Hello! We have a w2k8 R2 64-bit machine in a Samba 3.4.4 controlled domain. When logging in as a domain user there is a ~30 sec delay waiting for the User Profile Service. This has nothing to do with the size of the user profile. Looking at the network traffic I can see 2 gaps, the first about 11 sek and the second about 19 sek with no packets sent except one TCP ACK (from the client) in each gap. Between the gaps there is only a few packets sent. According to WireShark it's a "Tree Disconnect Request" with response and a "Logoff AndX Request" with response. Any idea what may be causing this? -------------------------------------------------------------------------- ?ke Holmlund Phone: 090 - 786 57 16 Ume? University Fax: 090 - 786 65 50 Dept of Informatics Email: holm at informatik.umu.se 901 87 Ume? SWEDEN
On Tue, Feb 02, 2010 at 07:03:11PM +0100, ?ke Holmlund wrote:> Hello! > > We have a w2k8 R2 64-bit machine in a Samba 3.4.4 controlled domain. > When logging in as a domain user there is a ~30 sec delay waiting > for the User Profile Service. This has nothing to do with the size > of the user profile. Looking at the network traffic I can see 2 > gaps, the first about 11 sek and the second about 19 sek with > no packets sent except one TCP ACK (from the client) in each gap. > > Between the gaps there is only a few packets sent. According > to WireShark it's a "Tree Disconnect Request" with response and > a "Logoff AndX Request" with response. > > Any idea what may be causing this?Gaps like that are almost always DNS lookups of some kind :-). Are you looking for those, or just CIFS traffic ? Jeremy.
On Wed, Feb 03, 2010 at 03:19:36PM +0100, ?ke Holmlund wrote:> Hello! > > From what I can see, there is no DNS-traffic around the time of the > gaps and the DNS-activity I can see in onther places seems ok. There > is almost no network traffic and no CPU activity during the gaps so > it looks like some kind of timeout issue. > > It may be of interest that, for the moment, IPv6 is beeing used. > Sometimes we also have quite a long delay if we click on the "View > computers and devices" link in the "Network and Sharing Center".Is there any other traffic coming out of the client box around the delay time ? Jeremy.
Not much. I attached a screendump from Wireshark. This capture is made on the w2k8 machine. The traffic shown is sent to/from the ethernet address of the w2k8 machine. Remote Desktop traffic is excluded (the machine is used as a terminal server). Regards, ?ke Holmlund --On 3 februari 2010 14.08.49 -0800 Jeremy Allison <jra at samba.org> wrote:> On Wed, Feb 03, 2010 at 03:19:36PM +0100, ?ke Holmlund wrote: >> Hello! >> >> From what I can see, there is no DNS-traffic around the time of the >> gaps and the DNS-activity I can see in onther places seems ok. There >> is almost no network traffic and no CPU activity during the gaps so >> it looks like some kind of timeout issue. >> >> It may be of interest that, for the moment, IPv6 is beeing used. >> Sometimes we also have quite a long delay if we click on the "View >> computers and devices" link in the "Network and Sharing Center". > > Is there any other traffic coming out of the client box around the delay > time ? > > Jeremy.