samba - Jul 2021 - howto optimize samba/kerberos for 20k requests per minute - help needed

On Mon, 2021-07-19 at 11:13 +0200, Stefan Bauer via samba
wrote:
> Hi and thank you for your time.
> 
> We got now the confirmation that samba 4 is not supported by our 
> software-vendor.
If I might ask, who is your software vendor and what is the software ?
In most cases, when a supplier says they do not support Samba 4, they
do support AD. 
> 
> Hence we will move for now to a plain ldap server.
Shouldn't really matter, as long as you can get the schema, Samba can
act as an ldap server.

Rowland

Hi,

it is kopano. They state on their website?:

-----------------

Note

Please note that due to performance problems in Samba 4, Samba 4 is not 
supported as a user source for setups larger than 50 users.

-----------------

And that is indeed what i notice. The high amount of kerberos-requests 
between samba-DC and kopano server is causing a very high io-load on the 
samba system - renders the system unstable. Also the time an 
authentication request takes, is between 200-400ms.

As Kopano is doing an authentication every time a user clicks a single 
mail and no caching is possible, it is hitting the samba system too hard.


Stefan


? 
https://documentation.kopano.io/kopanocore_administrator_manual/user_management.html


On 19.07.21 11:27, Rowland Penny via samba wrote:
> On Mon, 2021-07-19 at 11:13 +0200, Stefan Bauer via samba wrote:
>> Hi and thank you for your time.
>>
>> We got now the confirmation that samba 4 is not supported by our
>> software-vendor.
> If I might ask, who is your software vendor and what is the software ?
> In most cases, when a supplier says they do not support Samba 4, they
> do support AD.

Exacly what i mean. ... Kopano, i was already thinking is kopano.. 
But there is one big difference i think. With your setup and mine

I think you run Kopano from within UCS 4.3 
( and i tested also USC 5.0, no kopano there, the move to licenced kopano. ) 
I run Kopano on clean Debian 10 install.

And what version kopano/web app is running because
i dont see that here. IO looks normal. 

Greetz, 

Louis
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Stefan Bauer via samba
> Verzonden: dinsdag 20 juli 2021 7:57
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] howto optimize samba/kerberos for 20k 
> requests per minute - help needed
> 
> Hi,
> 
> it is kopano. They state on their website?:
> 
> -----------------
> 
> Note
> 
> Please note that due to performance problems in Samba 4, 
> Samba 4 is not 
> supported as a user source for setups larger than 50 users.
> 
> -----------------
> 
> And that is indeed what i notice. The high amount of 
> kerberos-requests 
> between samba-DC and kopano server is causing a very high 
> io-load on the 
> samba system - renders the system unstable. Also the time an 
> authentication request takes, is between 200-400ms.
> 
> As Kopano is doing an authentication every time a user clicks 
> a single 
> mail and no caching is possible, it is hitting the samba 
> system too hard.
> 
> 
> Stefan
> 
> 
> ? 
> https://documentation.kopano.io/kopanocore_administrator_manua
> l/user_management.html
> 
> 
> On 19.07.21 11:27, Rowland Penny via samba wrote:
> > On Mon, 2021-07-19 at 11:13 +0200, Stefan Bauer via samba wrote:
> >> Hi and thank you for your time.
> >>
> >> We got now the confirmation that samba 4 is not supported by our
> >> software-vendor.
> > If I might ask, who is your software vendor and what is the 
> software ?
> > In most cases, when a supplier says they do not support 
> Samba 4, they
> > do support AD.
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>