samba - Jan 2023 - Slow login after samba upgrade

Thanks.  Yeah, I had even put auth_audit and auth logs to 5.  Nothing stood
out to me, it all looked successful from the time the pw was entered.  Then
while hanging, there were no logs at all.
However if you look at the new post, all is good with 4.16.

On Sun, Jan 1, 2023 at 8:46 PM Michael Tokarev <mjt at tls.msk.ru> wrote:
> 01.01.2023 16:01, Max Serafini via samba wrpte:
> ..
>
> How about looking at the samba logs?  There should be something in
> there with the issues you observe. Maybe at log level 1 or 2, but
> I guess the default should already reveal something.
>
> It looks like there's a single problem which you're hitting from
> different angles.
>
> (you can remove (or move) all /var/log/samba/log.* stuff and restart
> samba to see fresh logs only).
>
> Thanks,  and Happy New Year!
>
> /mjt
>
> > Ramifications.
> > 1. Login is now extremely slow particularly on a terminal server
running
> > Windows 2012 R2.  Before the upgrade login was instant.  Now it takes
2+
> > minutes.
> >
> > 2. On the 2012 server we installed AD management tools.  Using AD
Users
> and
> > Computers, change domain controller function, the window is not
> responding
> > for about 2+ minutes, then the error:
> > 'The list of Domain Controllers for domain ... is unavailable
because:
> The
> > RPC server is unavailable.'
> > Attempting the switch straight after the list populates the DC
sometimes
> > changes quickly and some other times it shows:
> > 'Unable to connect to the Domain Controller because: The remote
procedure
> > call failed and did not execute.'
> > Eventually it works.
> >
> > 3. netlogon sysvol share browsing.  In file explorer entering either
> > server's path, \\dc2 or \\dc3 it sits for 2+ minutes and then it
says:
> > '\\dc3 is not accessible.  You might not have permission to use
this
> > network resource.  Contact the administrator of this server to find
out
> if
> > you have access permissions.  The remote procedure call failed.'
> > Re-entering the path, \\dc3 and the shares load just fine.
> >
> > If you could please advise.  Thank you.
>
>

01.01.2023 22:53, Max Serafini via samba wrote:
> Thanks.  Yeah, I had even put auth_audit and auth logs to 5.  Nothing stood
> out to me, it all looked successful from the time the pw was entered.  Then
> while hanging, there were no logs at all.
I wonder if there's a way to enable rpc call logging/debugging.
Audit is for file operations (like open/read/close), not for rpc.
> However if you look at the new post, all is good with 4.16.
Yeah, I've seen it, - obviously it's interesting to know what's
wrong with 4.17,
since this is the default now and all new stuff is happening there.

/mjt

On 01/01/2023 19:53, Max Serafini via samba wrote:
> Thanks.  Yeah, I had even put auth_audit and auth logs to 5.  Nothing stood
> out to me, it all looked successful from the time the pw was entered.  Then
> while hanging, there were no logs at all.
> However if you look at the new post, all is good with 4.16.
The problem is that there doesn't seem to be any changes in 4.17.x that 
should be causing this.

Perhaps there is something in your network/dns or your smb.conf that is 
causing this. Can you post your smb.conf , /etc/hosts , etc/resolv.conf 
and  your bind9 files (if using bind9).

Rowland