have some advice.
We have a CIFS- and NFS-exported NTFS qtree on a FAS3020 cluster running Data ONTAP 7.1.1. The PDC is a win2k3 server, and Unix users are managed via NIS.
From time to time, legitimate users are refused access to certain files with a "Permission denied" message, especially when trying to access the qtree via NFS. These users *do* have permission to access the files in question as per NTFS ACLs -- in fact, when they retry to access the file a few minutes later, they are granted access.
We're seing this problem since a bit more of a week now, and still have no clue what the cause of the problem could be... the SID cache seems to be a good suspect, but it's hard to tell; we've also thought of buggy win2k3 patches...
In parallel, we're seing the following messages in the logs: CIFSRPC SamrGetAliasMembership: Exception rpc_s_unknown_reject caught.
Has anybody experienced a similar problem ?
Simon