I have a Samba PDC and a file server (domain member). They are both
running CentOS 4, with Samba3-3.0.24-30 and LDAP 2.3 (on PDC). Domain
authentication seems to be running fine and file access on the file
server works also. I have one share on the file server that gives me
trouble. Whenever I access files from this one directory, the network
seems to lock up for close to a minute. I get 64% or more network
utilization on the client PC, no packets seem to be moving. If I run TOP
on the file server, I see that the top process is the SMBD command from
the user who is accessing the directory in question. It shows about 16%
or more CPU utilization on the server and the process will stay there
for close to a minute. Also, during this "hang time" the PC client is
pretty much frozen, I cannot minimize the browse window or bring up task
manager. After about a minute or so, suddenly it will come back to life
and I can access the file, or run the executable that I am trying to
access from that directory. Any other directory seems to work fine. I
don't no have any other slow-downs. See conf file below:
SMB Conf for PDC:
[global]
unix charset = LOCALE
workgroup = mynet
netbios name = aster
server string = Domain Controller running %v
interfaces = eth1, lo
bind interfaces only = yes
os level = 255
preferred master = yes
local master = yes
domain master = yes
security = user
time server = yes
username map = /etc/samba/smbusers
wins support = yes
encrypt passwords = yes
pam password change = yes
name resolve order = wins bcast hosts
winbind nested groups = no
passdb backend = ldapsam:"ldap://myhost"
ldap passwd sync = Yes
ldap suffix = dc=mydomain,dc=com
ldap admin dn = cn=Manager,dc=mydomain,dc=com
ldap ssl = no
ldap group suffix = ou=Groups
ldap user suffix = ou=People
ldap machine suffix = ou=People
ldap idmap suffix = ou=Idmap
idmap backend = ldap://myhost
idmap uid = 10000-20000
idmap gid = 10000-20000
map acl inherit = yes
add user script = /etc/smbldap-tools/smbldap-useradd -m "%u"
#delete user script = /etc/smbldap-tools/smbldap-userdel "%u"
add machine script = /etc/smbldap-tools/smbldap-useradd -w
"%u"
add group script = /etc/smbldap-tools/smbldap-groupadd -p "%g"
add user to group script = /etc/smbldap-tools/smbldap-groupmod
-m "%u" "%g"
delete user from group script =
/etc/smbldap-tools/smbldap-groupmod -x "%u" "%g"
set primary group script = /etc/smbldap-tools/smbldap-usermod -g
"%g" "%u"
domain logons = yes
log file = /var/log/samba/log.%m
log level = 1
syslog = 0
max log size = 50
#smb ports = 139 445
smb ports = 139
hosts allow = 127.0.0.1 192.168.0.0/255.255.255.0
# User profiles and home directories
logon drive = U:
logon path = \\%L\profiles\%U
logon script = %U.bat
large readwrite = no
read raw = no
write raw = no
printcap name = /etc/printcap
load printers = no
printing template shell = /bin/false
winbind use default domain = no
<cut>
SMB Conf for file server:
[global]
unix charset = LOCALE
workgroup = mynet
server string = File Server
security = domain
username map = /etc/samba/smbusers
log level = 1
syslog = 0
log file = /var/log/samba/%m.log
max log size = 50
smb ports = 139
name resolve order = wins bcast hosts
wins server = 192.168.0.1
ldap suffix = dc=mydomain,dc=com
ldap machine suffix = ou=People
ldap user suffix = ou=People
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
ldap admin dn = cn=Manager,dc=mydomain,dc=com
idmap backend = ldap:ldap://myhost.mydomain.com
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind trusted domains only = yes
password server = 192.168.0.1
template shell = /bin/false
domain master = no
local master = no
os level = 0
preferred master = no
winbind use default domain = no
veto oplock files = /*.mbd/
large readwrite = no
read raw = no
write raw = no
printcap name = /etc/printcap
load printers = no
printing
####### Shares########
[information_systems]
comment = Infomation Systems
valid users = @is
path = /home/shares/infosys
read only = no
browseable = yes
directory mask = 2770
create mask = 2770
force group = is
vfs objects = recycle
recycle:repository = recycle_bin
recycle:versions = no
recycle:touch_mtime = yes
recycle:keeptree = yes
recycle:exclude =
?~$*,~$*,*.tmp,*.temp,*.TMP,*.cache,*Temp$$$.html,*.lnk,*.idlk,*.ldb,*.db,*.dwl,*.bak
--
*Jason Baker
*/IT Coordinator/
*Glastender Inc.*
5400 North Michigan Road
Saginaw, Michigan 48604 USA
800.748.0423
Phone: 989.752.4275 ext. 228
Fax: 989.752.4444
www.glastender.com <http://www.glastender.com>
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT$ d- s: a C++$ LU+++$ P+ L++>L++++ !E--- W+++ N o? K?
