Dear all,
I'm having some problems with my samba-ldap configuration. The server is a
domain controler. Most of the time there is no problem. But when some users
try to logon, the workstation gets very slow.
After some testing i found the cause. When a user is a member of many ldap
groups (more then 64), i get the following error:
"smbd[32384]: nss_ldap: could not get LDAP result - Decoding error"
After a wile the CPU load of smb starts to climb, and the only thing to do
is <server smb restart>
server: Centos 4.4
Samba3-3.0.23d
OpenLDAP-2.2.13
nss_ldap-226
workstation: windows XP prof SP2
I don't know where to start.
On Wed, Jan 21, 2009 at 11:39 AM, Robin Harteveld <robinharteveld@gmail.com> wrote:> > > Dear all, > > I'm having some problems with my samba-ldap configuration. The server is a > domain controler. Most of the time there is no problem. But when some users > try to logon, the workstation gets very slow. > After some testing i found the cause. When a user is a member of many ldap > groups (more then 64), i get the following error: > > "smbd[32384]: nss_ldap: could not get LDAP result - Decoding error" > > After a wile the CPU load of smb starts to climb, and the only thing to do > is <server smb restart> > > > > server: Centos 4.4 > Samba3-3.0.23d > OpenLDAP-2.2.13 > nss_ldap-226 > > workstation: windows XP prof SP2 > > > I don't know where to start. >I would start by upgrading if possible. All of the above versions are several years old. John
On Wed, Jan 21, 2009 at 04:39:48PM +0000, Robin Harteveld wrote:> > > Dear all, > > I'm having some problems with my samba-ldap configuration. The server is a > domain controler. Most of the time there is no problem. But when some users > try to logon, the workstation gets very slow. > After some testing i found the cause. When a user is a member of many ldap > groups (more then 64), i get the following error: > > "smbd[32384]: nss_ldap: could not get LDAP result - Decoding error"99% that's a nss_ldap bug. Can you try to upgrade that and the openldap libs? Volker -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.samba.org/archive/samba/attachments/20090121/c256aeca/attachment.bin