Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
1690
Views
0
Helpful
5
Replies

Unable to contact the necessary server

Reza Nashvi
Level 1
Level 1

‎08-19-2010 12:00 AM

Hi all,

I have 2811 installed in our test environment to test sslvpn. Everything is working great except CIFS. I can't browse my file server. When I click on the network file icon on SSLVPN page I get the following error:


The following error occurred while attempting the file operation:

Unable to contact the necessary server.

and on the router I get the following log:

Aug 19 06:43:37.998: %IP-3-DESTHOST: src=x.x.x.x, dst=0.0.0.0, NULL desthost -Proce
ss= "CIFS Proxy Process", ipl= 0, pid= 195,  -Traceback= 0x4188A6A4z 0x4188AC80z 0x4188ACE
Cz 0x418A110Cz 0x41BC7640z 0x41BCFEA8z 0x42D24FA8z 0x42D32660z 0x42DCE490z 0x42DCEE08z 0x4
2DCA858z 0x42DC8CD0z 0x42DC96F0z 0x42DB4678z 0x42DB4A98z 0x42DAF9E4z

Any help will be appreciated as I have to test it and then buy a new ASA as our firewall.

Best regards,

Reza

Labels:
0 Helpful
5 Replies 5

vragotha
Level 3
Level 3

‎08-19-2010 12:57 AM

Hard to say without more information, but take a look at CSCsl08145

0 Helpful

Reza Nashvi
Level 1
Level 1
In response to vragotha

‎08-19-2010 02:25 AM

Hi Vijay,

here is more information from my config file:

webvpn gateway gateway_1
ip address x.x.x.x port 443
http-redirect port 80
ssl trustpoint TP-self-signed-1852524881
inservice
!
webvpn context SSLVPN
secondary-color white
title-color #669999
text-color black
ssl authenticate verify all
!
url-list "Internet"
   heading "XYZ"
   url-text "XYZ Home Page" url-value "http://www.xyz.com"
   url-text "XYZ Email" url-value "https://webmail.xyz.com/exchange"
!
nbns-list "Files"
   nbns-server 192.168.1.201 master
!
policy group policy_1
   url-list "Internet"
   nbns-list "Files"
   functions file-access
   functions file-browse
   functions file-entry
   mask-urls
default-group-policy policy_1
aaa authentication list sdm_vpn_xauth_ml_1
gateway gateway_1
inservice

And also output of debug webvpn cifs:

Aug 19 09:18:08.598: Sent SMB IOD RQ message 0x4799F5DC to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799F5DC type 0
smb_iod_connect(): [Re]connect attempt
smb_iod_connect(): tcreate
../sslvpn/cifs/smb_trantcp.c(849):
smb_iod_connect(): tbind
../sslvpn/cifs/smb_trantcp.c(888):

Aug 19 09:18:08.598: WV:SOCK-->ENGINE: OPEN_REQ, remote_ip: 192.168.1.201, remote_port: 13
9 ip_table_id: 0, nat_start: 0.0.0.0, ssl_conn: 0
Aug 19 09:18:08.598: SSLVPN-CIFS: Added generic CTX to Server Side CIFS_LIST../sslvpn/cifs
/smb_trantcp.c(395): [ CKFDENECFDEFFCFGEFFCCACACACACACA]
../sslvpn/cifs/smb_trantcp.c(395): [ FJEPFFFCEOEBENEFCACACACACACACAAA]

Aug 19 09:18:08.610: WV:SOCK-->ENGINE: CLOSE_REQ, tcb: 4586362CSSLVPN-CIFS: Removed generi
c CTXT from CIFS_LIST
smb_iod_request()

Aug 19 09:18:08.610: Sent SMB IOD RQ message 0x4799F5DC to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799F5DC type 0
smb_iod_disconnect():
smb_iod_request()

Aug 19 09:18:08.610: Sent SMB IOD RQ message 0x4799F5DC to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799F5DC type 0
../sslvpn/cifs/ctx.c: : syserr = Unknown error 262
smb_iod_request()

