thr3ads.net - samba - [Samba] win bind extremely slow after Upgrade to 4.2 [Apr 2016]

If this information is useful, please help other people find it:
Share via:

Oliver Werner

2016-Apr-27 07:36 UTC

[Samba] win bind extremely slow after Upgrade to 4.2

Hi,

we have upgrade an Samba Member (DCs already upgraded) from Samba 4.1.17 to
Samba 4.2.10.

On DCs work fine after install winbind.

But our member extremely slow.

Connect to the Share takes 2-3 minutes and directory listing need 2-5 minutes.


wbinfo -u takes around 20 seconds and will not return output

wbinfo -g takes 3 seconds and show my groups

id user.name takes 20 seconds and shows information  of the user and its groups


smb.conf for samba member:

[global]
       netbios name = PL0024
       security = ADS
       workgroup = HQKONTRAST
       realm = hq.kontrast

       log file = /var/log/samba/%m.log
       log level = 1

       dedicated keytab file = /etc/krb5.keytab
       kerberos method = secrets and keytab
       winbind refresh tickets = yes

       winbind trusted domains only = no
       winbind use default domain = yes
       winbind enum users  = yes
       winbind enum groups = yes
      winbind cache time = 60


       # Default idmap config used for BUILTIN and local accounts/groups
       idmap config *:backend = tdb
       idmap config *:range = 500-1023

       # idmap config for domain HQKONTRAST
       idmap config HQKONTRAST:backend = ad
       idmap config HQKONTRAST:schema_mode = rfc2307
       idmap config HQKONTRAST:range = 1024-99999

       # Use settings from AD for login shell and home directory
       winbind nss info = rfc2307

smb.conf DC:

[global]
	workgroup = HQKONTRAST
	realm = HQ.KONTRAST
	netbios name = VL0227
	server role = active directory domain controller
	idmap_ldb:use rfc2307 = yes
	interfaces = eth0:35 eth0:38
  	bind interfaces only=yes
	log level = 3

	ldap server require strong auth = no

	tls enabled  = yes
	tls keyfile  = /var/lib/samba/private/tls/key.pem
	tls certfile = /var/lib/samba/private/tls/cert.pem
	tls cafile   = /var/lib/samba/private/tls/ca.pem

[netlogon]
	path = /var/lib/samba/sysvol/hq.kontrast/scripts
	read only = No

[sysvol]
	path = /var/lib/samba/sysvol
	read only = No






OLIVER WERNER
Systemadministrator





Kontrast Communication Services GmbH
Grafenberger Allee 100, 40237 Düsseldorf, Germany

Fon  +49-211-91505-500
Fax  +49-211-91505-530
www.kontrast.de <http://www.kontrast.de/>

Amtsgericht Düsseldorf: HRB 26934
Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist

 <https://www.facebook.com/kontrast.communication>    
<https://twitter.com/KONTRAST_de>    
<http://www.xing.com/companies/kontrastcommunicationservicesgmbh>    
<http://www.linkedin.com/company/kontrast-communication-services-gmbh>    
<https://vimeo.com/kontrastcs>    
<http://instagram.com/kontrast_de>

Note: The information contained in this message may be privileged and
confidential and protected from disclosure. If the reader of this message is not
the intended recipient, or an employee or agent responsible for delivering this
message to the intended recipient, you are hereby notified that any
dissemination, distribution or copying of this communication is strictly
prohibited. If you have received this communication in error, please notify us
immediately by replying to the message and deleting it from your computer.

Please consider the environment and only print this if required.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL:
<http://lists.samba.org/pipermail/samba/attachments/20160427/8d0707cb/signature.sig>

Prunk Dump

2016-Apr-27 11:30 UTC

head link

[Samba] win bind extremely slow after Upgrade to 4.2

2016-04-27 9:36 GMT+02:00 Oliver Werner <oliver.werner at
kontrast.de>:> Hi,
>
> we have upgrade an Samba Member (DCs already upgraded) from Samba 4.1.17 to
Samba 4.2.10.
>
> On DCs work fine after install winbind.
>
> But our member extremely slow.
>
> Connect to the Share takes 2-3 minutes and directory listing need 2-5
minutes.
>
>
> wbinfo -u takes around 20 seconds and will not return output
>
> wbinfo -g takes 3 seconds and show my groups
>
> id user.name takes 20 seconds and shows information  of the user and its
groups
>
>
> smb.conf for samba member:
>
> [global]
>        netbios name = PL0024
>        security = ADS
>        workgroup = HQKONTRAST
>        realm = hq.kontrast
>
>        log file = /var/log/samba/%m.log
>        log level = 1
>
>        dedicated keytab file = /etc/krb5.keytab
>        kerberos method = secrets and keytab
>        winbind refresh tickets = yes
>
>        winbind trusted domains only = no
>        winbind use default domain = yes
>        winbind enum users  = yes
>        winbind enum groups = yes
>       winbind cache time = 60
>
>
>        # Default idmap config used for BUILTIN and local accounts/groups
>        idmap config *:backend = tdb
>        idmap config *:range = 500-1023
>
>        # idmap config for domain HQKONTRAST
>        idmap config HQKONTRAST:backend = ad
>        idmap config HQKONTRAST:schema_mode = rfc2307
>        idmap config HQKONTRAST:range = 1024-99999
>
>        # Use settings from AD for login shell and home directory
>        winbind nss info = rfc2307
>
> smb.conf DC:
>
> [global]
>         workgroup = HQKONTRAST
>         realm = HQ.KONTRAST
>         netbios name = VL0227
>         server role = active directory domain controller
>         idmap_ldb:use rfc2307 = yes
>         interfaces = eth0:35 eth0:38
>         bind interfaces only=yes
>         log level = 3
>
>         ldap server require strong auth = no
>
>         tls enabled  = yes
>         tls keyfile  = /var/lib/samba/private/tls/key.pem
>         tls certfile = /var/lib/samba/private/tls/cert.pem
>         tls cafile   = /var/lib/samba/private/tls/ca.pem
>
> [netlogon]
>         path = /var/lib/samba/sysvol/hq.kontrast/scripts
>         read only = No
>
> [sysvol]
>         path = /var/lib/samba/sysvol
>         read only = No
>
>
>
>
>
>
> OLIVER WERNER
> Systemadministrator
>
>
>
>
>
> Kontrast Communication Services GmbH
> Grafenberger Allee 100, 40237 Düsseldorf, Germany
>
> Fon  +49-211-91505-500
> Fax  +49-211-91505-530
> www.kontrast.de <http://www.kontrast.de/>
>
> Amtsgericht Düsseldorf: HRB 26934
> Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist
>
>  <https://www.facebook.com/kontrast.communication>    
<https://twitter.com/KONTRAST_de>    
<http://www.xing.com/companies/kontrastcommunicationservicesgmbh>    
<http://www.linkedin.com/company/kontrast-communication-services-gmbh>    
<https://vimeo.com/kontrastcs>    
<http://instagram.com/kontrast_de>
>
> Note: The information contained in this message may be privileged and
confidential and protected from disclosure. If the reader of this message is not
the intended recipient, or an employee or agent responsible for delivering this
message to the intended recipient, you are hereby notified that any
dissemination, distribution or copying of this communication is strictly
prohibited. If you have received this communication in error, please notify us
immediately by replying to the message and deleting it from your computer.
>
> Please consider the environment and only print this if required.
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
Hello,

