samba - Oct 2004 - Samba 3.0.7 & OpenLDAP performance problem

hi,
sorry if this topic already exists, but i haven't found a solution yet.

I am using a Samba PDC with OpenLDAP.
After updating my Samba 2.2.7 to version 3.0.7, I encountered the following
problem : All my Windows-clients are able to logon to the Domain but it takes
several minutes until the Client finally is logged on. If I try to open a
directory that is stored on the server, it takes several minutes, too.

The profiles I am using are not stored on the server except their
home-directories.

I testet the Samba update several times on a VMware machine with virtual server
and clients and it worked perfectly every try.

thanks for help,
greetings,
c.triebstein

This may be an index problem.

See
http://us4.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html#id2533661


[]'s


---
christian triebstein wrote:
> 
> hi,
> sorry if this topic already exists, but i haven't found a solution yet.
> 
> I am using a Samba PDC with OpenLDAP.
> After updating my Samba 2.2.7 to version 3.0.7, I encountered the following
problem :
All my Windows-clients are able to logon to the Domain but it takes several
minutes until
> the Client finally is logged on. If I try to open a directory that is
stored on the
server, it takes several minutes, too.
> 
> The profiles I am using are not stored on the server except their
home-directories.
> 
> I testet the Samba update several times on a VMware machine with virtual
server and
clients and it worked perfectly every try.
> 
> thanks for help,
> greetings,
> c.triebstein
> 

Bruno Stella
brunostella@trt15.gov.br
Setor de Redes - (19) 3031-4165
Secretaria de Informatica
Tribunal Regional do Trabalho da 15a. Regiao

On Tue, 2004-10-19 at 18:50, christian triebstein wrote:
> hi,
> sorry if this topic already exists, but i haven't found a solution yet.
> 
> I am using a Samba PDC with OpenLDAP.
> After updating my Samba 2.2.7 to version 3.0.7, I encountered the following
problem : All my Windows-clients are able to logon to the Domain but it takes
several minutes until the Client finally is logged on. If I try to open a
directory that is stored on the server, it takes several minutes, too.
You could try current SVN, I fixed one of the performance killers.

There is more work to do however.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@samba.org
Authentication Developer, Samba Team            http://samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20041020/5a9bf61b/attachment.bin

> hi,
> sorry if this topic already exists, but i haven't found a solution yet.
>
> I am using a Samba PDC with OpenLDAP.
> After updating my Samba 2.2.7 to version 3.0.7, I encountered the
> following problem : All my Windows-clients are able to logon to the Domain
> but it takes several minutes until the Client finally is logged on. If I
> try to open a directory that is stored on the server, it takes several
> minutes, too.
>
> The profiles I am using are not stored on the server except their
> home-directories.
>
> I testet the Samba update several times on a VMware machine with virtual
> server and clients and it worked perfectly every try.
>
> thanks for help,
> greetings,
> c.triebstein
Hi!

I got same kind of effect after upgrading 3.0.5 -> 3.0.7.
OpenLDAP + perbuilt Samba on SuSE 8.2
(downgraded back to 3.0.5 and everything is ok again)

ht

> > I am using a Samba PDC with OpenLDAP.
> > After updating my Samba 2.2.7 to version 3.0.7, I encountered the
> > following problem : All my Windows-clients are able to logon to the
Domain
> > but it takes several minutes until the Client finally is logged on. If
I
> > try to open a directory that is stored on the server, it takes several
> > minutes, too.
> > The profiles I am using are not stored on the server except their
> > home-directories.
> > I testet the Samba update several times on a VMware machine with
virtual
> > server and clients and it worked perfectly every try.
> I got same kind of effect after upgrading 3.0.5 -> 3.0.7.
> OpenLDAP + perbuilt Samba on SuSE 8.2
> (downgraded back to 3.0.5 and everything is ok again)
Just as a balancing point-of-view; we have 3.0.7 + OL 2.2.17 and performance is
very good (~200 XP/2000 clients).  Are you sure things like name resolution are
working properly?

>> > I am using a Samba PDC with OpenLDAP.
>> > After updating my Samba 2.2.7 to version 3.0.7, I encountered the
>> > following problem : All my Windows-clients are able to logon to
the
>>Domain
>> > but it takes several minutes until the Client finally is logged
on. If
>>I
>> > try to open a directory that is stored on the server, it takes
several
>> > minutes, too.
>> > The profiles I am using are not stored on the server except their
>> > home-directories.
>> > I testet the Samba update several times on a VMware machine with
>>virtual
>> > server and clients and it worked perfectly every try.
>> I got same kind of effect after upgrading 3.0.5 -> 3.0.7.
>> OpenLDAP + perbuilt Samba on SuSE 8.2
>> (downgraded back to 3.0.5 and everything is ok again)
>
> Just as a balancing point-of-view; we have 3.0.7 + OL 2.2.17 and
> performance is
> very good (~200 XP/2000 clients).  Are you sure things like name
> resolution are
> working properly?
>
>
In our case it seems to be "use sendfile" problem (suse 8.2 has 2.4.20
kernel)

regards
Hannu

After weeks of fighting against Samba 3.0.7 from the source with
acl-support, to make it ACL aware, I had found that always get an error
message

"Too many ACE entries for file XYZ to convert to convert to posix
perms"

I compiled 3.0.2a and it worked perfect. tryed again with 3.0.7 and again
the same problem.

Maybe a bug or a change in 3.0.7 that make it ??

Let me know if I am doing something wrong or is just a bug. Thanks!

