Hi,
we have upgrade an Samba Member (DCs already upgraded) from Samba 4.1.17 to
Samba 4.2.10.
On DCs work fine after install winbind.
But our member extremely slow.
Connect to the Share takes 2-3 minutes and directory listing need 2-5 minutes.
wbinfo -u takes around 20 seconds and will not return output
wbinfo -g takes 3 seconds and show my groups
id user.name takes 20 seconds and shows information of the user and its groups
smb.conf for samba member:
[global]
netbios name = PL0024
security = ADS
workgroup = HQKONTRAST
realm = hq.kontrast
log file = /var/log/samba/%m.log
log level = 1
dedicated keytab file = /etc/krb5.keytab
kerberos method = secrets and keytab
winbind refresh tickets = yes
winbind trusted domains only = no
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
winbind cache time = 60
# Default idmap config used for BUILTIN and local accounts/groups
idmap config *:backend = tdb
idmap config *:range = 500-1023
# idmap config for domain HQKONTRAST
idmap config HQKONTRAST:backend = ad
idmap config HQKONTRAST:schema_mode = rfc2307
idmap config HQKONTRAST:range = 1024-99999
# Use settings from AD for login shell and home directory
winbind nss info = rfc2307
smb.conf DC:
[global]
workgroup = HQKONTRAST
realm = HQ.KONTRAST
netbios name = VL0227
server role = active directory domain controller
idmap_ldb:use rfc2307 = yes
interfaces = eth0:35 eth0:38
bind interfaces only=yes
log level = 3
ldap server require strong auth = no
tls enabled = yes
tls keyfile = /var/lib/samba/private/tls/key.pem
tls certfile = /var/lib/samba/private/tls/cert.pem
tls cafile = /var/lib/samba/private/tls/ca.pem
[netlogon]
path = /var/lib/samba/sysvol/hq.kontrast/scripts
read only = No
[sysvol]
path = /var/lib/samba/sysvol
read only = No
OLIVER WERNER
Systemadministrator
Kontrast Communication Services GmbH
Grafenberger Allee 100, 40237 Düsseldorf, Germany
Fon +49-211-91505-500
Fax +49-211-91505-530
www.kontrast.de <http://www.kontrast.de/>
Amtsgericht Düsseldorf: HRB 26934
Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist
<https://www.facebook.com/kontrast.communication>
<https://twitter.com/KONTRAST_de>
<http://www.xing.com/companies/kontrastcommunicationservicesgmbh>
<http://www.linkedin.com/company/kontrast-communication-services-gmbh>
<https://vimeo.com/kontrastcs>
<http://instagram.com/kontrast_de>
Note: The information contained in this message may be privileged and
confidential and protected from disclosure. If the reader of this message is not
the intended recipient, or an employee or agent responsible for delivering this
message to the intended recipient, you are hereby notified that any
dissemination, distribution or copying of this communication is strictly
prohibited. If you have received this communication in error, please notify us
immediately by replying to the message and deleting it from your computer.
