samba - May 2021 - slowness in samba4 AD

Hello:
I have installed a Samba4 AD in version 4.13.07, I have a main 
controller and two replicas. In general the performance is very 
good(authentication for example), but I started to detect that sometimes 
some administration operations(Rsat or Group Policy Management) become 
very slow. For example opening a gpo from the Group Policy Management 
interface takes more than a minute. I have been following the samba 
logs, but I can't find any error. Could you guide me on what to look at 
or configure to solve this?
As information every night I run a dbcheck in two ways (I am not sure if 
one includes the other, just in case I leave both), "samba-tool dbcheck 
--reindex --yes --fix" and "samba-tool dbcheck --yes --cross-ncs
--fix".
Regards

Marcos Ariel Negrini
AFIP - Divisi?n Seguridad de Activos
Direcci?n de Seguridad de la Informaci?n
Paseo Colon 635 PB - CP 1063 - CABA

On 19/05/2021 16:11, Marcos Ariel Negrini via samba
wrote:
> Hello:
> I have installed a Samba4 AD in version 4.13.07,

Yes but on which OS ?

and what is inyour smb.conf ?
> I have a main controller and two replicas.

No, you have three DC's and one of them holds all the FSMO roles.
> In general the performance is very good(authentication for example), 
> but I started to detect that sometimes some administration 
> operations(Rsat or Group Policy Management) become very slow. For 
> example opening a gpo from the Group Policy Management interface takes 
> more than a minute. I have been following the samba logs, but I can't 
> find any error. Could you guide me on what to look at or configure to 
> solve this?
> As information every night I run a dbcheck in two ways (I am not sure 
> if one includes the other, just in case I leave both), "samba-tool 
> dbcheck --reindex --yes --fix" and "samba-tool dbcheck --yes 
> --cross-ncs --fix".

This sounds like a possible dns problem, are you using the internal dns 
server or Bind9 ?

if bind9, please post your named.conf files.

Rowland