I want to thanks for improvements in winbindd. 3.0.25 is much faster. Now I can log in my machine very fast. I noted however that groups commands did not improve that much. I used tcpdump to log ldap activity. The steps: - winbind ask user groups (correct) - winbind check groups updates (correct) - winbind check all users in first user groups (asking for objectSid, sAMAccountName, sAMAccountType and UserPrincipalName)... quite slow, this query is IMHO not necessary and require more than 16.000 network packets. Frediano Ziglio
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZIGLIO, Frediano, VF-IT wrote:> I want to thanks for improvements in winbindd. 3.0.25 is much faster. > Now I can log in my machine very fast. > > I noted however that groups commands did not improve that much. > I used tcpdump to log ldap activity. The steps: > - winbind ask user groups (correct) > - winbind check groups updates (correct) > - winbind check all users in first user groups (asking for objectSid, > sAMAccountName, sAMAccountType and UserPrincipalName)... quite slow, > this query is IMHO not necessary and require more than 16.000 network > packets.Are you running `groups` as the user current;y logged on? Or as root for a particular user? cheers, jerry ====================================================================Samba ------- http://www.samba.org Centeris ----------- http://www.centeris.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFF5u4vIR7qMdg1EfYRAiulAJ9EHdmow692AExK23RxOV9RRLM2cQCePVIy aGEZLhtiOMsA9cbKabxrFxA=JAVS -----END PGP SIGNATURE-----
> > ZIGLIO, Frediano, VF-IT wrote: > > I want to thanks for improvements in winbindd. 3.0.25 is > much faster. > > Now I can log in my machine very fast. > > > > I noted however that groups commands did not improve that much. > > I used tcpdump to log ldap activity. The steps: > > - winbind ask user groups (correct) > > - winbind check groups updates (correct) > > - winbind check all users in first user groups (asking for > objectSid, > > sAMAccountName, sAMAccountType and UserPrincipalName)... quite slow, > > this query is IMHO not necessary and require more than > 16.000 network > > packets. > > Are you running `groups` as the user current;y logged on? > Or as root for a particular user? >The current user Frediano
> > ZIGLIO, Frediano, VF-IT wrote: > > I want to thanks for improvements in winbindd. 3.0.25 is > much faster. > > Now I can log in my machine very fast. > > > > I noted however that groups commands did not improve that much. > > I used tcpdump to log ldap activity. The steps: > > - winbind ask user groups (correct) > > - winbind check groups updates (correct) > > - winbind check all users in first user groups (asking for > objectSid, > > sAMAccountName, sAMAccountType and UserPrincipalName)... quite slow, > > this query is IMHO not necessary and require more than > 16.000 network > > packets. > > Are you running `groups` as the user current;y logged on? > Or as root for a particular user? >I tried again logging as root and executing "groups user", the problem still remains. Frediano