L.P.H. van Belle
2020-Aug-27 10:59 UTC
[Samba] Slow Samba AD DC performance compared to Microsoft AD DC
Lookup in the Windows setup where indexing is applied.
And, upgrade you os +samba (as Rowland also said).
Indexing on ad-object greatly improved in later samba versions.
ldbsearch -H "$(samba -b|grep PRIVATE_DIR |awk '{ print $NF
}')/sam.ldb" -s base -b @INDEXLIST
Will show you the index one's in samba.
Greetz,
Louis
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> Sinan Ozturk via samba
> Verzonden: donderdag 27 augustus 2020 12:48
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] Slow Samba AD DC performance compared to
> Microsoft AD DC
>
> Hello everyone.
>
> I have a problem with performance of Samba AD DC.
>
> We have a Laravel application that queries both Microsoft AD
> DC and Samba AD DC.
>
> When a query comes to AD it takes 1 second to complete,
> however with Samba it can take up to 4-5 seconds.
>
> The queries are updating user, creating group and attaching
> people to groups.
>
> Samba Server has more than 6000 users.
>
> The VM has 2 CPU 2 GB Ram and Virtio network card running
> Ubuntu 14.04 with Samba 4.3.11.
>
> Is there any way I can speed up Samba server?
>
> Here is the smb.conf file
>
> ###########################################################
> # Global parameters
> [global]
> workgroup = domain
> realm = domain.COM
> netbios name = JUGGERNAUT
> server role = active directory domain controller
> dns forwarder = 172.31.238.11
> idmap_ldb:use rfc2307 = yes
> log level = 1
> ldap ssl = off
> ldap server require strong auth = no
> [netlogon]
> path = /var/lib/samba/sysvol/domain.com/scripts
> read only = No
>
> [sysvol]
> path = /var/lib/samba/sysvol
> read only = No
>
> ###########################################################
>
> Thanks.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
>
Andrew Bartlett
2020-Aug-27 21:21 UTC
[Samba] Slow Samba AD DC performance compared to Microsoft AD DC
Yeah, both indexed and not-indexed queries are so, so much better now. Like orders of magnitude better for an un-indexed search after we fixed some locking bugs, which showed our index scheme wasn't actually any good, so we fixed that also. I don't recall the exact numbers, but we went to the extent of writing a tool to measure Samba and windows performance and found we now within the same ball-park for certain combinations of load, db size and machine size. Andrew Bartlett On Thu, 2020-08-27 at 12:59 +0200, L.P.H. van Belle via samba wrote:> Lookup in the Windows setup where indexing is applied. > > And, upgrade you os +samba (as Rowland also said). > > Indexing on ad-object greatly improved in later samba versions. > > ldbsearch -H "$(samba -b|grep PRIVATE_DIR |awk '{ print $NF > }')/sam.ldb" -s base -b @INDEXLIST > Will show you the index one's in samba. > > > Greetz, > > Louis > > > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > > Sinan Ozturk via samba > > Verzonden: donderdag 27 augustus 2020 12:48 > > Aan: samba at lists.samba.org > > Onderwerp: [Samba] Slow Samba AD DC performance compared to > > Microsoft AD DC > > > > Hello everyone. > > > > I have a problem with performance of Samba AD DC. > > > > We have a Laravel application that queries both Microsoft AD > > DC and Samba AD DC. > > > > When a query comes to AD it takes 1 second to complete, > > however with Samba it can take up to 4-5 seconds. > > > > The queries are updating user, creating group and attaching > > people to groups. > > > > Samba Server has more than 6000 users. > > > > The VM has 2 CPU 2 GB Ram and Virtio network card running > > Ubuntu 14.04 with Samba 4.3.11. > > > > Is there any way I can speed up Samba server? > > > > Here is the smb.conf file > > > > ########################################################### > > # Global parameters > > [global] > > workgroup = domain > > realm = domain.COM > > netbios name = JUGGERNAUT > > server role = active directory domain controller > > dns forwarder = 172.31.238.11 > > idmap_ldb:use rfc2307 = yes > > log level = 1 > > ldap ssl = off > > ldap server require strong auth = no > > [netlogon] > > path = /var/lib/samba/sysvol/domain.com/scripts > > read only = No > > > > [sysvol] > > path = /var/lib/samba/sysvol > > read only = No > > > > ########################################################### > > > > Thanks. > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > > > > >-- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Developer, Catalyst IT https://catalyst.net.nz/services/samba
