samba - Oct 2001 - Please Help...Help...Samba 2.2.2 : Problem in Migrating from NT T o Linux File Server with quota and winbind

This seems to be an excessive amount of cross posting.  I'm trimming down
the CC list.

On Sun, 21 Oct 2001, ncc22, Gecis (CAP, GECIS) wrote:
> Problems (Bugs) Faced with Samba 2.2.2 with winbind
>
> 1. We have installed the samba 2.2.2 with winbind option in Red Hat
> Linux Kernal Version 2.4.2-2 on i686. We joined samba server to domain
> with smbpasswd option successfully. But We are not able to browse the
> share which we have shared from the NT workstations due to high CPU
> Utilization and Mem Utilization on the SAMBA MACHINE (CPU 866 MHz/ RAM
> 128 MB). Winbindd demon is eating the CPU and Memory more than 80 % ,
> when ever we are trying to browse the Samba Service. Please go through
> the logs which are attached in the zip format. Our observation
> regarding this problem is : We have a domain which is trusting to 5
> more domains. When ever we start smbd, nmbd and winbindd daemons the
> smbd daemon starts collecting information from all the domains which
> are in the trusted list of the DOMAIN , in which samba server is
> working as a member server. Can we stop users and group lookups for
> other domains except the domain which samba is member of. Please
> suggest and provide the step by step information to achive our goal.
> 2.
See "allow trusted domains", "winbind enum users", and
"winbind enum
groups" in smb.conf(5)

> Request you to please suggest us how to implemnet quota for Domain
> groups on the samba shares with samba 2.2.2. Request you to please
> send us the step by step information regarding the same.
See the quota support in the Linux kernel.  More information can be found
at http://www.ldp.org


> 3. We tried Security Tab in the NT Explorer but not able to apply
> scurity for users and groups. We don't know whether we will be able to
> apply the security and Auditing and Ownership from NT explorer to a
> samba share. Is this possible if yes, then please guide me how can we
> implement the same.
Acls - yes
Auditing - no
Take ownership - only available when connected as "root"

> 4. We tried quota with EXT2 File system but it reqires the local
> system accounts and groups for applying the quota. How can we
> implement quota with winbindd users and groups which are in NT Domain.
> Please suggest how to go about the same.
Dunno.
> As you have mentioned in the follwing mail that "The current version
> of winbindd shipped in 2.2.2 does have some memory leaks, which will
> be addressed for the next Samba release, so it is advisable to monitor
> the winbind process." Is this is the cause of my problem ? ?Pls
> confirm and reply.
The confirmed problem is memory leaks which require a restructing of the
code to fix.  We are working on this and hope to have it completed
and released soon.











cheers, jerry
 ---------------------------------------------------------------------
 www.samba.org              SAMBA Team              jerry_at_samba.org
 www.plainjoe.org                                jerry_at_plainjoe.org
 --"I never saved anything for the swim back." Ethan Hawk in Gattaca--

On Tue, 23 Oct 2001, Gerald (Jerry) Carter wrote:
> See the quota support in the Linux kernel.  More information can be found
> at http://www.ldp.org
Should be http://www.linuxdoc.org






jerry

Dear Samba Team,

We have tried your suggestion and still we are facing few problems as listed
below.

We tried :

winbind enum users = no
winbind enum groups = no

For preventing the CPU Utilization and Mem utilization by winbind daemon. But
after that we are not able to use "getent passwd and getent group".

Again we changed the option back to 

winbind enum users = yes 
winbind enum group = yes

But the command "getent passwd and getent group " is now only
returning local system users and groups, NOT  Domain users and Domain Groups.
But wbinfo -u, wbinfo -g is working
fine.

*	If we are using winbind than how can we connect as root for taking ownership
of any folder or file.

*	How can we assign permission from NT Explorer to a particular folder ? we went
through documents but still facing the problem.When we are applying the new
security it is
not taking effect.

*	Is there any method to use nt usrmgr.exe and srvmgr.exe to administer samba
server.

*	After running the winbindd daemon we are unable to login in to the server it
self by root account we tried DOMAIN+user also its taking a lot of time but not
logging in.