Aug 19 09:18:08.678: Sent SMB IOD RQ message 0x4799FD0C to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799FD0C type 0
smb_iod_connect(): [Re]connect attempt
smb_iod_connect(): tcreate
../sslvpn/cifs/smb_trantcp.c(849):
smb_iod_connect(): tbind
../sslvpn/cifs/smb_trantcp.c(888):

Aug 19 09:18:08.678: WV:SOCK-->ENGINE: OPEN_REQ, remote_ip: 0.0.0.0, remote_port: 139 ip_t
able_id: 0, nat_start: 0.0.0.0, ssl_conn: 0
Aug 19 09:18:08.678: SSLVPN-CIFS: Added generic CTX to Server Side CIFS_LIST
Aug 19 09:18:08.682: %IP-3-DESTHOST: src=x.x.x.x , dst=0.0.0.0, NULL desthost -Proce
ss= "CIFS Proxy Process", ipl= 0, pid= 195,  -Traceback= 0x4188A6A4z 0x4188AC80z 0x4188ACE
Cz 0x418A110Cz 0x41BC7640z 0x41BCFEA8z 0x42D24FA8z 0x42D32660z 0x42DCE490z 0x42DCEE08z 0x4
2DCA858z 0x42DC8CD0z 0x42DC96F0z 0x42DB4678z 0x42DB4A98z 0x42DAF9E4z
Aug 19 09:18:11.682: %IP-3-DESTHOST: src=x.x.x.x , dst=0.0.0.0, NULL desthost -Proce
ss= "TCP Timer", ipl= 0, pid= 153,  -Traceback= 0x4188A6A4z 0x4188AC80z 0x4188ACECz 0x418A
110Cz 0x41BC64BCz 0x41BCDF8Cz 0x41BCE4F8z 0x4243CAE4z 0x4243CAC8zunable to open connection
Aug 19 09:18:14.682: WV:SOCK-->ENGINE: CLOSE_REQ, tcb: 458652B8SSLVPN-CIFS: Removed generi
c CTXT from CIFS_LIST
WV-CIFS: Removed generic CTXT from Server Side CIFS_LIST

Aug 19 09:18:14.682: WV-CIFS: Deleted generic CTX from Server side CIFS_LISTsmb_iod_reques
t()

Aug 19 09:18:14.682: Sent SMB IOD RQ message 0x4799FD0C to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799FD0C type 0
smb_iod_disconnect():
smb_iod_request()

Aug 19 09:18:14.682: Sent SMB IOD RQ message 0x4799FD0C to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799FD0C type 0
../sslvpn/cifs/ctx.c: : syserr = Connection timed out
smb_iod_request()

Aug 19 09:18:14.754: Sent SMB IOD RQ message 0x4799FD0C to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799FD0C type 0
smb_iod_connect(): [Re]connect attempt
smb_iod_connect(): tcreate
../sslvpn/cifs/smb_trantcp.c(849):
smb_iod_connect(): tbind
../sslvpn/cifs/smb_trantcp.c(888):