I'm also affected by the same problem after an upgrade from Samba-4.1
to Samba-4.2 (Debian security update). I have found that the winbind
slowdown affect the server and the clients. To test the speed I launch
the following command :

wbinfo --user-info=myuser1 --user-info=myuser2 --user-info=myuser3
.... (+30 users)

When I have switched the server from the "winbind" service to
"winbindd", the winbind lookups are slower but not dramatically.
Before the update the command take 1 second and now 3 seconds. I can
see visually the difference.

On the clients the user/group enumeration are disabled. The command
take now 20 seconds to lookup the 30 users. Is this normal ? is This
due to the need of the AD connections to be signed on samba 4.2 ?

I don't know how I can debug there winbind lookups.

Thanks for the help !

Baptiste.

Oliver Werner

2016-May-04 08:29 UTC

head link

[Samba] Fwd: win bind extremely slow after Upgrade to 4.2

i have now try some other options:

- Fresh install of Samba AD Member
- rejoin Member
- change from winbindd to winbind

But nothing helps. Also really slow



time ls -lisa /daten/samba/
insgesamt 48
8222  4 drwxrwxrwx  8 postmaster.postmaster kontrast_ws_quack_fischer  4096 Mai 
3 15:52 .
   2  4 drwxr-xr-x 12 root                  root                       4096 Jan
25 15:30 ..
 145 12 -rwxr--r--  1 oliver.werner         domain users              10244 Mai 
4 07:11 .DS_Store
1173  4 -rwxr--r--  1 oliver.werner         domain users               4096 Apr
27 10:14 ._.DS_Store
8624  4 drwxr-xr-x  3 oliver.werner         domain users               4096 Apr
27 10:38 Neuer Ordner
8636  4 drwxr-xr-x  2 oliver.werner         domain users               4096 Mai 
3 15:52 Neuer Ordner 2
8637  4 drwxr-xr-x  2 oliver.werner         domain users               4096 Mai 
3 15:52 Neuer Ordner 3
8638  4 drwxr-xr-x  2 oliver.werner         domain users               4096 Mai 
3 15:52 Neuer Ordner 4
8639  4 drwxr-xr-x  2 oliver.werner         domain users               4096 Mai 
3 15:52 Neuer Ordner 5
8640  4 drwxr-xr-x  2 oliver.werner         domain users               4096 Mai 
3 15:52 Neuer Ordner 6

real	0m11.759s
user	0m0.004s
sys	0m0.000s



time id oliver.werner
uid=10150(oliver.werner) gid=10009(domain users) Gruppen=10009(domain
users),1396(kontrastvpn_it),1088(kontrast_administration),1344(kontrast_alpina),1393(kontrast_bdsg),1028(kontrast_intern),1070(kontrast_medien_foto),1053(kontrast_medien_video),1096(kontrast_obi),1359(kontrast_terminal),1105(kontrast_vemas),1025(kontrast_vodafone_d2),1326(kontrast_webadminlive),1363(kontrast_ingenhoven_architects),1364(kontrast_jw_ostendorf),1101(BUILTIN\users),1100(BUILTIN\administrators)

real	0m13.560s
user	0m0.000s
sys	0m0.004s

time wbinfo -u | wc -l
0

real	0m10.037s
user	0m0.008s
sys	0m0.000s
OLIVER WERNER
Systemadministrator





Kontrast Communication Services GmbH
Grafenberger Allee 100, 40237 Düsseldorf, Germany

Fon  +49-211-91505-500
Fax  +49-211-91505-530
www.kontrast.de <http://www.kontrast.de/>

Amtsgericht Düsseldorf: HRB 26934
Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist

 <https://www.facebook.com/kontrast.communication>    
<https://twitter.com/KONTRAST_de>    
<http://www.xing.com/companies/kontrastcommunicationservicesgmbh>    
<http://www.linkedin.com/company/kontrast-communication-services-gmbh>    
<https://vimeo.com/kontrastcs>    
<http://instagram.com/kontrast_de>

Note: The information contained in this message may be privileged and
confidential and protected from disclosure. If the reader of this message is not
the intended recipient, or an employee or agent responsible for delivering this
message to the intended recipient, you are hereby notified that any
dissemination, distribution or copying of this communication is strictly
prohibited. If you have received this communication in error, please notify us
immediately by replying to the message and deleting it from your computer.

