samba - Sep 2005 - Roaming profile : taking forever to login /log off

Hello everybody,

We are using SMB as PDC and roaming profile.
but login /log off are taking 15 min (200 MB) on our GB network.
when I use tcpdump to monitor SMB on the client and the server , I can
see that  the copy  hang during several minutes.
our stations :
win xp sp2 (webclient disabled)

our smb serveur : samba-3.0.9

here is my smb.conf :
# Global parameters
[global]
        workgroup = DOMAIN
        server string = DOMAIN PDC Server
        interfaces = IP
        passdb backend = ldapsam:ldap://ldap-master.lan.lexum.pri/
        passwd program = /usr/local/sbin/krb5_update_pwd.pl -u %u
        passwd chat = *Password:* %n\n *Again:* %n\n *Changed*
        username map = /etc/samba/smbusers
        unix password sync = Yes
        log level = 10
        log file = /var/log/samba/%m.log
        max log size = 50
        name resolve order = wins lmhosts bcast host dns
        time server = Yes
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        printcap name = /etc/printcap
        add user script = /usr/local/sbin/smbldap-useradd -m "%u"
        delete user script = /usr/local/sbin/smbldap-userdel "%u"
        add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
        add user to group script = /usr/local/sbin/smbldap-groupmod -m
"%u" "%g"
        delete user from group script = /usr/local/sbin/smbldap-groupmod
-x "%u"
        set primary group script = /usr/local/sbin/smbldap-usermod -g
"%g" "%u"
        add machine script = /usr/local/sbin/smbldap-useradd -t 5 -w
"%u"
        logon path = \\%L\%U\windows
        logon drive = Z:
        logon home = \\%L\%U
        domain logons = Yes
        os level = 33
        preferred master = Yes
        domain master = Yes
        dns proxy = No
        wins support = Yes
        ldap admin dn = cn=samba,ou=LdapSystem,dc=lan,dc=lexum,dc=pri
        ldap group suffix = ou=Group
        ldap idmap suffix = ou=Idmap
        ldap machine suffix = ou=Computers
        ldap suffix = dc=lan,dc=lexum,dc=pri
        ldap ssl = no
        ldap user suffix = ou=Users
        hosts allow = 192.168.4., 127.0.0.1
        cups options = raw
        mangled names = No
[homes]
        comment = Home Directories
        read only = No
        browseable = No
        csc policy = disable

[netlogon]
        comment = Network Logon Service
        path = /etc/samba/netlogon
        guest ok = Yes
        share modes = No

Hi,
i had a lot of similar problems inthe past now solved,
 just 
i didn't understand if the roaming profile of your client are actually about
200mb or not.
In one case is possible to manage not to copy all the profile at every
logon/off, instead if the trouble is not
concerning the bigness of roaming profiles i need to know something more about
your lan ( how many clients,
how many people, etc..)
L.Cerini

do not use the home directory as profile dir...
you need "profile acls = yes" there.
similar like this:

logon path = \\%N\profiles\%u
[profiles]
    csc policy = disable
    browsable = no
    profile acls = yes
    path = /var/smbdata/profiles
    writable = yes
    create mask = 0600
    directory mask = 0700

if u use the homedir as profiledir, u must not use "profile
acls=yes"...
therefore u have problems with logon. this - maybe - will slow down your 
logon process. details u can find, if u turn log level to a higher value.

--
greetings,
kurt, austria. (http://www.kwnet.at)
=======================================================================this is a
posting from a samba *user* - not a samba developer.
the posting is created on the base of experiences an may be faulty.
so, please, if there's any mistake in it, please feel free to correct it
=======================================================================
FM schrieb:
> Hello everybody,
> 
> We are using SMB as PDC and roaming profile.
> but login /log off are taking 15 min (200 MB) on our GB network.
> when I use tcpdump to monitor SMB on the client and the server , I can
> see that  the copy  hang during several minutes.
> our stations :
> win xp sp2 (webclient disabled)
> 
> our smb serveur : samba-3.0.9
> 
> here is my smb.conf :
> # Global parameters
> [global]
>        workgroup = DOMAIN
>        server string = DOMAIN PDC Server
>        interfaces = IP
>        passdb backend = ldapsam:ldap://ldap-master.lan.lexum.pri/
>        passwd program = /usr/local/sbin/krb5_update_pwd.pl -u %u
>        passwd chat = *Password:* %n\n *Again:* %n\n *Changed*
>        username map = /etc/samba/smbusers
>        unix password sync = Yes
>        log level = 10
>        log file = /var/log/samba/%m.log
>        max log size = 50
>        name resolve order = wins lmhosts bcast host dns
>        time server = Yes
>        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>        printcap name = /etc/printcap
>        add user script = /usr/local/sbin/smbldap-useradd -m "%u"
>        delete user script = /usr/local/sbin/smbldap-userdel "%u"
>        add group script = /usr/local/sbin/smbldap-groupadd -p
"%g"
>        add user to group script = /usr/local/sbin/smbldap-groupmod -m
> "%u" "%g"
>        delete user from group script = /usr/local/sbin/smbldap-groupmod
> -x "%u"
>        set primary group script = /usr/local/sbin/smbldap-usermod -g
> "%g" "%u"
>        add machine script = /usr/local/sbin/smbldap-useradd -t 5 -w
"%u"
>        logon path = \\%L\%U\windows
>        logon drive = Z:
>        logon home = \\%L\%U
>        domain logons = Yes
>        os level = 33
>        preferred master = Yes
>        domain master = Yes
>        dns proxy = No
>        wins support = Yes
>        ldap admin dn = cn=samba,ou=LdapSystem,dc=lan,dc=lexum,dc=pri
>        ldap group suffix = ou=Group
>        ldap idmap suffix = ou=Idmap
>        ldap machine suffix = ou=Computers
>        ldap suffix = dc=lan,dc=lexum,dc=pri
>        ldap ssl = no
>        ldap user suffix = ou=Users
>        hosts allow = 192.168.4., 127.0.0.1
>        cups options = raw
>        mangled names = No
> [homes]
>        comment = Home Directories
>        read only = No
>        browseable = No
>        csc policy = disable
> 
> [netlogon]
>        comment = Network Logon Service
>        path = /etc/samba/netlogon
>        guest ok = Yes
>        share modes = No
>