samba - Oct 2004 - Performance problems using "ls -al" together with winbind

Hi friends of SAMBA,

I'm using SAMBA 3.0.0 on a Linux and SAMBA 3.0.6 on a Solaris server (my 
problems are independent from the SAMBA version, I guess).



Following entries are existing in /etc/nsswitch.conf:
....
passwd:     files winbind
group:      files winbind
...



"getent group" produces following output:
...
domain1\group1:x:10000:<here is a list of 125.000 users>
domain1\group2:x:10001:<here is a list of 12.500 users>
...



When a user of group1 has created only one file in a samba share on /test:
 
"ls -al /test" needs 2 minutes and 10 seconds !!!!!!

root@server1:/test : ls -al /test
total 16
drwxrwxrwx    4 root     root         4096 Oct 19 14:19 .
drwxr-xr-x   29 root     root         4096 Oct 18 17:59 ..
drwxr-xr-x    2 domain1\user1 domain1\group1     4096 Oct 19 13:59 testdir

When a user of group2 has created only one file in a samba share on /test:

"ls -al /test" needs 1.3 seconds

root@server1:/test : ls -al /test
total 16
drwxrwxrwx    4 root     root         4096 Oct 19 14:19 .
drwxr-xr-x   29 root     root         4096 Oct 18 17:59 ..
drwxr-xr-x    2 domain1\user2 domain1\group2     4096 Oct 19 14:01 
testdir2





But following actions for both groups need only a few milliseconds:

root@server1:/test : wbinfo -G 10000
S-1-5-21-1482476501-1450960922-725345543-513
root@server1:/test : wbinfo -s S-1-5-21-1482476501-1450960922-725345543-513
domain1\group1

root@server1:/test : wbinfo -G  10001
S-1-5-21-1482476501-1450960922-725345543-149078
root@server1:/test : wbinfo -s
S-1-5-21-1482476501-1450960922-725345543-149078
domain1\group2


I expected also a millisecond-response for both "ls"-commands, because
I
thought, "winbindd" uses the same procedures like the
"wbinfo".
Why took it 100 times longer for 10 times more domain users in the domain 
group?



root@server1:/test : testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[printers]"
Processing section "[test]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

# Global parameters
[global]
        workgroup = domain1
        netbios name = server1
        server string = Samba Server
        security = DOMAIN
        password server = pdc1
        passdb backend = tdbsam
        log file = /var/log/samba/%m.log
        max log size = 50
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        dns proxy = No
        wins server = pdc1
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        template primary group = "Domain Users"
        template shell = /bin/bash

[homes]
        comment = Home Directories
        read only = No
        browseable = No

[printers]
        comment = All Printers
        path = /var/spool/samba
        printable = Yes
        browseable = No

[test]
        comment = test
        path = /test
        valid users = domain1\user1 domain1\user2
        read only = No



Thanks a lot!


-- 
GMX ProMail mit bestem Virenschutz http://www.gmx.net/de/go/mail
+++ Empfehlung der Redaktion +++ Internet Professionell 10/04 +++