Hiya,
I have recently upgrade samba to 3.0.1pre1 from alpha3-19. The upgrade went well
with no real problems, except .....
I have noticed today that the load on the LDAP server is extremely high. CPU
usage on slapd is anywhere between 10%-80%. At one point to day everything came
to a grinding halt. The only difference between I can think of is the samba
upgrade. This is with an average load of about 300 users.
Can anyone think why samba is causing slapd to max out??
Cheers
-------------
Kristyan Osborne - IT Technician / Community Manager
Longhill High School
01273 391672 / 304086
------
Computers are like airconditioners: They stop working properly if you open
windows.
Win95: A 32-bit patch for a 16-bit GUI shell running on top of an
8-bit operating system written for a 4-bit processor by a
2-bit company who cannot stand 1 bit of competition.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Kristyan Osborne wrote: | Hiya, | | I have recently upgrade samba to 3.0.1pre1 from alpha3-19. The | upgrade went well with no real problems, except ..... | | I have noticed today that the load on the LDAP server is | extremely high. CPU usage on slapd is anywhere between 10%-80%. | At one point to day everything came to a grinding halt. The | only difference between I can think of is the samba upgrade. | This is with an average load of about 300 users. Check you indexes on the OpenLDAP server. Look at the searches being made. Make sure you are indexing the rigth attributes. Also see the OpenLDAP FAQ (http://www.openldap.org/) for details on tuning bdb backends. Limit regex's in slapd.conf ACLs as well. cheers, jerry ~ ---------------------------------------------------------------------- ~ Hewlett-Packard ------------------------- http://www.hp.com ~ SAMBA Team ---------------------- http://www.samba.org ~ GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~ --John Cusack - "Grosse Point Blank" (1997) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/pokBIR7qMdg1EfYRAnmRAJ93GJTyE3/PBYRVIkedA3NltsyMkwCglP/n yiZ0S9fqpJ5U1bFFgbqof4Y=VOHL -----END PGP SIGNATURE-----
Hi Jerry
The index's I have are uid, uidNumber, gidNumber, cn, objectClass, default
eq
when I start slapd with debug level 2, I can see a lot of searches for users
and a hell of a lot of searches for groups. These happen virtually every second.
Cheers
-------------
Kristyan Osborne - IT Technician / Community Manager
Longhill High School
01273 391672 / 304086
------
Computers are like airconditioners: They stop working properly if you open
windows.
Win95: A 32-bit patch for a 16-bit GUI shell running on top of an
8-bit operating system written for a 4-bit processor by a
2-bit company who cannot stand 1 bit of competition.
-----Original Message-----
From: Gerald (Jerry) Carter [mailto:jerry@samba.org]
Sent: 03 November 2003 16:58
To: Kristyan Osborne
Cc: Samba (E-mail)
Subject: Re: [Samba] Samba-3.0.1pre1 and LDAP
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Kristyan Osborne wrote:
| Hiya,
|
| I have recently upgrade samba to 3.0.1pre1 from alpha3-19. The
| upgrade went well with no real problems, except .....
|
| I have noticed today that the load on the LDAP server is
| extremely high. CPU usage on slapd is anywhere between 10%-80%.
| At one point to day everything came to a grinding halt. The
| only difference between I can think of is the samba upgrade.
| This is with an average load of about 300 users.
Check you indexes on the OpenLDAP server.
Look at the searches being made. Make sure you
are indexing the rigth attributes.
Also see the OpenLDAP FAQ (http://www.openldap.org/)
for details on tuning bdb backends. Limit regex's
in slapd.conf ACLs as well.
cheers, jerry
~ ----------------------------------------------------------------------
~ Hewlett-Packard ------------------------- http://www.hp.com
~ SAMBA Team ---------------------- http://www.samba.org
~ GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop
there."
~ --John Cusack - "Grosse Point Blank"
(1997)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/pokBIR7qMdg1EfYRAnmRAJ93GJTyE3/PBYRVIkedA3NltsyMkwCglP/n
yiZ0S9fqpJ5U1bFFgbqof4Y=VOHL
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Kristyan Osborne wrote: | The index's I have are uid, uidNumber, gidNumber, | cn, objectClass, default eq I would add include sambaSID eq and rerun slapindex. | when I start slapd with debug level 2, I can see a lot | of searches for users and a hell of a lot of searches | for groups. These happen virtually every second. posixGroup? or sambaGroupMapping? cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/po3SIR7qMdg1EfYRAuHxAJwLgytxOeIm8zqdj+Aun6D5bba9lACcCZjv MJ/wbsMFrY+NOOPzRgSwdwQ=8Wc7 -----END PGP SIGNATURE-----
Hi, from my experience, there are few possible reaseons, but none relates to samba. 1.: Check (loglevel 256 in slapd.conf) the search filters. Try to manually "ldapsearch" those to make really sure you have all necessary attributes indexed. If you think you have indexed them, but search is slow, try rebuilding the indices (slapindex). Don't make the same mistake i did and use the correct version of slapindex if you compiled your own. 2.: The use of "valid users = @foo, @bah ..." in smb.conf is nearly always not clever. 3.: you might want to try nscd to cache groups and user. 4.: Old OpenLDAP versions are IMHO slow (2.0.x), try 2.1 Have fun, Malte Mueller> Hiya, > > I have recently upgrade samba to 3.0.1pre1 from alpha3-19. The upgrade > went well with no real problems, except ..... > > I have noticed today that the load on the LDAP server is extremely high. > CPU usage on slapd is anywhere between 10%-80%. At one point to day > everything came to a grinding halt. The only difference between I can > think of is the samba upgrade. This is with an average load of about 300 > users. > > Can anyone think why samba is causing slapd to max out?? > > Cheers > > ------------- > Kristyan Osborne - IT Technician / Community Manager > Longhill High School > 01273 391672 / 304086