We are currently running three Samba 3.0.x file servers which authenticate against a Samba PDC running LDAP. 2 out of the 3 samba servers authenticate quickly(<5 seconds) when using smbclient -L localhost -U username however the third will eventually time out saying "Server did not respond in 20000 milliseconds. NetBIOS over TCP disabled" when there is any sort of load on it ~30% cpu usage. If there is no load on the server then authentication still takes around 15 seconds using the smbclient command. When the server is under a load domain computers are unable to map drives when running their login script although once authenticated they can browse and map drives without issue. The only way to fix the problem is to reboot the server several times until all users get their drives mapped then everything is fine. The box in question is running Fedora core 2 with all patches applied using yum. If you need my configuration or any other information please let me know. Thanks, Chris
>We are currently running three Samba 3.0.x file servers which authenticate >against a Samba PDC running LDAP. 2 out of the 3 samba servers authenticate >quickly(<5 seconds) when using smbclient -L localhost -U username however >the third will eventually time out saying "Server did not respond in 20000 >milliseconds. NetBIOS over TCP disabled" when there is any sort of load on >it ~30% cpu usage. >How many clients do you have running against your server(s). Have you ever considered a BDC? What program is chewing up the most cpu when you're at 30%? How many distinct samba processes do you have going? Try dropping in with a console and seeing how well a command like getent passwd or getent group, or even an ls -alF responds. If it's slow then your LDAP link could be to blame. Make sure that you've got nscd running on your PDC. Maybe you need to split your LDAP master off the machine (assuming it's not). These are some guesses I've seen cause issues, but maybe with more load information as to what is chewing up your cpu it will be more clear. -- -- Paul Gienger Office: 701-281-1884 Applied Engineering Inc. Systems Architect Fax: 701-281-1322 URL: www.ae-solutions.com mailto: pgienger@ae-solutions.com
On Mon, Jan 17, 2005 at 04:22:09PM -0600, Chris Snider wrote:> We are currently running three Samba 3.0.x file servers which authenticateThe "x" in 3.0.x is interesting. There has been a serious optimization in 3.0.10, significant more work there is to come in 3.0.11 Volker
>The "x" in 3.0.x is interesting. There has been a serious optimization in >3.0.10, significant more work there is to come in 3.0.11>VolkerActually the PDC and BDC are both running Samba v3.0.10 while the troublesome server is running 3.0.9. Commenting out the "username level" setting seems to have fixed our issue. I'm going to let the 3.0.9 server run for awhile and see if the authentication problem comes up again. If everything runs smoothly then I'm a little reluctant to upgrade it since I'm a firm believer in "if it's not broke don't fix it". I'll also take a look at the release notes for 3.0.10 and 3.0.11 to see if anything specifically addresses the issue we were having. Thanks, Chris