Please consider the environment and only print this if required.

> Anfang der weitergeleiteten Nachricht:
> 
> Von: Oliver Werner <oliver.werner at kontrast.de>
> Betreff: win bind extremely slow after Upgrade to 4.2
> Datum: 27. April 2016 um 09:36:01 MESZ
> An: samba at lists.samba.org
> 
> Hi,
> 
> we have upgrade an Samba Member (DCs already upgraded) from Samba 4.1.17 to
Samba 4.2.10.
> 
> On DCs work fine after install winbind.
> 
> But our member extremely slow.
> 
> Connect to the Share takes 2-3 minutes and directory listing need 2-5
minutes.
> 
> 
> wbinfo -u takes around 20 seconds and will not return output
> 
> wbinfo -g takes 3 seconds and show my groups
> 
> id user.name takes 20 seconds and shows information  of the user and its
groups
> 
> 
> smb.conf for samba member:
> 
> [global]
>        netbios name = PL0024
>        security = ADS
>        workgroup = HQKONTRAST
>        realm = hq.kontrast
> 
>        log file = /var/log/samba/%m.log
>        log level = 1
> 
>        dedicated keytab file = /etc/krb5.keytab
>        kerberos method = secrets and keytab
>        winbind refresh tickets = yes
> 
>        winbind trusted domains only = no
>        winbind use default domain = yes
>        winbind enum users  = yes
>        winbind enum groups = yes
>       winbind cache time = 60
> 
> 
>        # Default idmap config used for BUILTIN and local accounts/groups
>        idmap config *:backend = tdb
>        idmap config *:range = 500-1023
> 
>        # idmap config for domain HQKONTRAST
>        idmap config HQKONTRAST:backend = ad
>        idmap config HQKONTRAST:schema_mode = rfc2307
>        idmap config HQKONTRAST:range = 1024-99999
> 
>        # Use settings from AD for login shell and home directory
>        winbind nss info = rfc2307
> 
> smb.conf DC:
> 
> [global]
> 	workgroup = HQKONTRAST
> 	realm = HQ.KONTRAST
> 	netbios name = VL0227
> 	server role = active directory domain controller
> 	idmap_ldb:use rfc2307 = yes
> 	interfaces = eth0:35 eth0:38
>   	bind interfaces only=yes
> 	log level = 3
> 
> 	ldap server require strong auth = no
> 
> 	tls enabled  = yes
> 	tls keyfile  = /var/lib/samba/private/tls/key.pem
> 	tls certfile = /var/lib/samba/private/tls/cert.pem
> 	tls cafile   = /var/lib/samba/private/tls/ca.pem
> 
> [netlogon]
> 	path = /var/lib/samba/sysvol/hq.kontrast/scripts
> 	read only = No
> 
> [sysvol]
> 	path = /var/lib/samba/sysvol
> 	read only = No
> 
> 
> 
> 
> 
> 
> OLIVER WERNER
> Systemadministrator
> 
> 
> 
> 
> 
> Kontrast Communication Services GmbH
> Grafenberger Allee 100, 40237 Düsseldorf, Germany
> 
> Fon  +49-211-91505-500
> Fax  +49-211-91505-530
> www.kontrast.de <http://www.kontrast.de/>
> 
> Amtsgericht Düsseldorf: HRB 26934
> Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist
> 
>  <https://www.facebook.com/kontrast.communication>    
<https://twitter.com/KONTRAST_de>    
<http://www.xing.com/companies/kontrastcommunicationservicesgmbh>    
<http://www.linkedin.com/company/kontrast-communication-services-gmbh>    
<https://vimeo.com/kontrastcs>    
<http://instagram.com/kontrast_de>
> 
> Note: The information contained in this message may be privileged and
confidential and protected from disclosure. If the reader of this message is not
the intended recipient, or an employee or agent responsible for delivering this
message to the intended recipient, you are hereby notified that any
dissemination, distribution or copying of this communication is strictly
prohibited. If you have received this communication in error, please notify us
immediately by replying to the message and deleting it from your computer.
> 
> Please consider the environment and only print this if required.
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL:
<http://lists.samba.org/pipermail/samba/attachments/20160504/125641ac/signature.sig>

Andreas Hauffe

2016-May-04 08:46 UTC

head link

[Samba] Fwd: win bind extremely slow after Upgrade to 4.2

Hi,

we have the same problem here and no solution.