Please consider the environment and only print this if required.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL:
<http://lists.samba.org/pipermail/samba/attachments/20160427/8d0707cb/signature.sig>
2016-04-27 9:36 GMT+02:00 Oliver Werner <oliver.werner at kontrast.de>:> Hi, > > we have upgrade an Samba Member (DCs already upgraded) from Samba 4.1.17 to Samba 4.2.10. > > On DCs work fine after install winbind. > > But our member extremely slow. > > Connect to the Share takes 2-3 minutes and directory listing need 2-5 minutes. > > > wbinfo -u takes around 20 seconds and will not return output > > wbinfo -g takes 3 seconds and show my groups > > id user.name takes 20 seconds and shows information of the user and its groups > > > smb.conf for samba member: > > [global] > netbios name = PL0024 > security = ADS > workgroup = HQKONTRAST > realm = hq.kontrast > > log file = /var/log/samba/%m.log > log level = 1 > > dedicated keytab file = /etc/krb5.keytab > kerberos method = secrets and keytab > winbind refresh tickets = yes > > winbind trusted domains only = no > winbind use default domain = yes > winbind enum users = yes > winbind enum groups = yes > winbind cache time = 60 > > > # Default idmap config used for BUILTIN and local accounts/groups > idmap config *:backend = tdb > idmap config *:range = 500-1023 > > # idmap config for domain HQKONTRAST > idmap config HQKONTRAST:backend = ad > idmap config HQKONTRAST:schema_mode = rfc2307 > idmap config HQKONTRAST:range = 1024-99999 > > # Use settings from AD for login shell and home directory > winbind nss info = rfc2307 > > smb.conf DC: > > [global] > workgroup = HQKONTRAST > realm = HQ.KONTRAST > netbios name = VL0227 > server role = active directory domain controller > idmap_ldb:use rfc2307 = yes > interfaces = eth0:35 eth0:38 > bind interfaces only=yes > log level = 3 > > ldap server require strong auth = no > > tls enabled = yes > tls keyfile = /var/lib/samba/private/tls/key.pem > tls certfile = /var/lib/samba/private/tls/cert.pem > tls cafile = /var/lib/samba/private/tls/ca.pem > > [netlogon] > path = /var/lib/samba/sysvol/hq.kontrast/scripts > read only = No > > [sysvol] > path = /var/lib/samba/sysvol > read only = No > > > > > > > OLIVER WERNER > Systemadministrator > > > > > > Kontrast Communication Services GmbH > Grafenberger Allee 100, 40237 Düsseldorf, Germany > > Fon +49-211-91505-500 > Fax +49-211-91505-530 > www.kontrast.de <http://www.kontrast.de/> > > Amtsgericht Düsseldorf: HRB 26934 > Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist > > <https://www.facebook.com/kontrast.communication> <https://twitter.com/KONTRAST_de> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh> <http://www.linkedin.com/company/kontrast-communication-services-gmbh> <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de> > > Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. > > Please consider the environment and only print this if required. > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/sambaHello, I'm also affected by the same problem after an upgrade from Samba-4.1 to Samba-4.2 (Debian security update). I have found that the winbind slowdown affect the server and the clients. To test the speed I launch the following command : wbinfo --user-info=myuser1 --user-info=myuser2 --user-info=myuser3 .... (+30 users) When I have switched the server from the "winbind" service to "winbindd", the winbind lookups are slower but not dramatically. Before the update the command take 1 second and now 3 seconds. I can see visually the difference. On the clients the user/group enumeration are disabled. The command take now 20 seconds to lookup the 30 users. Is this normal ? is This due to the need of the AD connections to be signed on samba 4.2 ? I don't know how I can debug there winbind lookups. Thanks for the help ! Baptiste.
