Hello Samba Community, I would like to seek advice as my Samba AD tends to consume high memory usage caused by KDC service. This issue will always come back within a couple of days after I restart samba-ad-dc service. It does not help by increasing memory.>From message log:kernel: Out of memory: Kill process 14527 (samba) score 873 or sacrifice child Identified pid 14527 belongs to kdc_server: kdc_server 14527 Samba installed version: 4.9.11 (dns backend using Samba_Internal) Configured memory: Mem: 6GB Swap: 4GB Appreciate any advice provided. Thank you. Regards Alfonso
On 12/08/2020 02:28, Alfonso Conner via samba wrote:> Hello Samba Community, > > I would like to seek advice as my Samba AD tends to consume high memory > usage caused by KDC service. > This issue will always come back within a couple of days after I restart > samba-ad-dc service. > It does not help by increasing memory. > > From message log: > kernel: Out of memory: Kill process 14527 (samba) score 873 or sacrifice > child > > Identified pid 14527 belongs to kdc_server: > kdc_server 14527 > > Samba installed version: 4.9.11 (dns backend using Samba_Internal) > > Configured memory: > Mem: 6GB > Swap: 4GB > > Appreciate any advice provided. > Thank you. > > Regards > AlfonsoHi, can you give us a bit more info ? OS, smb.conf etc Rowland
Hi Rowland,
Sorry I missed out on the OS.
CentOS Linux release 7.6.1810 (Core)
smb.conf
# Global parameters
[global]
        bind interfaces only = Yes
        interfaces = lo ens192
        netbios name = SERVER1
        realm = EXAMPLE.COM
        server role = active directory domain controller
        workgroup = WORKGROUP
        idmap_ldb:use rfc2307  = yes
        ldap server require strong auth = no
        template shell = /bin/bash
        template homedir = /home/%U
        time server = yes
[netlogon]
        path = /usr/local/samba/var/locks/sysvol/example.com/scripts
        read only = No
[sysvol]
        path = /usr/local/samba/var/locks/sysvol
        read only = No
Regards
Alfonso
On Wed, Aug 12, 2020 at 3:04 PM Rowland penny via samba <
samba at lists.samba.org> wrote:
> On 12/08/2020 02:28, Alfonso Conner via samba wrote:
> > Hello Samba Community,
> >
> > I would like to seek advice as my Samba AD tends to consume high
memory
> > usage caused by KDC service.
> > This issue will always come back within a couple of days after I
restart
> > samba-ad-dc service.
> > It does not help by increasing memory.
> >
> >  From message log:
> > kernel: Out of memory: Kill process 14527 (samba) score 873 or
sacrifice
> > child
> >
> > Identified pid 14527 belongs to kdc_server:
> > kdc_server             14527
> >
> > Samba installed version: 4.9.11 (dns backend using Samba_Internal)
> >
> > Configured memory:
> > Mem: 6GB
> > Swap: 4GB
> >
> > Appreciate any advice provided.
> > Thank you.
> >
> > Regards
> > Alfonso
>
> Hi, can you give us a bit more info ?
>
> OS, smb.conf etc
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
If this is a new setup. 
And if this reflex your primary dns domain for your AD-DC. 
        realm = EXAMPLE.COM
Then i hope your really good with DNS setups, to easy to make errors here. 
Cannot contact any KDC for realm can be one of them. 
My advice use something like : 
realm = INTERNAL.EXAMPLE.COM 
Greetz, 
Louis
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Alfonso Conner via samba
> Verzonden: woensdag 12 augustus 2020 9:25
> Aan: Rowland penny
> CC: samba at lists.samba.org
> Onderwerp: Re: [Samba] Cannot contact any KDC for realm
> 
> Hi Rowland,
> 
> Sorry I missed out on the OS.
> 
> CentOS Linux release 7.6.1810 (Core)
> 
> smb.conf
> # Global parameters
> [global]
>         bind interfaces only = Yes
>         interfaces = lo ens192
>         netbios name = SERVER1
>         realm = EXAMPLE.COM
>         server role = active directory domain controller
>         workgroup = WORKGROUP
>         idmap_ldb:use rfc2307  = yes
>         ldap server require strong auth = no
>         template shell = /bin/bash
>         template homedir = /home/%U
>         time server = yes
> 
> [netlogon]
>         path = /usr/local/samba/var/locks/sysvol/example.com/scripts
>         read only = No
> 
> [sysvol]
>         path = /usr/local/samba/var/locks/sysvol
>         read only = No
> 
> Regards
> Alfonso
> 
> On Wed, Aug 12, 2020 at 3:04 PM Rowland penny via samba <
> samba at lists.samba.org> wrote:
> 
> > On 12/08/2020 02:28, Alfonso Conner via samba wrote:
> > > Hello Samba Community,
> > >
> > > I would like to seek advice as my Samba AD tends to 
> consume high memory
> > > usage caused by KDC service.
> > > This issue will always come back within a couple of days 
> after I restart
> > > samba-ad-dc service.
> > > It does not help by increasing memory.
> > >
> > >  From message log:
> > > kernel: Out of memory: Kill process 14527 (samba) score 
> 873 or sacrifice
> > > child
> > >
> > > Identified pid 14527 belongs to kdc_server:
> > > kdc_server             14527
> > >
> > > Samba installed version: 4.9.11 (dns backend using
Samba_Internal)
> > >
> > > Configured memory:
> > > Mem: 6GB
> > > Swap: 4GB
> > >
> > > Appreciate any advice provided.
> > > Thank you.
> > >
> > > Regards
> > > Alfonso
> >
> > Hi, can you give us a bit more info ?
> >
> > OS, smb.conf etc
> >
> > Rowland
> >
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>