Sinan Ozturk
2020-Aug-28 08:16 UTC
[Samba] Slow Samba AD DC performance compared to Microsoft AD DC
Hello again, I decided to upgrade. However, my method of doing upgrade is transferring files of 14.04 Samba to new 18.04 Samba Server with version 4.7.6. The files under /etc/samba, /var/lib/samba and /etc/krb5.conf. I actually test the upgrade only replPropertyMetaData has error in database and db-check fixed it. I also checked the logs there was no problem. It looks like it is working. Is this a bad way to upgrade? What problems can occur? Thanks. ________________________________ From: samba <samba-bounces at lists.samba.org> on behalf of Andrew Bartlett via samba <samba at lists.samba.org> Sent: Friday, August 28, 2020 00:21 To: L.P.H. van Belle <belle at bazuin.nl>; samba at lists.samba.org <samba at lists.samba.org> Cc: Douglas Bagnall <douglas.bagnall at catalyst.net.nz> Subject: Re: [Samba] Slow Samba AD DC performance compared to Microsoft AD DC Yeah, both indexed and not-indexed queries are so, so much better now. Like orders of magnitude better for an un-indexed search after we fixed some locking bugs, which showed our index scheme wasn't actually any good, so we fixed that also. I don't recall the exact numbers, but we went to the extent of writing a tool to measure Samba and windows performance and found we now within the same ball-park for certain combinations of load, db size and machine size. Andrew Bartlett On Thu, 2020-08-27 at 12:59 +0200, L.P.H. van Belle via samba wrote:> Lookup in the Windows setup where indexing is applied. > > And, upgrade you os +samba (as Rowland also said). > > Indexing on ad-object greatly improved in later samba versions. > > ldbsearch -H "$(samba -b|grep PRIVATE_DIR |awk '{ print $NF > }')/sam.ldb" -s base -b @INDEXLIST > Will show you the index one's in samba. > > > Greetz, > > Louis > > > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > > Sinan Ozturk via samba > > Verzonden: donderdag 27 augustus 2020 12:48 > > Aan: samba at lists.samba.org > > Onderwerp: [Samba] Slow Samba AD DC performance compared to > > Microsoft AD DC > > > > Hello everyone. > > > > I have a problem with performance of Samba AD DC. > > > > We have a Laravel application that queries both Microsoft AD > > DC and Samba AD DC. > > > > When a query comes to AD it takes 1 second to complete, > > however with Samba it can take up to 4-5 seconds. > > > > The queries are updating user, creating group and attaching > > people to groups. > > > > Samba Server has more than 6000 users. > > > > The VM has 2 CPU 2 GB Ram and Virtio network card running > > Ubuntu 14.04 with Samba 4.3.11. > > > > Is there any way I can speed up Samba server? > > > > Here is the smb.conf file > > > > ########################################################### > > # Global parameters > > [global] > > workgroup = domain > > realm = domain.COM > > netbios name = JUGGERNAUT > > server role = active directory domain controller > > dns forwarder = 172.31.238.11 > > idmap_ldb:use rfc2307 = yes > > log level = 1 > > ldap ssl = off > > ldap server require strong auth = no > > [netlogon] > > path = /var/lib/samba/sysvol/domain.com/scripts > > read only = No > > > > [sysvol] > > path = /var/lib/samba/sysvol > > read only = No > > > > ########################################################### > > > > Thanks. > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > > > > >-- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Developer, Catalyst IT https://catalyst.net.nz/services/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Reasonably Related Threads
- Slow Samba AD DC performance compared to Microsoft AD DC
- Slow Samba AD DC performance compared to Microsoft AD DC
- Slow Samba AD DC performance compared to Microsoft AD DC
- Slow Samba AD DC performance compared to Microsoft AD DC
- Slow Samba AD DC performance compared to Microsoft AD DC