Oliver Werner
2016-May-04 08:29 UTC
[Samba] Fwd: win bind extremely slow after Upgrade to 4.2
i have now try some other options: - Fresh install of Samba AD Member - rejoin Member - change from winbindd to winbind But nothing helps. Also really slow time ls -lisa /daten/samba/ insgesamt 48 8222 4 drwxrwxrwx 8 postmaster.postmaster kontrast_ws_quack_fischer 4096 Mai 3 15:52 . 2 4 drwxr-xr-x 12 root root 4096 Jan 25 15:30 .. 145 12 -rwxr--r-- 1 oliver.werner domain users 10244 Mai 4 07:11 .DS_Store 1173 4 -rwxr--r-- 1 oliver.werner domain users 4096 Apr 27 10:14 ._.DS_Store 8624 4 drwxr-xr-x 3 oliver.werner domain users 4096 Apr 27 10:38 Neuer Ordner 8636 4 drwxr-xr-x 2 oliver.werner domain users 4096 Mai 3 15:52 Neuer Ordner 2 8637 4 drwxr-xr-x 2 oliver.werner domain users 4096 Mai 3 15:52 Neuer Ordner 3 8638 4 drwxr-xr-x 2 oliver.werner domain users 4096 Mai 3 15:52 Neuer Ordner 4 8639 4 drwxr-xr-x 2 oliver.werner domain users 4096 Mai 3 15:52 Neuer Ordner 5 8640 4 drwxr-xr-x 2 oliver.werner domain users 4096 Mai 3 15:52 Neuer Ordner 6 real 0m11.759s user 0m0.004s sys 0m0.000s time id oliver.werner uid=10150(oliver.werner) gid=10009(domain users) Gruppen=10009(domain users),1396(kontrastvpn_it),1088(kontrast_administration),1344(kontrast_alpina),1393(kontrast_bdsg),1028(kontrast_intern),1070(kontrast_medien_foto),1053(kontrast_medien_video),1096(kontrast_obi),1359(kontrast_terminal),1105(kontrast_vemas),1025(kontrast_vodafone_d2),1326(kontrast_webadminlive),1363(kontrast_ingenhoven_architects),1364(kontrast_jw_ostendorf),1101(BUILTIN\users),1100(BUILTIN\administrators) real 0m13.560s user 0m0.000s sys 0m0.004s time wbinfo -u | wc -l 0 real 0m10.037s user 0m0.008s sys 0m0.000s OLIVER WERNER Systemadministrator Kontrast Communication Services GmbH Grafenberger Allee 100, 40237 Düsseldorf, Germany Fon +49-211-91505-500 Fax +49-211-91505-530 www.kontrast.de <http://www.kontrast.de/> Amtsgericht Düsseldorf: HRB 26934 Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist <https://www.facebook.com/kontrast.communication> <https://twitter.com/KONTRAST_de> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh> <http://www.linkedin.com/company/kontrast-communication-services-gmbh> <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de> Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Please consider the environment and only print this if required.> Anfang der weitergeleiteten Nachricht: > > Von: Oliver Werner <oliver.werner at kontrast.de> > Betreff: win bind extremely slow after Upgrade to 4.2 > Datum: 27. April 2016 um 09:36:01 MESZ > An: samba at lists.samba.org > > Hi, > > we have upgrade an Samba Member (DCs already upgraded) from Samba 4.1.17 to Samba 4.2.10. > > On DCs work fine after install winbind. > > But our member extremely slow. > > Connect to the Share takes 2-3 minutes and directory listing need 2-5 minutes. > > > wbinfo -u takes around 20 seconds and will not return output > > wbinfo -g takes 3 seconds and show my groups > > id user.name takes 20 seconds and shows information of the user and its groups > > > smb.conf for samba member: > > [global] > netbios name = PL0024 > security = ADS > workgroup = HQKONTRAST > realm = hq.kontrast > > log file = /var/log/samba/%m.log > log level = 1 > > dedicated keytab file = /etc/krb5.keytab > kerberos method = secrets and keytab > winbind refresh tickets = yes > > winbind trusted domains only = no > winbind use default domain = yes > winbind enum users = yes > winbind enum groups = yes > winbind cache time = 60 > > > # Default idmap config used for BUILTIN and local accounts/groups > idmap config *:backend = tdb > idmap config *:range = 500-1023 > > # idmap config for domain HQKONTRAST > idmap config HQKONTRAST:backend = ad > idmap config HQKONTRAST:schema_mode = rfc2307 > idmap config HQKONTRAST:range = 1024-99999 > > # Use settings from AD for login shell and home directory > winbind nss info = rfc2307 > > smb.conf DC: > > [global] > workgroup = HQKONTRAST > realm = HQ.KONTRAST > netbios name = VL0227 > server role = active directory domain controller > idmap_ldb:use rfc2307 = yes > interfaces = eth0:35 eth0:38 > bind interfaces only=yes > log level = 3 > > ldap server require strong auth = no > > tls enabled = yes > tls keyfile = /var/lib/samba/private/tls/key.pem > tls certfile = /var/lib/samba/private/tls/cert.pem > tls cafile = /var/lib/samba/private/tls/ca.pem > > [netlogon] > path = /var/lib/samba/sysvol/hq.kontrast/scripts > read only = No > > [sysvol] > path = /var/lib/samba/sysvol > read only = No > > > > > > > OLIVER WERNER > Systemadministrator > > > > > > Kontrast Communication Services GmbH > Grafenberger Allee 100, 40237 Düsseldorf, Germany > > Fon +49-211-91505-500 > Fax +49-211-91505-530 > www.kontrast.de <http://www.kontrast.de/> > > Amtsgericht Düsseldorf: HRB 26934 > Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist > > <https://www.facebook.com/kontrast.communication> <https://twitter.com/KONTRAST_de> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh> <http://www.linkedin.com/company/kontrast-communication-services-gmbh> <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de> > > Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. > > Please consider the environment and only print this if required. > >-------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 842 bytes Desc: Message signed with OpenPGP using GPGMail URL: <http://lists.samba.org/pipermail/samba/attachments/20160504/125641ac/signature.sig>
Andreas Hauffe
2016-May-04 08:46 UTC
[Samba] Fwd: win bind extremely slow after Upgrade to 4.2
Hi, we have the same problem here and no solution. Andreas Am 04.05.2016 um 10:29 schrieb Oliver Werner:> i have now try some other options: > > - Fresh install of Samba AD Member > - rejoin Member > - change from winbindd to winbind > > But nothing helps. Also really slow > > > > time ls -lisa /daten/samba/ > insgesamt 48 > 8222 4 drwxrwxrwx 8 postmaster.postmaster kontrast_ws_quack_fischer 4096 Mai 3 15:52 . > 2 4 drwxr-xr-x 12 root root 4096 Jan 25 15:30 .. > 145 12 -rwxr--r-- 1 oliver.werner domain users 10244 Mai 4 07:11 .DS_Store > 1173 4 -rwxr--r-- 1 oliver.werner domain users 4096 Apr 27 10:14 ._.DS_Store > 8624 4 drwxr-xr-x 3 oliver.werner domain users 4096 Apr 27 10:38 Neuer Ordner > 8636 4 drwxr-xr-x 2 oliver.werner domain users 4096 Mai 3 15:52 Neuer Ordner 2 > 8637 4 drwxr-xr-x 2 oliver.werner domain users 4096 Mai 3 15:52 Neuer Ordner 3 > 8638 4 drwxr-xr-x 2 oliver.werner domain users 4096 Mai 3 15:52 Neuer Ordner 4 > 8639 4 drwxr-xr-x 2 oliver.werner domain users 4096 Mai 3 15:52 Neuer Ordner 5 > 8640 4 drwxr-xr-x 2 oliver.werner domain users 4096 Mai 3 15:52 Neuer Ordner 6 > > real 0m11.759s > user 0m0.004s > sys 0m0.000s > > > > time id oliver.werner > uid=10150(oliver.werner) gid=10009(domain users) Gruppen=10009(domain users),1396(kontrastvpn_it),1088(kontrast_administration),1344(kontrast_alpina),1393(kontrast_bdsg),1028(kontrast_intern),1070(kontrast_medien_foto),1053(kontrast_medien_video),1096(kontrast_obi),1359(kontrast_terminal),1105(kontrast_vemas),1025(kontrast_vodafone_d2),1326(kontrast_webadminlive),1363(kontrast_ingenhoven_architects),1364(kontrast_jw_ostendorf),1101(BUILTIN\users),1100(BUILTIN\administrators) > > real 0m13.560s > user 0m0.000s > sys 0m0.004s > > time wbinfo -u | wc -l > 0 > > real 0m10.037s > user 0m0.008s > sys 0m0.000s > OLIVER WERNER > Systemadministrator > > > > > > Kontrast Communication Services GmbH > Grafenberger Allee 100, 40237 Düsseldorf, Germany > > Fon +49-211-91505-500 > Fax +49-211-91505-530 > www.kontrast.de <http://www.kontrast.de/> > > Amtsgericht Düsseldorf: HRB 26934 > Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist > > <https://www.facebook.com/kontrast.communication> <https://twitter.com/KONTRAST_de> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh> <http://www.linkedin.com/company/kontrast-communication-services-gmbh> <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de> > > Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. > > Please consider the environment and only print this if required. > > >> Anfang der weitergeleiteten Nachricht: >> >> Von: Oliver Werner <oliver.werner at kontrast.de> >> Betreff: win bind extremely slow after Upgrade to 4.2 >> Datum: 27. April 2016 um 09:36:01 MESZ >> An: samba at lists.samba.org >> >> Hi, >> >> we have upgrade an Samba Member (DCs already upgraded) from Samba 4.1.17 to Samba 4.2.10. >> >> On DCs work fine after install winbind. >> >> But our member extremely slow. >> >> Connect to the Share takes 2-3 minutes and directory listing need 2-5 minutes. >> >> >> wbinfo -u takes around 20 seconds and will not return output >> >> wbinfo -g takes 3 seconds and show my groups >> >> id user.name takes 20 seconds and shows information of the user and its groups >> >> >> smb.conf for samba member: >> >> [global] >> netbios name = PL0024 >> security = ADS >> workgroup = HQKONTRAST >> realm = hq.kontrast >> >> log file = /var/log/samba/%m.log >> log level = 1 >> >> dedicated keytab file = /etc/krb5.keytab >> kerberos method = secrets and keytab >> winbind refresh tickets = yes >> >> winbind trusted domains only = no >> winbind use default domain = yes >> winbind enum users = yes >> winbind enum groups = yes >> winbind cache time = 60 >> >> >> # Default idmap config used for BUILTIN and local accounts/groups >> idmap config *:backend = tdb >> idmap config *:range = 500-1023 >> >> # idmap config for domain HQKONTRAST >> idmap config HQKONTRAST:backend = ad >> idmap config HQKONTRAST:schema_mode = rfc2307 >> idmap config HQKONTRAST:range = 1024-99999 >> >> # Use settings from AD for login shell and home directory >> winbind nss info = rfc2307 >> >> smb.conf DC: >> >> [global] >> workgroup = HQKONTRAST >> realm = HQ.KONTRAST >> netbios name = VL0227 >> server role = active directory domain controller >> idmap_ldb:use rfc2307 = yes >> interfaces = eth0:35 eth0:38 >> bind interfaces only=yes >> log level = 3 >> >> ldap server require strong auth = no >> >> tls enabled = yes >> tls keyfile = /var/lib/samba/private/tls/key.pem >> tls certfile = /var/lib/samba/private/tls/cert.pem >> tls cafile = /var/lib/samba/private/tls/ca.pem >> >> [netlogon] >> path = /var/lib/samba/sysvol/hq.kontrast/scripts >> read only = No >> >> [sysvol] >> path = /var/lib/samba/sysvol >> read only = No >> >> >> >> >> >> >> OLIVER WERNER >> Systemadministrator >> >> >> >> >> >> Kontrast Communication Services GmbH >> Grafenberger Allee 100, 40237 Düsseldorf, Germany >> >> Fon +49-211-91505-500 >> Fax +49-211-91505-530 >> www.kontrast.de <http://www.kontrast.de/> >> >> Amtsgericht Düsseldorf: HRB 26934 >> Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist >> >> <https://www.facebook.com/kontrast.communication> <https://twitter.com/KONTRAST_de> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh> <http://www.linkedin.com/company/kontrast-communication-services-gmbh> <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de> >> >> Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. >> >> Please consider the environment and only print this if required. >> >> > >
L.P.H. van Belle
2016-May-04 08:54 UTC
[Samba] Fwd: win bind extremely slow after Upgrade to 4.2