Andreas

Am 04.05.2016 um 10:29 schrieb Oliver Werner:> i have now try some other options:
>
> - Fresh install of Samba AD Member
> - rejoin Member
> - change from winbindd to winbind
>
> But nothing helps. Also really slow
>
>
>
> time ls -lisa /daten/samba/
> insgesamt 48
> 8222  4 drwxrwxrwx  8 postmaster.postmaster kontrast_ws_quack_fischer  4096
Mai  3 15:52 .
>     2  4 drwxr-xr-x 12 root                  root                      
4096 Jan 25 15:30 ..
>   145 12 -rwxr--r--  1 oliver.werner         domain users             
10244 Mai  4 07:11 .DS_Store
> 1173  4 -rwxr--r--  1 oliver.werner         domain users               4096
Apr 27 10:14 ._.DS_Store
> 8624  4 drwxr-xr-x  3 oliver.werner         domain users               4096
Apr 27 10:38 Neuer Ordner
> 8636  4 drwxr-xr-x  2 oliver.werner         domain users               4096
Mai  3 15:52 Neuer Ordner 2
> 8637  4 drwxr-xr-x  2 oliver.werner         domain users               4096
Mai  3 15:52 Neuer Ordner 3
> 8638  4 drwxr-xr-x  2 oliver.werner         domain users               4096
Mai  3 15:52 Neuer Ordner 4
> 8639  4 drwxr-xr-x  2 oliver.werner         domain users               4096
Mai  3 15:52 Neuer Ordner 5
> 8640  4 drwxr-xr-x  2 oliver.werner         domain users               4096
Mai  3 15:52 Neuer Ordner 6
>
> real	0m11.759s
> user	0m0.004s
> sys	0m0.000s
>
>
>
> time id oliver.werner
> uid=10150(oliver.werner) gid=10009(domain users) Gruppen=10009(domain
users),1396(kontrastvpn_it),1088(kontrast_administration),1344(kontrast_alpina),1393(kontrast_bdsg),1028(kontrast_intern),1070(kontrast_medien_foto),1053(kontrast_medien_video),1096(kontrast_obi),1359(kontrast_terminal),1105(kontrast_vemas),1025(kontrast_vodafone_d2),1326(kontrast_webadminlive),1363(kontrast_ingenhoven_architects),1364(kontrast_jw_ostendorf),1101(BUILTIN\users),1100(BUILTIN\administrators)
>
> real	0m13.560s
> user	0m0.000s
> sys	0m0.004s
>
> time wbinfo -u | wc -l
> 0
>
> real	0m10.037s
> user	0m0.008s
> sys	0m0.000s
> OLIVER WERNER
> Systemadministrator
>
>
>
>
>
> Kontrast Communication Services GmbH
> Grafenberger Allee 100, 40237 Düsseldorf, Germany
>
> Fon  +49-211-91505-500
> Fax  +49-211-91505-530
> www.kontrast.de <http://www.kontrast.de/>
>
> Amtsgericht Düsseldorf: HRB 26934
> Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist
>
>   <https://www.facebook.com/kontrast.communication>    
<https://twitter.com/KONTRAST_de>    
<http://www.xing.com/companies/kontrastcommunicationservicesgmbh>    
<http://www.linkedin.com/company/kontrast-communication-services-gmbh>    
<https://vimeo.com/kontrastcs>    
<http://instagram.com/kontrast_de>
>
> Note: The information contained in this message may be privileged and
confidential and protected from disclosure. If the reader of this message is not
the intended recipient, or an employee or agent responsible for delivering this
message to the intended recipient, you are hereby notified that any
dissemination, distribution or copying of this communication is strictly
prohibited. If you have received this communication in error, please notify us
immediately by replying to the message and deleting it from your computer.
>
> Please consider the environment and only print this if required.
>
>
>> Anfang der weitergeleiteten Nachricht:
>>
>> Von: Oliver Werner <oliver.werner at kontrast.de>
>> Betreff: win bind extremely slow after Upgrade to 4.2
>> Datum: 27. April 2016 um 09:36:01 MESZ
>> An: samba at lists.samba.org
>>
>> Hi,
>>
>> we have upgrade an Samba Member (DCs already upgraded) from Samba
4.1.17 to Samba 4.2.10.
>>
>> On DCs work fine after install winbind.
>>
>> But our member extremely slow.
>>
>> Connect to the Share takes 2-3 minutes and directory listing need 2-5
minutes.
>>
>>
>> wbinfo -u takes around 20 seconds and will not return output
>>
>> wbinfo -g takes 3 seconds and show my groups
>>
>> id user.name takes 20 seconds and shows information  of the user and
its groups
>>
>>
>> smb.conf for samba member:
>>
>> [global]
>>         netbios name = PL0024
>>         security = ADS
>>         workgroup = HQKONTRAST
>>         realm = hq.kontrast
>>
>>         log file = /var/log/samba/%m.log
>>         log level = 1
>>
>>         dedicated keytab file = /etc/krb5.keytab
>>         kerberos method = secrets and keytab
>>         winbind refresh tickets = yes
>>
>>         winbind trusted domains only = no
>>         winbind use default domain = yes
>>         winbind enum users  = yes
>>         winbind enum groups = yes
>>        winbind cache time = 60
>>
>>
>>         # Default idmap config used for BUILTIN and local
accounts/groups
>>         idmap config *:backend = tdb
>>         idmap config *:range = 500-1023
>>
>>         # idmap config for domain HQKONTRAST
>>         idmap config HQKONTRAST:backend = ad
>>         idmap config HQKONTRAST:schema_mode = rfc2307
>>         idmap config HQKONTRAST:range = 1024-99999
>>
>>         # Use settings from AD for login shell and home directory
>>         winbind nss info = rfc2307
>>
>> smb.conf DC:
>>
>> [global]
>> 	workgroup = HQKONTRAST
>> 	realm = HQ.KONTRAST
>> 	netbios name = VL0227
>> 	server role = active directory domain controller
>> 	idmap_ldb:use rfc2307 = yes
>> 	interfaces = eth0:35 eth0:38
>>    	bind interfaces only=yes
>> 	log level = 3
>>
>> 	ldap server require strong auth = no
>>
>> 	tls enabled  = yes
>> 	tls keyfile  = /var/lib/samba/private/tls/key.pem
>> 	tls certfile = /var/lib/samba/private/tls/cert.pem
>> 	tls cafile   = /var/lib/samba/private/tls/ca.pem
>>
>> [netlogon]
>> 	path = /var/lib/samba/sysvol/hq.kontrast/scripts
>> 	read only = No
>>
>> [sysvol]
>> 	path = /var/lib/samba/sysvol
>> 	read only = No
>>
>>
>>
>>
>>
>>
>> OLIVER WERNER
>> Systemadministrator
>>
>>
>>
>>
>>
>> Kontrast Communication Services GmbH
>> Grafenberger Allee 100, 40237 Düsseldorf, Germany
>>
>> Fon  +49-211-91505-500
>> Fax  +49-211-91505-530
>> www.kontrast.de <http://www.kontrast.de/>
>>
>> Amtsgericht Düsseldorf: HRB 26934
>> Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der
Vlist
>>
>>   <https://www.facebook.com/kontrast.communication>    
<https://twitter.com/KONTRAST_de>    
<http://www.xing.com/companies/kontrastcommunicationservicesgmbh>    
<http://www.linkedin.com/company/kontrast-communication-services-gmbh>    
<https://vimeo.com/kontrastcs>    
<http://instagram.com/kontrast_de>
>>
>> Note: The information contained in this message may be privileged and
confidential and protected from disclosure. If the reader of this message is not
the intended recipient, or an employee or agent responsible for delivering this
message to the intended recipient, you are hereby notified that any
dissemination, distribution or copying of this communication is strictly
prohibited. If you have received this communication in error, please notify us
immediately by replying to the message and deleting it from your computer.
>>
>> Please consider the environment and only print this if required.
>>
>>
>
>