*	Is there any other way to use samba server as a member server in the NT Domain
without winbind , but we require unified login.
*	
*	Is the site name www.ldp.org is correct ? Because its not providing us the
details about quota support.

Please help us to resolve these issue. If you can provide us the contact phone
nos that will help us alott to explain the online scenario of the problem.


Your suggestions and guidelines will be our driving force.

Best Regards
Deep Pandey
Network Control Centre (GECIS 22 A & B)
Gurgaon, India
PH  		: 91-124-6345312 Extn.5920
Dial Comm 	: 742-5580
Cell		: 91-9811291231
Fax 		: 91-124-6345313
E-Mail:- gecis.ncc22@geind.ge.com




> ----------
> From: 	Gerald (Jerry) Carter[SMTP:jerry@samba.org]
> Sent: 	Tuesday, October 23, 2001 6:34 PM
> To: 	ncc22, Gecis (CAP, GECIS)
> Cc: 	'samba@samba.org'; Mamtani, Manish (CAP, GECIS); Chawla, Vinay
(CAP, GECIS)
> Subject: 	Re: Please Help...Help...Samba 2.2.2 : Problem in Migrating from
NT T o Linux File Server with quota and winbind
> 
> This seems to be an excessive amount of cross posting.  I'm trimming
down
> the CC list.
> 
> On Sun, 21 Oct 2001, ncc22, Gecis (CAP, GECIS) wrote:
> 
> > Problems (Bugs) Faced with Samba 2.2.2 with winbind
> >
> > 1. We have installed the samba 2.2.2 with winbind option in Red Hat
> > Linux Kernal Version 2.4.2-2 on i686. We joined samba server to domain
> > with smbpasswd option successfully. But We are not able to browse the
> > share which we have shared from the NT workstations due to high CPU
> > Utilization and Mem Utilization on the SAMBA MACHINE (CPU 866 MHz/ RAM
> > 128 MB). Winbindd demon is eating the CPU and Memory more than 80 % ,
> > when ever we are trying to browse the Samba Service. Please go through
> > the logs which are attached in the zip format. Our observation
> > regarding this problem is : We have a domain which is trusting to 5
> > more domains. When ever we start smbd, nmbd and winbindd daemons the
> > smbd daemon starts collecting information from all the domains which
> > are in the trusted list of the DOMAIN , in which samba server is
> > working as a member server. Can we stop users and group lookups for
> > other domains except the domain which samba is member of. Please
> > suggest and provide the step by step information to achive our goal.
> > 2.
> 
> See "allow trusted domains", "winbind enum users", and
"winbind enum
> groups" in smb.conf(5)
> 
> 
> > Request you to please suggest us how to implemnet quota for Domain
> > groups on the samba shares with samba 2.2.2. Request you to please
> > send us the step by step information regarding the same.
> 
> See the quota support in the Linux kernel.  More information can be found
> at http://www.ldp.org
> 
> 
> 
> > 3. We tried Security Tab in the NT Explorer but not able to apply
> > scurity for users and groups. We don't know whether we will be
able to
> > apply the security and Auditing and Ownership from NT explorer to a
> > samba share. Is this possible if yes, then please guide me how can we
> > implement the same.
> 
> Acls - yes
> Auditing - no
> Take ownership - only available when connected as "root"
> 
> 
> > 4. We tried quota with EXT2 File system but it reqires the local
> > system accounts and groups for applying the quota. How can we
> > implement quota with winbindd users and groups which are in NT Domain.
> > Please suggest how to go about the same.
> 
> Dunno.
> 
> > As you have mentioned in the follwing mail that "The current
version
> > of winbindd shipped in 2.2.2 does have some memory leaks, which will
> > be addressed for the next Samba release, so it is advisable to monitor
> > the winbind process." Is this is the cause of my problem ? ?Pls
> > confirm and reply.
> 
> The confirmed problem is memory leaks which require a restructing of the
> code to fix.  We are working on this and hope to have it completed
> and released soon.
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> cheers, jerry
>  ---------------------------------------------------------------------
>  www.samba.org              SAMBA Team              jerry_at_samba.org
>  www.plainjoe.org                                jerry_at_plainjoe.org
>  --"I never saved anything for the swim back." Ethan Hawk in
Gattaca--
>