Hi guys, I'm running a NT Domain hosted on two Debian GNU/Linux Sarge servers running Samba (respectively as PDC and as member server), with lots of horsepower (dual-cpu with 1GB RAM or more each). Samba itself is behaving blazingly fast, from both servers. I use winbind on the member server, of course. Still, on this machine I see each week a huge performance drop related authentication, to the point where it has to be rebooted to allow authentication before clients time out. Any ideas of where to start looking for? I can provide all the configuration, and all the information needed to track down this problem. I already tweaked the configuration a lot to improve performance, but this issue exceeds my capacity now. Can you help me? -- J?r?me Warnier FLOSS Consultant http://beeznest.net
Nobody has any idea about this? Any idea would probably help. Thanks Le vendredi 31 mars 2006 ? 14:27 +0200, Jerome Warnier a ?crit :> Hi guys, > > I'm running a NT Domain hosted on two Debian GNU/Linux Sarge servers > running Samba (respectively as PDC and as member server), with lots of > horsepower (dual-cpu with 1GB RAM or more each). > Samba itself is behaving blazingly fast, from both servers. > I use winbind on the member server, of course. > > Still, on this machine I see each week a huge performance drop related > authentication, to the point where it has to be rebooted to allow > authentication before clients time out. > > Any ideas of where to start looking for? I can provide all the > configuration, and all the information needed to track down this > problem. > I already tweaked the configuration a lot to improve performance, but > this issue exceeds my capacity now. > > Can you help me?-- J?r?me Warnier FLOSS Consultant http://beeznest.net
Rex Dieter wrote:> Greg Folkert wrote: >>I wish I did have an idea. I am experiencing a similar issue with HUGE >>AD lookups causing delays on the order of 30 seconds to do bash >>tab-completion. > > Try adding to smb.conf: > winbind enum users = no > winbind enum groups = noI strongly suggest running Ethereal while you see the delays. It has helped me a lot in the past for those type of performance problems. -TL
On Thu, 2006-04-06 at 14:14 -0500, Rex Dieter wrote:> Greg Folkert wrote: > > > On Thu, 2006-04-06 at 15:08 +0200, Jerome Warnier wrote: > >> Nobody has any idea about this? Any idea would probably help. > >> > >> Thanks > >> > > > > I wish I did have an idea. I am experiencing a similar issue with HUGE > > AD lookups causing delays on the order of 30 seconds to do bash > > tab-completion. > > Try adding to smb.conf: > winbind enum users = no > winbind enum groups = noUmmm, hmm. But this machine actually hosts the Windows Home Directories and it also is a Shell machine for the Production systems That actually helps with homedir enumeration. -- greg, greg@gregfolkert.net The technology that is Stronger, better, faster: Linux -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 191 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20060407/cfc267d4/attachment.bin
Le mardi 20 juin 2006 ? 10:03 -0500, Gerald (Jerry) Carter a ?crit :> J?r?me Warnier wrote: > > > I finally found out the following logs in my log.winbind: > > [2006/06/18 06:26:38, 0] lib/fault.c:fault_report(36) > > ==============================================================> > [2006/06/18 06:26:38, 0] lib/fault.c:fault_report(37) > > INTERNAL ERROR: Signal 11 in pid 3815 (3.0.14a-Debian) > > Please read the appendix Bugs of the Samba HOWTO collection > > [2006/06/18 06:26:38, 0] lib/fault.c:fault_report(39) > > ==============================================================> > > > This seems to be the real problem. > > Any chance you could try the debs at > http://download.samba.org/samba/ftp/Binary_Packages/Debian/ > ?Well, could you tell me what they change over the official packages? I already rebuilt mines (official Sarge version) with support for kernel oplocks (as it is normally disabled because Sarge still support Linux kernel 2.2).> cheers, jerry-- J?r?me Warnier <jwarnier@beeznest.net> BeezNest
Gerald (Jerry) Carter
2006-Jun-20 16:45 UTC
[Samba] Re: authentication performance problem
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 J?r?me Warnier wrote:>> Any chance you could try the debs at >> http://download.samba.org/samba/ftp/Binary_Packages/Debian/ >> ? > > Well, could you tell me what they change over the > official packages?There are newer :-) Check the WHATSNEW.txt for details on what has changed between 3.0.14a and 3.0.22. cheers, jerry ====================================================================Samba ------- http://www.samba.org Centeris ----------- http://www.centeris.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFEmCX8IR7qMdg1EfYRAqD8AKCE+POm/lxAJfDScoCDuot9xe1GxACeOTL9 Xlr+ssJVUQcyZ615gPK6OVU=4ISz -----END PGP SIGNATURE-----
Le mardi 20 juin 2006 ? 11:44 -0500, Gerald (Jerry) Carter a ?crit :> J?r?me Warnier wrote: > > >> Any chance you could try the debs at > >> http://download.samba.org/samba/ftp/Binary_Packages/Debian/ > >> ? > > > > Well, could you tell me what they change over the > > official packages? > > There are newer :-) Check the WHATSNEW.txt for details > on what has changed between 3.0.14a and 3.0.22.So the kernel oplocks are not activated by default? If not, may I request you do it? There are little chances someone willing to use the latest Samba packages for his Sarge is still running a 2.2 kernel. See here to actually do it: http://glasnost.beeznest.org/articles/327 Thanks> cheers, jerry-- J?r?me Warnier <jwarnier@beeznest.net> BeezNest
On Wed, 2006-06-21 at 07:34 -0500, Gerald (Jerry) Carter wrote:> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > J?r?me Warnier wrote: > > > In Debian Sarge (and I guess also with these packages), as explained > > here above, kernel oplocks are disabled by default at build time to make > > it work on 2.2 kernels. On Etch and above, 2.2 kernels are no longer > > officially supported, so this is no longer a problem. > > > > I will try to install those packages on the problematic machine this > > evening and will let you know soon. > > Like I said, better talk to Simo about it. I have zero to > do with the debian packaging.IIRC I explicitly state in the README that the Team packages require at least a 2.4 kernel, a 2.2 kernel is obsolete for modern samba anyway. Simo. -- Simo Sorce Samba Team GPL Compliance Officer email: idra@samba.org http://samba.org