L.P.H. van Belle

2016-May-04 08:54 UTC

head link

[Samba] Fwd: win bind extremely slow after Upgrade to 4.2

Hai Oliver/andreas, 

 

Best is to skip the debian 4.2.10 and 4.3.8 packages. 

Only the last 4.4.3 is imo working correct. 

I upgraded all my servers to 4.4.3 yesterday, and people noticed the network is
responding faster.

 

You can use my packages for debian jessie (amd64 only) 

http://downloads.van-belle.nl/samba4/

 

Or recompile 4.4.3 from debian sid. 

If you need help with this, just mail me. 

 

The packages i made, dont conflict with the debian packages. 

You can test 4.4.3 and go back to debian samba. 

Sample policy output. 

apt-cache policy samba

samba:

  Installed: 2:4.4.3-lvb1

  Candidate: 2:4.4.3-lvb1

  Package pin: 2:4.4.3-lvb1

  Version table:

 *** 2:4.4.3-lvb1 500

        500 http://xxx.domain.tld/debian/ jessie/ Packages

        100 /var/lib/dpkg/status

    99:4.2.11-9 500

        300 https://download.sernet.de/packages/samba/4.2/debian/ jessie/main
amd64 Packages

     2:4.2.10+dfsg-0+deb8u2 500

        500 http://security.debian.org/ jessie/updates/main amd64 Packages

     2:4.1.17+dfsg-2+deb8u2 500

        500 http://ftp.nl.debian.org/debian/ jessie/main amd64 Packages

 

Its setup to be compatible with the debian packages, so if update/upgrade it wil
follow the highest samba version.

 

Other option is to use the sernet packages. ( now 4.2.12 ) 

 

Notice with my packages. 

Due to some dependecie changes from debian stable and unstable, you get a notice
that

One file is also in another package.  Fix : apt-get ?f install and overwrite it.

Winbind complains in the log about a db missing.  Fix : apt-get install
samba-dsdb-modules

 

I?ll fix that later on, i?ll have to check the debian bug list if there is known
about above.

 

 

Greetz, 

 

Louis

 

 