Hai Oliver/andreas, Best is to skip the debian 4.2.10 and 4.3.8 packages. Only the last 4.4.3 is imo working correct. I upgraded all my servers to 4.4.3 yesterday, and people noticed the network is responding faster. You can use my packages for debian jessie (amd64 only) http://downloads.van-belle.nl/samba4/ Or recompile 4.4.3 from debian sid. If you need help with this, just mail me. The packages i made, dont conflict with the debian packages. You can test 4.4.3 and go back to debian samba. Sample policy output. apt-cache policy samba samba: Installed: 2:4.4.3-lvb1 Candidate: 2:4.4.3-lvb1 Package pin: 2:4.4.3-lvb1 Version table: *** 2:4.4.3-lvb1 500 500 http://xxx.domain.tld/debian/ jessie/ Packages 100 /var/lib/dpkg/status 99:4.2.11-9 500 300 https://download.sernet.de/packages/samba/4.2/debian/ jessie/main amd64 Packages 2:4.2.10+dfsg-0+deb8u2 500 500 http://security.debian.org/ jessie/updates/main amd64 Packages 2:4.1.17+dfsg-2+deb8u2 500 500 http://ftp.nl.debian.org/debian/ jessie/main amd64 Packages Its setup to be compatible with the debian packages, so if update/upgrade it wil follow the highest samba version. Other option is to use the sernet packages. ( now 4.2.12 ) Notice with my packages. Due to some dependecie changes from debian stable and unstable, you get a notice that One file is also in another package. Fix : apt-get ?f install and overwrite it. Winbind complains in the log about a db missing. Fix : apt-get install samba-dsdb-modules I?ll fix that later on, i?ll have to check the debian bug list if there is known about above. Greetz, Louis> -----Oorspronkelijk bericht-----> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner> Verzonden: woensdag 4 mei 2016 10:29> Aan: samba> Onderwerp: [Samba] Fwd: win bind extremely slow after Upgrade to 4.2>> i have now try some other options:>> - Fresh install of Samba AD Member> - rejoin Member> - change from winbindd to winbind>> But nothing helps. Also really slow>>>> time ls -lisa /daten/samba/> insgesamt 48> 8222 4 drwxrwxrwx 8 postmaster.postmaster kontrast_ws_quack_fischer> 4096 Mai 3 15:52 .> 2 4 drwxr-xr-x 12 root root> 4096 Jan 25 15:30 ..> 145 12 -rwxr--r-- 1 oliver.werner domain users> 10244 Mai 4 07:11 .DS_Store> 1173 4 -rwxr--r-- 1 oliver.werner domain users> 4096 Apr 27 10:14 ._.DS_Store> 8624 4 drwxr-xr-x 3 oliver.werner domain users> 4096 Apr 27 10:38 Neuer Ordner> 8636 4 drwxr-xr-x 2 oliver.werner domain users> 4096 Mai 3 15:52 Neuer Ordner 2> 8637 4 drwxr-xr-x 2 oliver.werner domain users> 4096 Mai 3 15:52 Neuer Ordner 3> 8638 4 drwxr-xr-x 2 oliver.werner domain users> 4096 Mai 3 15:52 Neuer Ordner 4> 8639 4 drwxr-xr-x 2 oliver.werner domain users> 4096 Mai 3 15:52 Neuer Ordner 5> 8640 4 drwxr-xr-x 2 oliver.werner domain users> 4096 Mai 3 15:52 Neuer Ordner 6>> real 0m11.759s> user 0m0.004s> sys 0m0.000s>>>> time id oliver.werner> uid=10150(oliver.werner) gid=10009(domain users) Gruppen=10009(domain> users),1396(kontrastvpn_it),1088(kontrast_administration),1344(kontrast_al> pina),1393(kontrast_bdsg),1028(kontrast_intern),1070(kontrast_medien_foto)> ,1053(kontrast_medien_video),1096(kontrast_obi),1359(kontrast_terminal),11> 05(kontrast_vemas),1025(kontrast_vodafone_d2),1326(kontrast_webadminlive),> 1363(kontrast_ingenhoven_architects),1364(kontrast_jw_ostendorf),1101(BUIL> TIN\users),1100(BUILTIN\administrators)>> real 0m13.560s> user 0m0.000s> sys 0m0.004s>> time wbinfo -u | wc -l> 0>> real 0m10.037s> user 0m0.008s> sys 0m0.000s> OLIVER WERNER> Systemadministrator>>>>>> Kontrast Communication Services GmbH> Grafenberger Allee 100, 40237 Düsseldorf, Germany>> Fon +49-211-91505-500> Fax +49-211-91505-530> www.kontrast.de <http://www.kontrast.de/>>> Amtsgericht Düsseldorf: HRB 