Topic: Logcheck errors - api_net_sam_logon/No applicable record for

[Patrick Basile]

Does anyone know why I am getting the following errors when logcheck runs?

Security Violations
=-=-=-=-=-=-=-=-=-=
Oct 15 09:09:50 bcsrv1 smbd[31597]:   api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON.
Oct 15 09:09:50 bcsrv1 smbd[31597]:   api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed.
Oct 15 09:13:36 bcsrv1 smbd[899]:   api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON.
Oct 15 09:13:36 bcsrv1 smbd[899]:   api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed.

Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Oct 15 09:01:10 bcsrv1 dhcpd: BOOTREQUEST from 00:04:4d:9d:c1:40 via eth0
Oct 15 09:01:10 bcsrv1 dhcpd: No applicable record for BOOTP host 00:04:4d:9d:c1:40 via eth0
Oct 15 09:01:21 bcsrv1 dhcpd: BOOTREQUEST from 00:03:e3:b6:e2:40 via eth0
Oct 15 09:01:21 bcsrv1 dhcpd: No applicable record for BOOTP host 00:03:e3:b6:e2:40 via eth0
Oct 15 09:01:47 bcsrv1 dhcpd: BOOTREQUEST from 00:04:4d:9d:c1:40 via eth0
Oct 15 09:01:47 bcsrv1 dhcpd: No applicable record for BOOTP host 00:04:4d:9d:c1:40 via eth0
Oct 15 09:01:58 bcsrv1 dhcpd: BOOTREQUEST from 00:03:e3:b6:e2:40 via eth0

Is eth0 the internal or external nic in a 'normal' e-smith 4.1.2 setup (which is how I have my server configured.) ?

Thanks.

Regards,
Patrick

[Kelvin]

eth0 is the internal network card unless you specified to swap.

[Les Mikesell]

The 'bootp' requests are coming from some network device like a printer or terminal server.  I think dhcpd would assign it an IP address if you fill in a name, IP address, and the ethernet MAC address in the e-smith form for hostnames.

[Patrick Basile]

Les,

Thanks for your tip about setting up a hostname,IP,MAC address in the e-smith server manager hostname panel - that seems to have "fixed" the problem for now.  I will still need to figure out where (which device on the LAN) this request is coming from.

Patrick