 
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner
> Verzonden: woensdag 4 mei 2016 10:29
> Aan: samba
> Onderwerp: [Samba] Fwd: win bind extremely slow after Upgrade to 4.2
> 
> i have now try some other options:
> 
> - Fresh install of Samba AD Member
> - rejoin Member
> - change from winbindd to winbind
> 
> But nothing helps. Also really slow
> 
> 
> 
> time ls -lisa /daten/samba/
> insgesamt 48
> 8222  4 drwxrwxrwx  8 postmaster.postmaster kontrast_ws_quack_fischer
> 4096 Mai  3 15:52 .
>    2  4 drwxr-xr-x 12 root                  root
> 4096 Jan 25 15:30 ..
>  145 12 -rwxr--r--  1 oliver.werner         domain users
> 10244 Mai  4 07:11 .DS_Store
> 1173  4 -rwxr--r--  1 oliver.werner         domain users
> 4096 Apr 27 10:14 ._.DS_Store
> 8624  4 drwxr-xr-x  3 oliver.werner         domain users
> 4096 Apr 27 10:38 Neuer Ordner
> 8636  4 drwxr-xr-x  2 oliver.werner         domain users
> 4096 Mai  3 15:52 Neuer Ordner 2
> 8637  4 drwxr-xr-x  2 oliver.werner         domain users
> 4096 Mai  3 15:52 Neuer Ordner 3
> 8638  4 drwxr-xr-x  2 oliver.werner         domain users
> 4096 Mai  3 15:52 Neuer Ordner 4
> 8639  4 drwxr-xr-x  2 oliver.werner         domain users
> 4096 Mai  3 15:52 Neuer Ordner 5
> 8640  4 drwxr-xr-x  2 oliver.werner         domain users
> 4096 Mai  3 15:52 Neuer Ordner 6
> 
> real      0m11.759s
> user      0m0.004s
> sys 0m0.000s
> 
> 
> 
> time id oliver.werner
> uid=10150(oliver.werner) gid=10009(domain users) Gruppen=10009(domain
> users),1396(kontrastvpn_it),1088(kontrast_administration),1344(kontrast_al
> pina),1393(kontrast_bdsg),1028(kontrast_intern),1070(kontrast_medien_foto)
> ,1053(kontrast_medien_video),1096(kontrast_obi),1359(kontrast_terminal),11
> 05(kontrast_vemas),1025(kontrast_vodafone_d2),1326(kontrast_webadminlive),
> 1363(kontrast_ingenhoven_architects),1364(kontrast_jw_ostendorf),1101(BUIL
> TIN\users),1100(BUILTIN\administrators)
> 
> real      0m13.560s
> user      0m0.000s
> sys 0m0.004s
> 
> time wbinfo -u | wc -l
> 0
> 
> real      0m10.037s
> user      0m0.008s
> sys 0m0.000s
> OLIVER WERNER
> Systemadministrator
> 
> 
> 
> 
> 
> Kontrast Communication Services GmbH
> Grafenberger Allee 100, 40237 Düsseldorf, Germany
> 
> Fon  +49-211-91505-500
> Fax  +49-211-91505-530
> www.kontrast.de <http://www.kontrast.de/>
> 
> Amtsgericht Düsseldorf: HRB 26934
> Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der
> Vlist
> 
>  <https://www.facebook.com/kontrast.communication>
> <https://twitter.com/KONTRAST_de>
> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh>
>
<http://www.linkedin.com/company/kontrast-communication-services-gmbh>
> <https://vimeo.com/kontrastcs>    
<http://instagram.com/kontrast_de>
> 
> Note: The information contained in this message may be privileged and
> confidential and protected from disclosure. If the reader of this message
> is not the intended recipient, or an employee or agent responsible for
> delivering this message to the intended recipient, you are hereby notified
> that any dissemination, distribution or copying of this communication is
> strictly prohibited. If you have received this communication in error,
> please notify us immediately by replying to the message and deleting it
> from your computer.
> 
> Please consider the environment and only print this if required.
> 
> 
> > Anfang der weitergeleiteten Nachricht:
> >
> > Von: Oliver Werner <oliver.werner at kontrast.de>
> > Betreff: win bind extremely slow after Upgrade to 4.2
> > Datum: 27. April 2016 um 09:36:01 MESZ
> > An: samba at lists.samba.org
> >
> > Hi,
> >
> > we have upgrade an Samba Member (DCs already upgraded) from Samba
4.1.17
> to Samba 4.2.10.
> >
> > On DCs work fine after install winbind.
> >
> > But our member extremely slow.
> >
> > Connect to the Share takes 2-3 minutes and directory listing need 2-5
> minutes.
> >
> >
> > wbinfo -u takes around 20 seconds and will not return output
> >
> > wbinfo -g takes 3 seconds and show my groups
> >
> > id user.name takes 20 seconds and shows information  of the user and
its
> groups
> >
> >
> > smb.conf for samba member:
> >
> > [global]
> >        netbios name = PL0024
> >        security = ADS
> >        workgroup = HQKONTRAST
> >        realm = hq.kontrast
> >
> >        log file = /var/log/samba/%m.log
> >        log level = 1
> >
> >        dedicated keytab file = /etc/krb5.keytab
> >        kerberos method = secrets and keytab
> >        winbind refresh tickets = yes
> >
> >        winbind trusted domains only = no
> >        winbind use default domain = yes
> >        winbind enum users  = yes
> >        winbind enum groups = yes
> >       winbind cache time = 60
> >
> >
> >        # Default idmap config used for BUILTIN and local
accounts/groups
> >        idmap config *:backend = tdb
> >        idmap config *:range = 500-1023
> >
> >        # idmap config for domain HQKONTRAST
> >        idmap config HQKONTRAST:backend = ad
> >        idmap config HQKONTRAST:schema_mode = rfc2307
> >        idmap config HQKONTRAST:range = 1024-99999
> >
> >        # Use settings from AD for login shell and home directory
> >        winbind nss info = rfc2307
> >
> > smb.conf DC:
> >
> > [global]
> >   workgroup = HQKONTRAST
> >   realm = HQ.KONTRAST
> >   netbios name = VL0227
> >   server role = active directory domain controller
> >   idmap_ldb:use rfc2307 = yes
> >   interfaces = eth0:35 eth0:38
> >         bind interfaces only=yes
> >   log level = 3
> >
> >   ldap server require strong auth = no
> >
> >   tls enabled  = yes
> >   tls keyfile  = /var/lib/samba/private/tls/key.pem
> >   tls certfile = /var/lib/samba/private/tls/cert.pem
> >   tls cafile   = /var/lib/samba/private/tls/ca.pem
> >
> > [netlogon]
> >   path = /var/lib/samba/sysvol/hq.kontrast/scripts
> >   read only = No
> >
> > [sysvol]
> >   path = /var/lib/samba/sysvol
> >   read only = No
> >
> >
> >
> >
> >
> >
> > OLIVER WERNER
> > Systemadministrator
> >
> >
> >
> >
> >
> > Kontrast Communication Services GmbH
> > Grafenberger Allee 100, 40237 Düsseldorf, Germany
> >
> > Fon  +49-211-91505-500
> > Fax  +49-211-91505-530
> > www.kontrast.de <http://www.kontrast.de/>
> >
> > Amtsgericht Düsseldorf: HRB 26934
> > Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der
> Vlist
> >
> >  <https://www.facebook.com/kontrast.communication>
> <https://twitter.com/KONTRAST_de>
> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh>
>
<http://www.linkedin.com/company/kontrast-communication-services-gmbh>
> <https://vimeo.com/kontrastcs>    
<http://instagram.com/kontrast_de>
> >
> > Note: The information contained in this message may be privileged and
> confidential and protected from disclosure. If the reader of this message
> is not the intended recipient, or an employee or agent responsible for
> delivering this message to the intended recipient, you are hereby notified
> that any dissemination, distribution or copying of this communication is
> strictly prohibited. If you have received this communication in error,
> please notify us immediately by replying to the message and deleting it
> from your computer.
> >
> > Please consider the environment and only print this if required.
> >
> >
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

L.P.H. van Belle

2016-May-04 08:57 UTC

head link

[Samba] Fwd: win bind extremely slow after Upgrade to 4.2

Oeps small correction.

