Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Patrick Basile on October 15, 2001, 07:14:59 PM

Title: Logcheck errors - api_net_sam_logon/No applicable record for
Post by: Patrick Basile on October 15, 2001, 07:14:59 PM

Does anyone know why I am getting the following errors when logcheck runs?

Security Violations
=-=-=-=-=-=-=-=-=-=
Oct 15 09:09:50 bcsrv1 smbd[31597]:   api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON.
Oct 15 09:09:50 bcsrv1 smbd[31597]:   api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed.
Oct 15 09:13:36 bcsrv1 smbd[899]:   api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON.
Oct 15 09:13:36 bcsrv1 smbd[899]:   api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed.

Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Oct 15 09:01:10 bcsrv1 dhcpd: BOOTREQUEST from 00:04:4d:9d:c1:40 via eth0
Oct 15 09:01:10 bcsrv1 dhcpd: No applicable record for BOOTP host 00:04:4d:9d:c1:40 via eth0
Oct 15 09:01:21 bcsrv1 dhcpd: BOOTREQUEST from 00:03:e3:b6:e2:40 via eth0
Oct 15 09:01:21 bcsrv1 dhcpd: No applicable record for BOOTP host 00:03:e3:b6:e2:40 via eth0
Oct 15 09:01:47 bcsrv1 dhcpd: BOOTREQUEST from 00:04:4d:9d:c1:40 via eth0
Oct 15 09:01:47 bcsrv1 dhcpd: No applicable record for BOOTP host 00:04:4d:9d:c1:40 via eth0
Oct 15 09:01:58 bcsrv1 dhcpd: BOOTREQUEST from 00:03:e3:b6:e2:40 via eth0

Is eth0 the internal or external nic in a 'normal' e-smith 4.1.2 setup (which is how I have my server configured.) ?

Thanks.

Regards,
Patrick

Title: Re: Logcheck errors - api_net_sam_logon/No applicable record
Post by: Kelvin on October 16, 2001, 05:00:02 AM

eth0 is the internal network card unless you specified to swap.

Title: Re: Logcheck errors - api_net_sam_logon/No applicable record
Post by: Les Mikesell on October 16, 2001, 08:12:35 AM

The 'bootp' requests are coming from some network device like a printer or terminal server.  I think dhcpd would assign it an IP address if you fill in a name, IP address, and the ethernet MAC address in the e-smith form for hostnames.

Title: Re: Logcheck errors - api_net_sam_logon/No applicable record
Post by: Patrick Basile on October 21, 2001, 07:11:27 AM

Les,

Thanks for your tip about setting up a hostname,IP,MAC address in the e-smith server manager hostname panel - that seems to have "fixed" the problem for now.  I will still need to figure out where (which device on the LAN) this request is coming from.

Patrick