Aug 19 09:18:14.754: WV:SOCK-->ENGINE: OPEN_REQ, remote_ip: 0.0.0.0, remote_port: 139 ip_t
able_id: 0, nat_start: 0.0.0.0, ssl_conn: 0
Aug 19 09:18:14.754: SSLVPN-CIFS: Added generic CTX to Server Side CIFS_LIST
Aug 19 09:18:14.758: %IP-3-DESTHOST: src=x.x.x.x , dst=0.0.0.0, NULL desthost -Proce
ss= "CIFS Proxy Process", ipl= 0, pid= 195,  -Traceback= 0x4188A6A4z 0x4188AC80z 0x4188ACE
Cz 0x418A110Cz 0x41BC7640z 0x41BCFEA8z 0x42D24FA8z 0x42D32660z 0x42DCE490z 0x42DCEE08z 0x4
2DCA858z 0x42DC8CD0z 0x42DC96F0z 0x42DB4678z 0x42DB4A98z 0x42DAF9E4z
Aug 19 09:18:17.758: %IP-3-DESTHOST: src=x.x.x.x , dst=0.0.0.0, NULL desthost -Proce
ss= "TCP Timer", ipl= 0, pid= 153,  -Traceback= 0x4188A6A4z 0x4188AC80z 0x4188ACECz 0x418A
110Cz 0x41BC64BCz 0x41BCDF8Cz 0x41BCE4F8z 0x4243CAE4z 0x4243CAC8zunable to open connection
could not login to server *SMBSERVER
Aug 19 09:18:20.758: WV:SOCK-->ENGINE: CLOSE_REQ, tcb: 4586362CSSLVPN-CIFS: Removed generi
c CTXT from CIFS_LIST
WV-CIFS: Removed generic CTXT from Server Side CIFS_LIST

Aug 19 09:18:20.758: WV-CIFS: Deleted generic CTX from Server side CIFS_LISTsmb_iod_reques
t()

Aug 19 09:18:20.758: Sent SMB IOD RQ message 0x4799FD0C to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799FD0C type 0
smb_iod_disconnect():
smb_iod_request()

Aug 19 09:18:20.758: Sent SMB IOD RQ message 0x4799FD0C to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799FD0C type 0
../sslvpn/cifs/ctx.c: : syserr = Connection timed out
../sslvpn/cifs/cifs_api.c: : syserr = Connection timed out

0 Helpful

vragotha
Level 3
Level 3
In response to Reza Nashvi

‎08-19-2010 02:10 PM

Instead of using the network file icon, have you tried using the IP address or hostname in the Network File search box?

0 Helpful

Reza Nashvi
Level 1
Level 1
In response to vragotha

‎08-19-2010 02:36 PM

Hi Vijay,

Thanks for your help. With the hostname it gets to the username and password page. But still unable to login, I've tried domain\username and then password and also just username and password and both unsuccessful.

Here is the new debug output:

Aug 19 21:29:48.215: Sent message 0x479D5C00 type 3 to CIFS API process, pid 194CIFS API t
ask recv msg 0x479D5C00 type 3
smb_iod_request()

Aug 19 21:29:48.219: Sent SMB IOD RQ message 0x4799F8FC to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799F8FC type 0
smb_iod_connect(): [Re]connect attempt
smb_iod_connect(): tcreate
../sslvpn/cifs/smb_trantcp.c(849):
smb_iod_connect(): tbind
../sslvpn/cifs/smb_trantcp.c(888):

Aug 19 21:29:48.219: WV:SOCK-->ENGINE: OPEN_REQ, remote_ip: 192.168.1.201, remote_port: 13
9 ip_table_id: 0, nat_start: 0.0.0.0, ssl_conn: 0
Aug 19 21:29:48.219: SSLVPN-CIFS: Added generic CTX to Server Side CIFS_LIST../sslvpn/cifs
/smb_trantcp.c(395): [ EEEDCACACACACACACACACACACACACACA]
../sslvpn/cifs/smb_trantcp.c(395): [ FJEPFFFCEOEBENEFCACACACACACACAAA]
smb_iod_connect(): tconnect
smb_iod_addrq():
smb_iod_sendrq(): iod_state = transport active
../sslvpn/cifs/smb_iod.c: M:0000, P:0000, U:0000, T:0000
smb_iod_waitrq():
../sslvpn/cifs/smb_iod.c: mid 0000
smb_iod_removerq():
smb_iod_removerq():
../sslvpn/cifs/smb_rq.c: M:0000, P:0001, U:FFFF, T:FFFF, E: 0:0
../sslvpn/cifs/smb_smb.c: 0
../sslvpn/cifs/smb_smb.c: Dialect NT LM 0.12 (7, 17)
../sslvpn/cifs/smb_smb.c: TZ = -600
../sslvpn/cifs/smb_smb.c: CAPS = 1F3FC
../sslvpn/cifs/smb_smb.c: MAXMUX = 50
../sslvpn/cifs/smb_smb.c: MAXVCS = 1
../sslvpn/cifs/smb_smb.c: MAXRAW = 65536
../sslvpn/cifs/smb_smb.c: MAXTX = 16644
smb_iod_connect(): snegotiate
smb_iod_addrq():
smb_iod_sendrq(): iod_state = transport active
../sslvpn/cifs/smb_iod.c: M:0001, P:0000, U:0000, T:0000
smb_iod_waitrq():
../sslvpn/cifs/smb_iod.c: mid 0001
smb_iod_removerq():
smb_iod_removerq():
../sslvpn/cifs/smb_rq.c: M:0001, P:0001, U:0800, T:FFFF, E: 0:0
../sslvpn/cifs/smb_smb.c: error = 0
smb_iod_connect(): completed
smb_iod_request()