 
> Other option is to use the sernet packages. ( now 4.2.12 ) 
the sernet packages  now 4.2.11.

 

Greetz, 

 

Louis

 

 


Van: L.P.H. van Belle [mailto:belle at bazuin.nl] 
Verzonden: woensdag 4 mei 2016 10:54
Aan: 'samba at lists.samba.org'
Onderwerp: RE: [Samba] Fwd: win bind extremely slow after Upgrade to 4.2


 

Hai Oliver/andreas, 

 

Best is to skip the debian 4.2.10 and 4.3.8 packages. 

Only the last 4.4.3 is imo working correct. 

I upgraded all my servers to 4.4.3 yesterday, and people noticed the network is
responding faster.

 

You can use my packages for debian jessie (amd64 only) 

http://downloads.van-belle.nl/samba4/

 

Or recompile 4.4.3 from debian sid. 

If you need help with this, just mail me. 

 

The packages i made, dont conflict with the debian packages. 

You can test 4.4.3 and go back to debian samba. 

Sample policy output. 

apt-cache policy samba

samba:

  Installed: 2:4.4.3-lvb1

  Candidate: 2:4.4.3-lvb1

  Package pin: 2:4.4.3-lvb1

  Version table:

 *** 2:4.4.3-lvb1 500

        500 http://xxx.domain.tld/debian/ jessie/ Packages

        100 /var/lib/dpkg/status

    99:4.2.11-9 500

        300 https://download.sernet.de/packages/samba/4.2/debian/ jessie/main
amd64 Packages

     2:4.2.10+dfsg-0+deb8u2 500

        500 http://security.debian.org/ jessie/updates/main amd64 Packages

     2:4.1.17+dfsg-2+deb8u2 500

        500 http://ftp.nl.debian.org/debian/ jessie/main amd64 Packages

 

Its setup to be compatible with the debian packages, so if update/upgrade it wil
follow the highest samba version.

 

Other option is to use the sernet packages. ( now 4.2.12 ) 

 

Notice with my packages. 

Due to some dependecie changes from debian stable and unstable, you get a notice
that

One file is also in another package.  Fix : apt-get ?f install and overwrite it.

Winbind complains in the log about a db missing.  Fix : apt-get install
samba-dsdb-modules

 

I?ll fix that later on, i?ll have to check the debian bug list if there is known
about above.

 

 

Greetz, 

 

Louis

 

 