w !O M !V PS PE++ Y? PGP- t 5? X+ R+ tv+ b- DI-- D++ G e+ h---
r+++ y+++
------END GEEK CODE BLOCK------
I just tried what you suggested. I shut down all instances of AVG on the client and it is still screeching to a halt. I've got 57% CPU and 68% Network Utilization and the browse window will eventually show (NOT RESPONDING). I have ran benchmark tests on the network, and everything is fine. It only happens on this share. I can zip through all other shares on the network, even directories full of JPG's with thumbnail previews, but once I get into that /information_systems/ share, everything slows to a crawl. I wondered if it was maybe the share name, maybe the underscore is a bad idea. I also thought maybe its a file that is causing the issue. Maybe I should one by one start moving files out of that share and see how it affects it. *Jason Baker */IT Coordinator/ *Glastender Inc.* 5400 North Michigan Road Saginaw, Michigan 48604 USA 800.748.0423 Phone: 989.752.4275 ext. 228 Fax: 989.752.4444 www.glastender.com <http://www.glastender.com> -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT$ d- s: a C++$ LU+++$ P+ L++>L++++ !E--- W+++ N o? K? w !O M !V PS PE++ Y? PGP- t 5? X+ R+ tv+ b- DI-- D++ G e+ h--- r+++ y+++ ------END GEEK CODE BLOCK------ Ian McDonald wrote:> What happens if you turn off the anti-virus on the client machine? > > Jason Baker wrote: >> I have a Samba PDC and a file server (domain member). They are both >> running CentOS 4, with Samba3-3.0.24-30 and LDAP 2.3 (on PDC). Domain >> authentication seems to be running fine and file access on the file >> server works also. I have one share on the file server that gives me >> trouble. Whenever I access files from this one directory, the network >> seems to lock up for close to a minute. I get 64% or more network >> utilization on the client PC, no packets seem to be moving. If I run >> TOP on the file server, I see that the top process is the SMBD >> command from the user who is accessing the directory in question. It >> shows about 16% or more CPU utilization on the server and the process >> will stay there for close to a minute. Also, during this "hang time" >> the PC client is pretty much frozen, I cannot minimize the browse >> window or bring up task manager. After about a minute or so, suddenly >> it will come back to life and I can access the file, or run the >> executable that I am trying to access from that directory. Any other >> directory seems to work fine. I don't no have any other slow-downs. >> See conf file below: >> >> SMB Conf for PDC: >> [global] >> unix charset = LOCALE >> workgroup = mynet >> netbios name = aster >> server string = Domain Controller running %v >> interfaces = eth1, lo >> bind interfaces only = yes >> os level = 255 >> preferred master = yes >> local master = yes >> domain master = yes >> security = user >> time server = yes >> username map = /etc/samba/smbusers >> wins support = yes >> encrypt passwords = yes >> pam password change = yes >> name resolve order = wins bcast hosts >> winbind nested groups = no >> passdb backend = ldapsam:"ldap://myhost" >> ldap passwd sync = Yes >> ldap suffix = dc=mydomain,dc=com >> ldap admin dn = cn=Manager,dc=mydomain,dc=com >> ldap ssl = no >> ldap group suffix = ou=Groups >> ldap user suffix = ou=People >> ldap machine suffix = ou=People >> ldap idmap suffix = ou=Idmap >> idmap backend = ldap://myhost >> idmap uid = 10000-20000 >> idmap gid = 10000-20000 >> map acl inherit = yes >> add user script = /etc/smbldap-tools/smbldap-useradd -m "%u" >> #delete user script = /etc/smbldap-tools/smbldap-userdel "%u" >> add machine script = /etc/smbldap-tools/smbldap-useradd -w "%u" >> add group script = /etc/smbldap-tools/smbldap-groupadd -p "%g" >> add user to group script = /etc/smbldap-tools/smbldap-groupmod >> -m "%u" "%g" >> delete user from group script = >> /etc/smbldap-tools/smbldap-groupmod -x "%u" "%g" >> set primary group script = /etc/smbldap-tools/smbldap-usermod >> -g "%g" "%u" >> domain logons = yes >> log file = /var/log/samba/log.%m >> log level = 1 >> syslog = 0 >> max log size = 50 >> #smb ports = 139 445 >> smb ports = 139 >> hosts allow = 127.0.0.1 192.168.0.0/255.255.255.0 >> # User profiles and home directories >> logon drive = U: >> logon path = \\%L\profiles\%U >> logon script = %U.bat >> large readwrite = no >> read raw = no >> write raw = no >> printcap name = /etc/printcap >> load printers = no >> printing >> template shell = /bin/false >> winbind use default domain = no >> >> <cut> >> >> SMB Conf for file server: >> >> [global] >> unix charset = LOCALE >> workgroup = mynet >> server string = File Server >> security = domain >> username map = /etc/samba/smbusers >> log level = 1 >> syslog = 0 >> log file = /var/log/samba/%m.log >> max log size = 50 >> smb ports = 139 >> name resolve order = wins bcast hosts >> wins server = 192.168.0.1 >> ldap suffix = dc=mydomain,dc=com >> ldap machine suffix = ou=People >> ldap user suffix = ou=People >> ldap group suffix = ou=Groups >> ldap idmap suffix = ou=Idmap >> ldap admin dn = cn=Manager,dc=mydomain,dc=com >> idmap backend = ldap:ldap://myhost.mydomain.com >> idmap uid = 10000-20000 >> idmap gid = 10000-20000 >> winbind trusted domains only = yes >> password server = 192.168.0.1 >> template shell = /bin/false >> domain master = no >> local master = no >> os level = 0 >> preferred master = no >> winbind use default domain = no >> veto oplock files = /*.mbd/ >> large readwrite = no >> read raw = no >> write raw = no printcap name = /etc/printcap >> load printers = no >> printing >> >> ####### Shares######## >> >> [information_systems] >> comment = Infomation Systems >> valid users = @is >> path = /home/shares/infosys >> read only = no >> browseable = yes >> directory mask = 2770 >> create mask = 2770 >> force group = is >> vfs objects = recycle >> recycle:repository = recycle_bin >> recycle:versions = no >> recycle:touch_mtime = yes >> recycle:keeptree = yes >> recycle:exclude = >> ?~$*,~$*,*.tmp,*.temp,*.TMP,*.cache,*Temp$$$.html,*.lnk,*.idlk,*.ldb,*.db,*.dwl,*.bak >> >> >> >>
There are mainly .EXE files, windows software. This is where the IT department keeps most of the programs we need to install on other machines. There is also a fairly large .ZIP file located in this directory. I've renamed the share IT, and moved the contents out of the directory, created a new directory, now I'm going to start adding files back in one at a time and see if I can repeat the problem. *Jason Baker */IT Coordinator/ *Glastender Inc.