Config is Suse 9.1, ext3, kernel 2.6.4-52.

Further Details (below is the conf file and log.)

*There are not so "many" entries in the NTFS ACL, just 4 and for
testing
pourpuse
*When I compiled any version, I do copy libnss_winbindd.so, libsmbclient.so
to update the old ones.
*Without change the smb.conf and just updating the new binaries, and libs,
the problem arise.

Log file and Smb.conf:
[global]
   workgroup = ECSA
   printing = cups
   printcap name = cups
   printcap cache time = 750
   cups options = raw
   printer admin = @ntadmin, root, administrator
   username map = /etc/samba/smbusers
 #  map to guest = Bad User
   logon path = \\%L\profiles\.msprofile
   log level= 5
   logon home = \\%L\%U\.9xprofile
   logon drive = P:
   security = domain
   encrypt passwords = yes
   idmap uid = 10000-20000
   idmap gid = 10000-20000
   winbind separator = +
   winbind enum users = yes
   winbind enum groups = yes
   server string = LINUX
   netbios name = LINUX
#   add machine script    domain master = false
   domain logons = no
   local master = no
   preferred master = auto
   load printers = no
#   ldap suffix = dc=ecsa,dc=com
   nt acl support = yes
   passdb backend = smbpasswd

LOG FILE

 unpack_nt_owners: owner_sids validated.
[2004/10/21 08:44:32, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(152)
  fetch sid from uid cache 0 ->
S-1-5-21-1146106813-3606123095-1893693755-1000
[2004/10/21 08:44:32, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(226)
  fetch sid from gid cache 0 ->
S-1-5-21-1146106813-3606123095-1893693755-1001
[2004/10/21 08:44:32, 3] passdb/lookup_sid.c:fetch_uid_from_cache(173)
  fetch uid from cache 0 -> S-1-5-21-1146106813-3606123095-1893693755-1000
[2004/10/21 08:44:32, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2004/10/21 08:44:32, 3] smbd/uid.c:push_conn_ctx(365)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2004/10/21 08:44:32, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/10/21 08:44:32, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2004/10/21 08:44:32, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2004/10/21 08:44:32, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
  getsmbfilepwent: returning passwd entry for user root, uid 0
[2004/10/21 08:44:32, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
  getsmbfilepwent: returning passwd entry for user nobody, uid 65534
[2004/10/21 08:44:32, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(517)
  getsmbfilepwent: end of file reached.
[2004/10/21 08:44:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/10/21 08:44:32, 3] passdb/lookup_sid.c:fetch_gid_from_cache(247)
  fetch uid from cache 0 -> S-1-5-21-1146106813-3606123095-1893693755-1001
[2004/10/21 08:44:32, 3] passdb/lookup_sid.c:fetch_uid_from_cache(173)
  fetch uid from cache 10003 -> S-1-5-21-538738344-134243190-1478062314-1001
[2004/10/21 08:44:32, 3] smbd/dosmode.c:unix_mode(111)
  unix_mode(admx.msi) returning 0744
[2004/10/21 08:44:32, 3]
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2506)
  convert_canon_ace_to_posix_perms: Too many ACE entries for file admx.msi
to convert to posix perms.
[2004/10/21 08:44:32, 3] smbd/posix_acls.c:set_nt_acl(3147)
  set_nt_acl: failed to convert file acl to posix permissions for file
admx.msi.
[2004/10/21 08:44:32, 3] smbd/error.c:error_packet(105)
  error string = Function not implemented
[2004/10/21 08:44:32, 3] smbd/error.c:error_packet(129)
  error packet at smbd/nttrans.c(2020) cmd=160 (SMBnttrans)
NT_STATUS_ACCESS_DENIED
[2004/10/21 08:44:32, 5] lib/util.c:show_msg(439)
[2004/10/21 08:44:32, 5] lib/util.c:show_msg(449)
  size=35
  smb_com=0xa0
  smb_rcls=34
  smb_reh=0
  smb_err=49152
  smb_flg=136
  smb_flg2=51265
  smb_tid=2
  smb_pid=2624
  smb_uid=101
  smb_mid=16834
  smt_wct=0
  smb_bcc=0
[2004/10/21 08:44:32, 3] smbd/process.c:process_smb(1092)
  Transaction 3998 of length 45
[2004/10/21 08:44:32, 5] lib/util.c:show_msg(439)
[2004/10/21 08:44:32, 5] lib/util.c:show_msg(449)
  size=41
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=65279
  smb_uid=101
  smb_mid=16898
  smt_wct=3
  smb_vwv[ 0]= 7501 (0x1D4D)
  smb_vwv[ 1]=65535 (0xFFFF)
  smb_vwv[ 2]=65535 (0xFFFF)
  smb_bcc=0
[2004/10/21 08:44:32, 3] smbd/process.c:switch_message(887)
  switch message SMBclose (pid 25086) conn 0x8356938
[2004/10/21 08:44:32, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2004/10/21 08:44:32, 3] smbd/reply.c:reply_close(2778)
  close fd=-1 fnum=7501 (numopen=1)
[2004/10/21 08:44:32, 2] smbd/close.c:close_normal_file(262)
  root closed file admx.msi (numopen=0)
[2004/10/21 08:44:32, 5] smbd/files.c:file_free(385)
  freed files structure 7501 (0 used)
[2004/10/21 08:44:32, 5] lib/util.c:show_msg(439)
[2004/10/21 08:44:32, 5] lib/util.c:show_msg(449)