samba - Nov 2006 - Very slow changing permissions from Windows client

Our samba server authenticates to Windows 2000 Active Directory and I have ea
support enabled on the share and on the file system.  The OS is Debian Stable,
fully updated and using Samba 3.0.23c from Backports.

Now copying and accessing files is plenty fast, but when setting up permissions
on directories that contain 100 GB or so of files and subdirectories takes like
60 minutes from the time I hit Ok to the time the permission are applied and the
box goes away.  This is being set from a Windows client by the way (not using
setfacl on the linux box or anything).

Any idea why this could be so slow?  Setting permissions on the same directories
on the old Windows file server would take maybe a minute.

This is my first time posting on any mailing list, so just let me know if I do
something stupid :)

James Dinkel
Network Engineer
Butler County of Kansas
?
There are 10 types of people in the world:? those who understand binary, and
those who don't.

> Now copying and accessing files is plenty fast, but when setting up
> permissions on directories that contain 100 GB or so of files and
> subdirectories takes like 60 minutes from the time I hit Ok to the
> time the permission are applied and the box goes away.  This is being
> set from a Windows client by the way (not using setfacl on the linux
> box or anything).
> 
> Any idea why this could be so slow?  Setting permissions on the same
> directories on the old Windows file server would take maybe a minute.
More than likely Samba is doing the equivalent of the 'Advanced' > 
'Replace permission entries on all child objects...' option.

I guarantee you that if you did this on a Windows 2000/XP box on a 
directory that had 100GB of files in it, it would take just as long, if 
not longer.

-- 

Best regards,

Charles

On Fri, Nov 17, 2006 at 07:50:08AM -0600, James A. Dinkel
wrote:
> Our samba server authenticates to Windows 2000 Active Directory and I have
ea support enabled on the share and on the file system.  The OS is Debian
Stable, fully updated and using Samba 3.0.23c from Backports.
> 
> Now copying and accessing files is plenty fast, but when setting up
permissions on directories that contain 100 GB or so of files and subdirectories
takes like 60 minutes from the time I hit Ok to the time the permission are
applied and the box goes away.  This is being set from a Windows client by the
way (not using setfacl on the linux box or anything).
> 
> Any idea why this could be so slow?  Setting permissions on the same
directories on the old Windows file server would take maybe a minute.
> 
> This is my first time posting on any mailing list, so just let me know if I
do something stupid :)
I think this is the Windows client code recursively setting
ACL's in everything under the directory you're changing.

I'd be interested in a network trace showing the difference
between doing this against a Windows server vs a Samba
server.

Thanks,

	Jeremy.

How do I get this "network trace" that Jeremy is asking about?

James Dinkel

-----Original Message-----
From: Jeremy Allison

On Fri, Nov 17, 2006 at 07:50:08AM -0600, James A. Dinkel
wrote:
> Our samba server authenticates to Windows 2000 Active Directory and I
have ea support enabled on the share and on the file system.  The OS is
Debian Stable, fully updated and using Samba 3.0.23c from
Backports.
> 
> Now copying and accessing files is plenty fast, but when setting up
permissions on directories that contain 100 GB or so of files and
subdirectories takes like 60 minutes from the time I hit Ok to the time
the permission are applied and the box goes away.  This is being set
from a Windows client by the way (not using setfacl on the linux box or
anything).
> 
> Any idea why this could be so slow?  Setting permissions on the same
directories on the old Windows file server would take maybe a
minute.
> 
> This is my first time posting on any mailing list, so just let me know
if I do something stupid :)

I think this is the Windows client code recursively setting
ACL's in everything under the directory you're changing.

I'd be interested in a network trace showing the difference
between doing this against a Windows server vs a Samba
server.

Thanks,

	Jeremy.