* 5400 North Michigan Road Saginaw, Michigan 48604 USA 800.748.0423 Phone: 989.752.4275 ext. 228 Fax: 989.752.4444 www.glastender.com <http://www.glastender.com> -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT$ d- s: a C++$ LU+++$ P+ L++>L++++ !E--- W+++ N o? K? w !O M !V PS PE++ Y? PGP- t 5? X+ R+ tv+ b- DI-- D++ G e+ h--- r+++ y+++ ------END GEEK CODE BLOCK------ Herb Lewis wrote:> is there anything strange about the number of files in that dir compared > to the others, or strange naming (mixed case)? > > Jason Baker wrote: >> I just tried what you suggested. I shut down all instances of AVG on >> the client and it is still screeching to a halt. I've got 57% CPU and >> 68% Network Utilization and the browse window will eventually show >> (NOT RESPONDING). I have ran benchmark tests on the network, and >> everything is fine. It only happens on this share. I can zip through >> all other shares on the network, even directories full of JPG's with >> thumbnail previews, but once I get into that /information_systems/ >> share, everything slows to a crawl. I wondered if it was maybe the >> share name, maybe the underscore is a bad idea. I also thought maybe >> its a file that is causing the issue. Maybe I should one by one start >> moving files out of that share and see how it affects it. >> >> *Jason Baker >> */IT Coordinator/ >> >> >> *Glastender Inc.* >> 5400 North Michigan Road >> Saginaw, Michigan 48604 USA >> 800.748.0423 >> Phone: 989.752.4275 ext. 228 >> Fax: 989.752.4444 >> www.glastender.com <http://www.glastender.com> >> >> -----BEGIN GEEK CODE BLOCK----- Version: 3.1 >> GIT$ d- s: a C++$ LU+++$ P+ L++>L++++ !E--- W+++ N o? K? >> w !O M !V PS PE++ Y? PGP- t 5? X+ R+ tv+ b- DI-- D++ G e+ h--- r+++ y+++ >> ------END GEEK CODE BLOCK------ >> >> >> >> Ian McDonald wrote: >> >>> What happens if you turn off the anti-virus on the client machine? >>> >>> Jason Baker wrote: >>> >>>> I have a Samba PDC and a file server (domain member). They are both >>>> running CentOS 4, with Samba3-3.0.24-30 and LDAP 2.3 (on PDC). >>>> Domain authentication seems to be running fine and file access on >>>> the file server works also. I have one share on the file server >>>> that gives me trouble. Whenever I access files from this one >>>> directory, the network seems to lock up for close to a minute. I >>>> get 64% or more network utilization on the client PC, no packets >>>> seem to be moving. If I run TOP on the file server, I see that the >>>> top process is the SMBD command from the user who is accessing the >>>> directory in question. It shows about 16% or more CPU utilization >>>> on the server and the process will stay there for close to a >>>> minute. Also, during this "hang time" the PC client is pretty much >>>> frozen, I cannot minimize the browse window or bring up task >>>> manager. After about a minute or so, suddenly it will come back to >>>> life and I can access the file, or run the executable that I am >>>> trying to access from that directory. Any other directory seems to >>>> work fine. I don't no have any other slow-downs. See conf file below: >>>> >>>> SMB Conf for PDC: >>>> [global] >>>> unix charset = LOCALE >>>> workgroup = mynet >>>> netbios name = aster >>>> server string = Domain Controller running %v >>>> interfaces = eth1, lo >>>> bind interfaces only = yes >>>> os level = 255 >>>> preferred master = yes >>>> local master = yes >>>> domain master = yes >>>> security = user >>>> time server = yes >>>> username map = /etc/samba/smbusers >>>> wins support = yes >>>> encrypt