 
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner
> Verzonden: woensdag 4 mei 2016 10:29
> Aan: samba
> Onderwerp: [Samba] Fwd: win bind extremely slow after Upgrade to 4.2
> 
> i have now try some other options:
> 
> - Fresh install of Samba AD Member
> - rejoin Member
> - change from winbindd to winbind
> 
> But nothing helps. Also really slow
> 
> 
> 
> time ls -lisa /daten/samba/
> insgesamt 48
> 8222  4 drwxrwxrwx  8 postmaster.postmaster kontrast_ws_quack_fischer
> 4096 Mai  3 15:52 .
>    2  4 drwxr-xr-x 12 root                  root
> 4096 Jan 25 15:30 ..
>  145 12 -rwxr--r--  1 oliver.werner         domain users
> 10244 Mai  4 07:11 .DS_Store
> 1173  4 -rwxr--r--  1 oliver.werner         domain users
> 4096 Apr 27 10:14 ._.DS_Store
> 8624  4 drwxr-xr-x  3 oliver.werner         domain users
> 4096 Apr 27 10:38 Neuer Ordner
> 8636  4 drwxr-xr-x  2 oliver.werner         domain users
> 4096 Mai  3 15:52 Neuer Ordner 2
> 8637  4 drwxr-xr-x  2 oliver.werner         domain users
> 4096 Mai  3 15:52 Neuer Ordner 3
> 8638  4 drwxr-xr-x  2 oliver.werner         domain users
> 4096 Mai  3 15:52 Neuer Ordner 4
> 8639  4 drwxr-xr-x  2 oliver.werner         domain users
> 4096 Mai  3 15:52 Neuer Ordner 5
> 8640  4 drwxr-xr-x  2 oliver.werner         domain users
> 4096 Mai  3 15:52 Neuer Ordner 6
> 
> real      0m11.759s
> user      0m0.004s
> sys 0m0.000s
> 
> 
> 
> time id oliver.werner
> uid=10150(oliver.werner) gid=10009(domain users) Gruppen=10009(domain
> users),1396(kontrastvpn_it),1088(kontrast_administration),1344(kontrast_al
> pina),1393(kontrast_bdsg),1028(kontrast_intern),1070(kontrast_medien_foto)
> ,1053(kontrast_medien_video),1096(kontrast_obi),1359(kontrast_terminal),11
> 05(kontrast_vemas),1025(kontrast_vodafone_d2),1326(kontrast_webadminlive),
> 1363(kontrast_ingenhoven_architects),1364(kontrast_jw_ostendorf),1101(BUIL
> TIN\users),1100(BUILTIN\administrators)
> 
> real      0m13.560s
> user      0m0.000s
> sys 0m0.004s
> 
> time wbinfo -u | wc -l
> 0
> 
> real      0m10.037s
> user      0m0.008s
> sys 0m0.000s
> OLIVER WERNER
> Systemadministrator
> 
> 
> 
> 
> 
> Kontrast Communication Services GmbH
> Grafenberger Allee 100, 40237 Düsseldorf, Germany
> 
> Fon  +49-211-91505-500
> Fax  +49-211-91505-530
> www.kontrast.de <http://www.kontrast.de/>
> 
> Amtsgericht Düsseldorf: HRB 26934
> Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der
> Vlist
> 
>  <https://www.facebook.com/kontrast.communication>
> <https://twitter.com/KONTRAST_de>
> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh>
>
<http://www.linkedin.com/company/kontrast-communication-services-gmbh>
> <https://vimeo.com/kontrastcs>    
<http://instagram.com/kontrast_de>
> 
> Note: The information contained in this message may be privileged and
> confidential and protected from disclosure. If the reader of this message
> is not the intended recipient, or an employee or agent responsible for
> delivering this message to the intended recipient, you are hereby notified
> that any dissemination, distribution or copying of this communication is
> strictly prohibited. If you have received this communication in error,
> please notify us immediately by replying to the message and deleting it
> from your computer.
> 
> Please consider the environment and only print this if required.
> 
> 
> > Anfang der weitergeleiteten Nachricht:
> >
> > Von: Oliver Werner <oliver.werner at kontrast.de>
> > Betreff: win bind extremely slow after Upgrade to 4.2
> > Datum: 27. April 2016 um 09:36:01 MESZ
> > An: samba at lists.samba.org
> >
> > Hi,
> >
> > we have upgrade an Samba Member (DCs already upgraded) from Samba
4.1.17
> to Samba 4.2.10.
> >
> > On DCs work fine after install winbind.
> >
> > But our member extremely slow.
> >
> > Connect to the Share takes 2-3 minutes and directory listing need 2-5
> minutes.
> >
> >
> > wbinfo -u takes around 20 seconds and will not return output
> >
> > wbinfo -g takes 3 seconds and show my groups
> >
> > id user.name takes 20 seconds and shows information  of the user and
its
> groups
> >
> >
> > smb.conf for samba member:
> >
> > [global]
> >        netbios name = PL0024
> >        security = ADS
> >        workgroup = HQKONTRAST
> >        realm = hq.kontrast
> >
> >        log file = /var/log/samba/%m.log
> >        log level = 1
> >
> >        dedicated keytab file = /etc/krb5.keytab
> >        kerberos method = secrets and keytab
> >        winbind refresh tickets = yes
> >
> >        winbind trusted domains only = no
> >        winbind use default domain = yes
> >        winbind enum users  = yes
> >        winbind enum groups = yes
> >       winbind cache time = 60
> >
> >
> >        # Default idmap config used for BUILTIN and local
accounts/groups
> >        idmap config *:backend = tdb
> >        idmap config *:range = 500-1023
> >
> >        # idmap config for domain HQKONTRAST
> >        idmap config HQKONTRAST:backend = ad
> >        idmap config HQKONTRAST:schema_mode = rfc2307
> >        idmap config HQKONTRAST:range = 1024-99999
> >
> >        # Use settings from AD for login shell and home directory
> >        winbind nss info = rfc2307
> >
> > smb.conf DC:
> >
> > [global]
> >   workgroup = HQKONTRAST
> >   realm = HQ.KONTRAST
> >   netbios name = VL0227
> >   server role = active directory domain controller
> >   idmap_ldb:use rfc2307 = yes
> >   interfaces = eth0:35 eth0:38
> >         bind interfaces only=yes
> >   log level = 3
> >
> >   ldap server require strong auth = no
> >
> >   tls enabled  = yes
> >   tls keyfile  = /var/lib/samba/private/tls/key.pem
> >   tls certfile = /var/lib/samba/private/tls/cert.pem
> >   tls cafile   = /var/lib/samba/private/tls/ca.pem
> >
> > [netlogon]
> >   path = /var/lib/samba/sysvol/hq.kontrast/scripts
> >   read only = No
> >
> > [sysvol]
> >   path = /var/lib/samba/sysvol
> >   read only = No
> >
> >
> >
> >
> >
> >
> > OLIVER WERNER
> > Systemadministrator
> >
> >
> >
> >
> >
> > Kontrast Communication Services GmbH
> > Grafenberger Allee 100, 40237 Düsseldorf, Germany
> >
> > Fon  +49-211-91505-500
> > Fax  +49-211-91505-530
> > www.kontrast.de <http://www.kontrast.de/>
> >
> > Amtsgericht Düsseldorf: HRB 26934
> > Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der
> Vlist
> >
> >  <https://www.facebook.com/kontrast.communication>
> <https://twitter.com/KONTRAST_de>
> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh>
>
<http://www.linkedin.com/company/kontrast-communication-services-gmbh>
> <https://vimeo.com/kontrastcs>    
<http://instagram.com/kontrast_de>
> >
> > Note: The information contained in this message may be privileged and
> confidential and protected from disclosure. If the reader of this message
> is not the intended recipient, or an employee or agent responsible for
> delivering this message to the intended recipient, you are hereby notified
> that any dissemination, distribution or copying of this communication is
> strictly prohibited. If you have received this communication in error,
> please notify us immediately by replying to the message and deleting it
> from your computer.
> >
> > Please consider the environment and only print this if required.
> >
> >
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

Reasonably Related Threads

Search for more reasonably related threads

samba - Apr 2016 - win bind extremely slow after Upgrade to 4.2

[Samba] win bind extremely slow after Upgrade to 4.2

[Samba] win bind extremely slow after Upgrade to 4.2

[Samba] Fwd: win bind extremely slow after Upgrade to 4.2

[Samba] Fwd: win bind extremely slow after Upgrade to 4.2

[Samba] Fwd: win bind extremely slow after Upgrade to 4.2

[Samba] Fwd: win bind extremely slow after Upgrade to 4.2

Reasonably Related Threads