samba - Jan 2003 - Tuning for a large environment

Hello,

I am currently using Samba 2.2.3a on a Sequent box running DYNIX/ptx v4.0.
We are serving up approximatly 4.5 terrabytes of data from a Hitachi Data
Systems storage array connected to our server by fiber channel. Many of our
users are on Citrix which connects to our SAMBA server via a Gigabit
Ethernet connection. There are still others that are connecting directly
from their PCs which are connected to 10/100 ethernet which then goes to a
FDDI backbone which the Samba server is on directly.

In the last six months, we've a significant upgrade in which we have gone
from about 20% of our users being Win2k and 80% on Win9x to 90% Win2k and
10% Win9x. In the last week we have noticed some serious performance
degredations. We found ourselves in a position at one point where the box
was made unusable because we reached the maximum number of UDP Protocol
Control Blocks that the OS was configured to handle. We have since
quadrupled the number and have not had the server itself become unusable but
we are still haveing slow downs reported by users. We also turned off
oplocks which seems to have helped the sitution this morning but we are back
where we started this afternoon.

I am looking for some tuning suggestions that might be able to help this. I
am currently looking at Appendix B from using Samba for information on
Performance Tuning. I understand that this book was written for the 2.0
series of Samba but I'm assuming that it is still pertenant. Are there any
additional suggestions?

Additionally, from looking in netstat, we have noticed that there are a
large number of TCP sockets in a "CLOSE_WAIT" state. There are also a
large
number of UDP sockets open but they are only listening on the loopback
interface. Is this normal?

Thank you all very much for your help and I would appreciate any help or
comments.

Chris Donovan
Lanier Worldwide

# Samba config file created using SWAT
# Names and IPs changed :)

# Global parameters
[global]
	workgroup = LANIER
	netbios name = SAMBA
	server string = SAMBA

        interfaces = 192.168.127.52/24 127.0.0.1/0 192.168.120.34/24
192.168.115.11/24
#        netbios aliases = SAMBA7
	bind interfaces only = No
	security = DOMAIN
	encrypt passwords = Yes
	password server = NT1 NT2
	password level = 9
	use mmap = no
	log file = /d/samba/logs/log.%m
	include = /d/samba/cfg/pernode/smb.conf.%m
	name resolve order = wins host bcast lmhosts
#	shared mem size = 4194304
	socket options = TCP_NODELAY SO_SNDBUF=24576 SO_RCVBUF=24576
        max xmit = 65535
	oplocks = no
	load printers = no
	domain master = no
	local master = yes
	preferred master = yes
	os level = 10
	dns proxy = No
        wins server = 192.168.129.38
	message command = /usr/bin/mailx -s 'message from %f on %m' nt ss <
%s ; rm %s
	admin users = u1, u2, mcaffee 
	read only = No
	create mask = 0770
	force create mode = 070
	security mask = 0707
	directory mask = 02770
	force directory mode = 02770
	directory security mask = 0707
	#hosts allow = ALL
	map hidden = Yes
	map archive = No
	postexec = /bin/true
	root preexec = /bin/true
	root postexec = /bin/true
	dos filetimes = Yes
	follow symlinks = Yes
	wide links = Yes
	exec = touch %H/.lastlogin

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 8 Jan 2003, Donovan, Chris wrote:
> Additionally, from looking in netstat, we have noticed that there are a
> large number of TCP sockets in a "CLOSE_WAIT" state. There are
also a
> large number of UDP sockets open but they are only listening on the
> loopback interface. Is this normal?
The UDP sockets are normal.  smbd uses those for oplock breaks.
> 	use mmap = no
Is mmap broken on DYNIX?


cheers, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 ISBN 0-672-32269-2         "SAMS Teach Yourself Samba in 24 Hours"
2ed
 "You can never go home again, Oatman, but I guess you can shop
there."
                            --John Cusack - "Grosse Point Blank"
(1997)


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+KEReIR7qMdg1EfYRAhlmAJ4735V0PfzG2WBBUMw+raM0t9baQgCfU96+
v/1EA9LaMKUbJ7sJcP3yD9s=V4YT
-----END PGP SIGNATURE-----