passwords = yes >>>> pam password change = yes >>>> name resolve order = wins bcast hosts >>>> winbind nested groups = no >>>> passdb backend = ldapsam:"ldap://myhost" >>>> ldap passwd sync = Yes >>>> ldap suffix = dc=mydomain,dc=com >>>> ldap admin dn = cn=Manager,dc=mydomain,dc=com >>>> ldap ssl = no >>>> ldap group suffix = ou=Groups >>>> ldap user suffix = ou=People >>>> ldap machine suffix = ou=People >>>> ldap idmap suffix = ou=Idmap >>>> idmap backend = ldap://myhost >>>> idmap uid = 10000-20000 >>>> idmap gid = 10000-20000 >>>> map acl inherit = yes >>>> add user script = /etc/smbldap-tools/smbldap-useradd -m "%u" >>>> #delete user script = /etc/smbldap-tools/smbldap-userdel "%u" >>>> add machine script = /etc/smbldap-tools/smbldap-useradd -w "%u" >>>> add group script = /etc/smbldap-tools/smbldap-groupadd -p "%g" >>>> add user to group script = /etc/smbldap-tools/smbldap-groupmod -m >>>> "%u" "%g" >>>> delete user from group script = /etc/smbldap-tools/smbldap-groupmod >>>> -x "%u" "%g" >>>> set primary group script = /etc/smbldap-tools/smbldap-usermod -g >>>> "%g" "%u" >>>> domain logons = yes >>>> log file = /var/log/samba/log.%m >>>> log level = 1 >>>> syslog = 0 >>>> max log size = 50 >>>> #smb ports = 139 445 >>>> smb ports = 139 >>>> hosts allow = 127.0.0.1 192.168.0.0/255.255.255.0 >>>> # User profiles and home directories >>>> logon drive = U: >>>> logon path = \\%L\profiles\%U >>>> logon script = %U.bat >>>> large readwrite = no >>>> read raw = no >>>> write raw = no >>>> printcap name = /etc/printcap >>>> load printers = no >>>> printing >>>> template shell = /bin/false >>>> winbind use default domain = no >>>> >>>> <cut> >>>> >>>> SMB Conf for file server: >>>> >>>> [global] >>>> unix charset = LOCALE >>>> workgroup = mynet >>>> server string = File Server >>>> security = domain >>>> username map = /etc/samba/smbusers >>>> log level = 1 >>>> syslog = 0 >>>> log file = /var/log/samba/%m.log >>>> max log size = 50 >>>> smb ports = 139 >>>> name resolve order = wins bcast hosts >>>> wins server = 192.168.0.1 >>>> ldap suffix = dc=mydomain,dc=com >>>> ldap machine suffix = ou=People >>>> ldap user suffix = ou=People >>>> ldap group suffix = ou=Groups >>>> ldap idmap suffix = ou=Idmap >>>> ldap admin dn = cn=Manager,dc=mydomain,dc=com >>>> idmap backend = ldap:ldap://myhost.mydomain.com >>>> idmap uid = 10000-20000 >>>> idmap gid = 10000-20000 >>>> winbind trusted domains only = yes >>>> password server = 192.168.0.1 >>>> template shell = /bin/false >>>> domain master = no >>>> local master = no >>>> os level = 0 >>>> preferred master = no >>>> winbind use default domain = no >>>> veto oplock files = /*.mbd/ >>>> large readwrite = no >>>> read raw = no >>>> write raw = no printcap name = /etc/printcap >>>> load printers = no >>>> printing >>>> >>>> ####### Shares######## >>>> >>>> [information_systems] >>>> comment = Infomation Systems >>>> valid users = @is >>>> path = /home/shares/infosys >>>> read only = no >>>> browseable = yes >>>> directory mask = 2770 >>>> create mask = 2770 >>>> force group = is >>>> vfs objects = recycle >>>> recycle:repository = recycle_bin >>>> recycle:versions = no >>>> recycle:touch_mtime = yes >>>> recycle:keeptree = yes >>>> recycle:exclude = >>>> ?~$*,~$*,*.tmp,*.temp,*.TMP,*.cache,*Temp$$$.html,*.lnk,*.idlk,*.ldb,*.db,*.dwl,*.bak >>>> >>>> >>>> >>>>