26934> Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der> Vlist>> <https://www.facebook.com/kontrast.communication>> <https://twitter.com/KONTRAST_de>> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh>> <http://www.linkedin.com/company/kontrast-communication-services-gmbh>> <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de>>> Note: The information contained in this message may be privileged and> confidential and protected from disclosure. If the reader of this message> is not the intended recipient, or an employee or agent responsible for> delivering this message to the intended recipient, you are hereby notified> that any dissemination, distribution or copying of this communication is> strictly prohibited. If you have received this communication in error,> please notify us immediately by replying to the message and deleting it> from your computer.>> Please consider the environment and only print this if required.>>> > Anfang der weitergeleiteten Nachricht:> >> > Von: Oliver Werner <oliver.werner at kontrast.de>> > Betreff: win bind extremely slow after Upgrade to 4.2> > Datum: 27. April 2016 um 09:36:01 MESZ> > An: samba at lists.samba.org> >> > Hi,> >> > we have upgrade an Samba Member (DCs already upgraded) from Samba 4.1.17> to Samba 4.2.10.> >> > On DCs work fine after install winbind.> >> > But our member extremely slow.> >> > Connect to the Share takes 2-3 minutes and directory listing need 2-5> minutes.> >> >> > wbinfo -u takes around 20 seconds and will not return output> >> > wbinfo -g takes 3 seconds and show my groups> >> > id user.name takes 20 seconds and shows information of the user and its> groups> >> >> > smb.conf for samba member:> >> > [global]> > netbios name = PL0024> > security = ADS> > workgroup = HQKONTRAST> > realm = hq.kontrast> >> > log file = /var/log/samba/%m.log> > log level = 1> >> > dedicated keytab file = /etc/krb5.keytab> > kerberos method = secrets and keytab> > winbind refresh tickets = yes> >> > winbind trusted domains only = no> > winbind use default domain = yes> > winbind enum users = yes> > winbind enum groups = yes> > winbind cache time = 60> >> >> > # Default idmap config used for BUILTIN and local accounts/groups> > idmap config *:backend = tdb> > idmap config *:range = 500-1023> >> > # idmap config for domain HQKONTRAST> > idmap config HQKONTRAST:backend = ad> > idmap config HQKONTRAST:schema_mode = rfc2307> > idmap config HQKONTRAST:range = 1024-99999> >> > # Use settings from AD for login shell and home directory> > winbind nss info = rfc2307> >> > smb.conf DC:> >> > [global]> > workgroup = HQKONTRAST> > realm = HQ.KONTRAST> > netbios name = VL0227> > server role = active directory domain controller> > idmap_ldb:use rfc2307 = yes> > interfaces = eth0:35 eth0:38> > bind interfaces only=yes> > log level = 3> >> > ldap server require strong auth = no> >> > tls enabled = yes> > tls keyfile = /var/lib/samba/private/tls/key.pem> > tls certfile = /var/lib/samba/private/tls/cert.pem> > tls cafile = /var/lib/samba/private/tls/ca.pem> >> > [netlogon]> > path = /var/lib/samba/sysvol/hq.kontrast/scripts> > read only = No> >> > [sysvol]> > path = /var/lib/samba/sysvol> > read only = No> >> >> >> >> >> >> > OLIVER WERNER> > Systemadministrator> >> >> >> >> >> > Kontrast Communication Services GmbH> > Grafenberger Allee 100, 40237 Düsseldorf, Germany> >> > Fon +49-211-91505-500> > Fax +49-211-91505-530> > www.kontrast.de <http://www.kontrast.de/>> >> > Amtsgericht Düsseldorf: HRB 26934> > Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der> Vlist> >> > <https://www.facebook.com/kontrast.communication>> <https://twitter.com/KONTRAST_de>> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh>> <http://www.linkedin.com/company/kontrast-communication-services-gmbh>> <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de>> >> > Note: The information contained in this message may be privileged and> confidential and protected from disclosure. If the reader of this message> is not the intended recipient, or an employee or agent responsible for> delivering this message to the intended recipient, you are hereby notified> that any dissemination, distribution or copying of this communication is> strictly prohibited. If you have received this communication in error,> please notify us immediately by replying to the message and deleting it> from your computer.