Aug 19 21:29:48.239: Sent SMB IOD RQ message 0x4799F8FC to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799F8FC type 0
smb_iod_treeconnect(): tree reconnect
smb_iod_addrq():
smb_iod_sendrq(): iod_state = session established
../sslvpn/cifs/smb_iod.c: M:0002, P:0000, U:0000, T:0000
smb_iod_waitrq():
../sslvpn/cifs/smb_iod.c: mid 0002
smb_iod_removerq():
smb_iod_removerq():
../sslvpn/cifs/smb_subr.c: Unmapped error 34:49152
../sslvpn/cifs/smb_subr.c: Unmapped error 3:31
../sslvpn/cifs/smb_rq.c: M:0002, P:0001, U:0800, T:FFFF, E: 3:31
../sslvpn/cifs/smb_smb.c: 272
smb_iod_request()

Aug 19 21:29:48.243: Sent SMB IOD RQ message 0x4799F8FC to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799F8FC type 0
smb_iod_treedisconnect(): tree disconnect
smb_iod_request()

Aug 19 21:29:48.243: Sent SMB IOD RQ message 0x4799F8FC to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799F8FC type 0
smb_iod_disconnect():
smb_iod_addrq():
smb_iod_sendrq(): iod_state = session established
../sslvpn/cifs/smb_iod.c: M:0003, P:0000, U:0000, T:0000
smb_iod_waitrq():
../sslvpn/cifs/smb_iod.c: mid 0003
smb_iod_removerq():
smb_iod_removerq():
../sslvpn/cifs/smb_subr.c: Unmapped error 34:49152
../sslvpn/cifs/smb_subr.c: Unmapped error 3:31
../sslvpn/cifs/smb_rq.c: M:0003, P:0001, U:0800, T:FFFF, E: 3:31
../sslvpn/cifs/smb_smb.c: 272

Aug 19 21:29:48.247: WV:SOCK-->ENGINE: CLOSE_REQ, tcb: 45FDC674SSLVPN-CIFS: Removed generi
c CTXT from CIFS_LIST
WV-CIFS: Removed generic CTXT from Server Side CIFS_LIST

Aug 19 21:29:48.247: WV-CIFS: Deleted generic CTX from Server side CIFS_LISTsmb_iod_reques
t()

Aug 19 21:29:48.251: Sent SMB IOD RQ message 0x4799F8FC to CIFS proxy process, pid 195CIFS
proxy task recv msg 0x4799F8FC type 0
../sslvpn/cifs/ctx.c: : syserr = RPC struct is bad
../sslvpn/cifs/cifs_api.c: : syserr = RPC struct is bad

0 Helpful

Reza Nashvi
Level 1
Level 1
In response to Reza Nashvi

‎08-26-2010 04:12 PM

Hi all,

I figured out that I can access any other server except DC server. I was trying to access DC and it was giving me this error. When I tried something on my file server it worked. I still don't know why I can't access anything on my DC, there is no firewall, antivirus is disabled but still no luck.

Regards,

Reza

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents