Strange error message in /var/adm/messages

General discussions about Sharity
jonhardt
Posts: 4
Joined: Wed Nov 25, 2009 8:15 pm

Strange error message in /var/adm/messages

Postby jonhardt » Tue Dec 15, 2009 10:35 pm

We occasionally get this error message in our logs....Sharity appears to work correctly, but we are curious as to what this particular message means...

Dec 8 17:16:22 sdnppftp1 sharity[4758]: [ID 702911 daemon.error] cifsrpc/err: RX message too short in AndX stuff, action, token length
Dec 8 17:16:22 sdnppftp1 sharity[4758]: [ID 702911 daemon.error] cifsrpc/err: An error occured while decoding the following message:
Dec 8 17:16:22 sdnppftp1 sharity[4758]: [ID 702911 daemon.error] cifsrpc/err: setup[0] = 115 (0x73), setupCount = 1
Dec 8 17:16:22 sdnppftp1 sharity[4758]: [ID 702911 daemon.error] cifsrpc/err: flags = 0x88, flags2=0xc001
Dec 8 17:16:22 sdnppftp1 sharity[4758]: [ID 702911 daemon.error] cifsrpc/err: uid = 0, tid = 0, pid = 1, mid = 1
Dec 8 17:16:22 sdnppftp1 sharity[4758]: [ID 702911 daemon.error] cifsrpc/err: msgStart=4 dataOffset=39 errorPos=37
Dec 8 17:16:22 sdnppftp1 sharity[4758]: [ID 702911 daemon.error] cifsrpc/err: odMsg RX data size 35 rxPtr 4 base 0x00998844:
Dec 8 17:16:22 sdnppftp1 sharity[4758]: [ID 702911 daemon.error] cifsrpc/err: 0000: ff 53 4d 42 73 16 00 00 c0 88 01 c0 00 00 00 00
Dec 8 17:16:22 sdnppftp1 sharity[4758]: [ID 702911 daemon.error] cifsrpc/err: 0010: 00 00 00 00 00 00 00 00 00 00 01 00 00 00 01 00
Dec 8 17:16:22 sdnppftp1 sharity[4758]: [ID 702911 daemon.error] cifsrpc/err: 0020: 00 00 00
Dec 8 17:16:22 sdnppftp1 sharity[4758]: [ID 702911 daemon.error] cifsrpc/err: 4 bytes preceding current read position:
Dec 8 17:16:22 sdnppftp1 sharity[4758]: [ID 702911 daemon.error] cifsrpc/err: 0000: 00 00 00 23

Thanks for your help!

christian
Objective Development
Objective Development
Posts: 1368
Joined: Thu Nov 09, 2006 11:46 am

Re: Strange error message in /var/adm/messages

Postby christian » Sat Dec 26, 2009 11:45 pm

This is a response to an SMB_SESSION_SETUP_ANDX request. The response should contain more info (since the session setup is a multi-step procedure), but it does not.

Session setup is used to log in users. If Sharity fails with one mechanism, it tries the next. It's therefore possible that you never notice a problem because the next mechanism it tries succeeds.

jonhardt
Posts: 4
Joined: Wed Nov 25, 2009 8:15 pm

Re: Strange error message in /var/adm/messages

Postby jonhardt » Wed Jan 06, 2010 10:41 pm

Thanks for the info Christian - one last question, is there any way to quiet down this messaging in our logs? We get quite a few of them daily and it seems that the messages are just chatter since we do not have any authentication (or any other) issues....thanks again

christian
Objective Development
Objective Development
Posts: 1368
Joined: Thu Nov 09, 2006 11:46 am

Re: Strange error message in /var/adm/messages

Postby christian » Thu Jan 07, 2010 12:03 pm

There are several ways to get rid of these messages. All these changes are in one of the files in /usr/local/sharity3/etc/config. Since these files are overwritten, we recommend that you move the changes over to /usr/local/sharity3/var/local.cfg, once you know what you want to change.

First of all, you can try to disable authentication methods. Open /usr/local/sharity3/etc/config/cifs.cfg and search for the following lines:

Code: Select all

            allowAuthKerberos = yes;
            allowAuthNtlmV1 = yes;
            allowAuthNtlmV2 = yes;
            allowAuthNtlm2 = yes;
            allowAuthPlaintext = yes;

When you type "sharity login" in a shell, you should see which authentication method was actually used. Disable the others (set the option to "no").

If that does not help, you can brute-force disable the message. Look at /usr/local/sharity3/etc/config/main.cfg:

Code: Select all

    logLevels = "*=err,info; nfsmnt-=db0; *>error";

Change it to (e.g.):

Code: Select all

    logLevels = "*=err,info; nfsmnt-=db0; cifsrpc-=err; *>error";


Return to “Sharity General”

Who is online

Users browsing this forum: No registered users and 1 guest