Hi Guys!
Samba suspiciously slow
i have:
CentOS 5.2 final
Samba 3.0.28-0.e15.8
LDAP server placed on anoter (not Samba) Server
In ldap container "ou=Users" about 5000 entries
When Windows client's connect to samba - Authentification process S.L.O.W.
(about 20-30 seconds).
When number entries less - performance grow (when 10 users -
authentification process go 1-2 seconds)
How i can tune up performance?
=========smb.conf
[global]
log file = /var/log/samba/samba.log.%m
log level = 3
domain logons = no
domain master = no
local master = no
preferred master = no
wins support = no
dns proxy = no
os level = 0
# server setup ---
netbios name = testsrv
workgroup = TEST
security = user
passdb backend = ldapsam:ldap://x.x.x.x
ldap admin dn = cn=Directory Manager
ldap group suffix = ou=NTGroups
ldap idmap suffix = ou=Idmap
ldap suffix = dc=test
ldap user suffix = ou=Users
# print setup ---
load printers = yes
printing = cups
printcap = cups
use client driver = yes
[printers]
comment = All Printers
path = /var/spool/samba
readonly = no
browseable = no
guest ok = yes
writable = no
printable = yes
[print$]
comment = Printer Driver Download Area
path = /etc/samba/drivers
browseable = yes
guest ok = yes
read only = yes
===============/etc/ldap.conf
uri ldap://x.x.x.x
base dc=test
binddn cn=Directory Manager
bindpw xxxx
#pam_password exop
#pam_filter objectclass=sambaSamAccount
nss_base_passwd ou=Users,dc=test
nss_base_shadow ou=Users,dc=test
nss_base_group ou=NTGroups,dc=test
ssl no
Grey Karapetyan wrote:> Hi Guys! > Samba suspiciously slow > > i have: > CentOS 5.2 final > Samba 3.0.28-0.e15.8 > > > LDAP server placed on anoter (not Samba) Server > In ldap container "ou=Users" about 5000 entries > > When Windows client's connect to samba - Authentification process S.L.O.W. > (about 20-30 seconds). > When number entries less - performance grow (when 10 users - > authentification process go 1-2 seconds) > > How i can tune up performance? > > =========> smb.conf > > > [global] > log file = /var/log/samba/samba.log.%m > log level = 3 > domain logons = no > domain master = no > local master = no > preferred master = no > wins support = no > dns proxy = no > os level = 0 > # server setup --- > netbios name = testsrv > workgroup = TEST > security = user > passdb backend = ldapsam:ldap://x.x.x.x > ldap admin dn = cn=Directory Manager > ldap group suffix = ou=NTGroups > ldap idmap suffix = ou=Idmap > ldap suffix = dc=test > ldap user suffix = ou=Users > # print setup --- > load printers = yes > printing = cups > printcap = cups > use client driver = yes > [printers] > comment = All Printers > path = /var/spool/samba > readonly = no > browseable = no > guest ok = yes > writable = no > printable = yes > [print$] > comment = Printer Driver Download Area > path = /etc/samba/drivers > browseable = yes > guest ok = yes > read only = yes > > ===============> /etc/ldap.conf > > uri ldap://x.x.x.x > base dc=test > > binddn cn=Directory Manager > bindpw xxxx > > > #pam_password exop > #pam_filter objectclass=sambaSamAccount > > nss_base_passwd ou=Users,dc=test > nss_base_shadow ou=Users,dc=test > nss_base_group ou=NTGroups,dc=test > ssl no >I would bet this is not a samba issue but an LDAP issue, specifically in the indexing of your database Greetings, David Wells.
what indexes do you have in slapd.conf? what hardware is the server running on?
would you copy your slapd.conf to us? the index section only would be just OK. also. would you mind runing slapindex on the server (turn off OpenLDAP first)?, then try if it affected your pdc performance Victor Medina Bob Hope - "You know you are getting old when the candles cost more than the cake." On Thu, Apr 2, 2009 at 12:50 PM, Adam Williams <awilliam@mdah.state.ms.us> wrote:> what indexes do you have in slapd.conf? ?what hardware is the server running > on? > -- > To unsubscribe from this list go to the following URL and read the > instructions: ?https://lists.samba.org/mailman/options/samba >
<awilliam@mdah.state.ms.us> wrote:>what indexes do you have in slapd.conf? what hardware is the server >running on?More important than anything else is your Berkley environment. Do you have a reasonable DB-CONFIG file or are you asserting reasonable DB values via cn=config? But these are all OpenLDAP questions and not specific to Samba. Test your DSA to see if it is fast enough, then move back to testing Samba.
Thanks for answers! but i use a Fedora Directory Server. i try answer on your questions: << what indexes do you have in slapd.conf? what hardware is the server running on? Core2Quad/8gb ddr2 <<would you copy your slapd.conf to us? the index section only would be just OK. also. would you mind runing slapindex on the server (turn off OpenLDAP first)?, then try if it affected your pdc performance Sorry but i use FDS here is no config. All parametrs places in db. Any concrete parametrs i should show you? <<More important than anything else is your Berkley environment. Do you have a reasonable DB-CONFIG file or are you asserting reasonable DB values via cn=config? But these are all OpenLDAP questions and not specific to Samba. Test your DSA to see if it is fast enough, then move back to testing Samba. This OpenLpad-specific parametrs? If i use getent passwd | grep -i username - works realy fast (1-2 seconds). (From my Samba server) ========News: Now shares shows and opens fast. But printers from windows clients (when getting status printer) as before SLOW. Then i create local user on Samba server and disable ldap backend - printers works fast too. ========in man smb.conf find 2 params ldapsam:trusted=yes ldapsam:editposix=yes somebodey use this?