> >> > Please consider the environment and only print this if required.> >> >>> --> To unsubscribe from this list go to the following URL and read the> instructions: https://lists.samba.org/mailman/options/samba
L.P.H. van Belle
2016-May-04 08:57 UTC
[Samba] Fwd: win bind extremely slow after Upgrade to 4.2
Oeps small correction.> Other option is to use the sernet packages. ( now 4.2.12 )the sernet packages now 4.2.11. Greetz, Louis Van: L.P.H. van Belle [mailto:belle at bazuin.nl] Verzonden: woensdag 4 mei 2016 10:54 Aan: 'samba at lists.samba.org' Onderwerp: RE: [Samba] Fwd: win bind extremely slow after Upgrade to 4.2 Hai Oliver/andreas, Best is to skip the debian 4.2.10 and 4.3.8 packages. Only the last 4.4.3 is imo working correct. I upgraded all my servers to 4.4.3 yesterday, and people noticed the network is responding faster. You can use my packages for debian jessie (amd64 only) http://downloads.van-belle.nl/samba4/ Or recompile 4.4.3 from debian sid. If you need help with this, just mail me. The packages i made, dont conflict with the debian packages. You can test 4.4.3 and go back to debian samba. Sample policy output. apt-cache policy samba samba: Installed: 2:4.4.3-lvb1 Candidate: 2:4.4.3-lvb1 Package pin: 2:4.4.3-lvb1 Version table: *** 2:4.4.3-lvb1 500 500 http://xxx.domain.tld/debian/ jessie/ Packages 100 /var/lib/dpkg/status 99:4.2.11-9 500 300 https://download.sernet.de/packages/samba/4.2/debian/ jessie/main amd64 Packages 2:4.2.10+dfsg-0+deb8u2 500 500 http://security.debian.org/ jessie/updates/main amd64 Packages 2:4.1.17+dfsg-2+deb8u2 500 500 http://ftp.nl.debian.org/debian/ jessie/main amd64 Packages Its setup to be compatible with the debian packages, so if update/upgrade it wil follow the highest samba version. Other option is to use the sernet packages. ( now 4.2.12 ) Notice with my packages. Due to some dependecie changes from debian stable and unstable, you get a notice that One file is also in another package. Fix : apt-get ?f install and overwrite it. Winbind complains in the log about a db missing. Fix : apt-get install samba-dsdb-modules I?ll fix that later on, i?ll have to check the debian bug list if there is known about above. Greetz, Louis> -----Oorspronkelijk bericht-----> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner> Verzonden: woensdag 4 mei 2016 10:29> Aan: samba> Onderwerp: [Samba] Fwd: win bind extremely slow after Upgrade to 4.2>> i have now try some other options:>> - Fresh install of Samba AD Member> - rejoin Member> - change from winbindd to winbind>> But nothing helps. Also really slow>>>> time ls -lisa /daten/samba/> insgesamt 48> 8222 4 drwxrwxrwx 8 postmaster.postmaster kontrast_ws_quack_fischer> 4096 Mai 3 15:52 .> 2 4 drwxr-xr-x 12 root root> 4096 Jan 25 15:30 ..> 145 12 -rwxr--r-- 1 oliver.werner domain users> 10244 Mai 4 07:11 .DS_Store> 1173 4 -rwxr--r-- 1 oliver.werner domain users> 4096 Apr 27 10:14 ._.DS_Store> 8624 4 drwxr-xr-x 3 oliver.werner domain users> 4096 Apr 27 10:38 Neuer Ordner> 8636 4 drwxr-xr-x 2 oliver.werner domain users> 4096 Mai 3 15:52 Neuer Ordner 2> 8637 4 drwxr-xr-x 2 oliver.werner domain users> 4096 Mai 3 15:52 Neuer Ordner 3> 8638 4 drwxr-xr-x 2 oliver.werner domain users> 4096 Mai 3 15:52 Neuer Ordner 4> 8639 4 drwxr-xr-x 2 oliver.werner domain users> 4096 Mai 3 15:52 Neuer Ordner 5> 8640 4 drwxr-xr-x 2 oliver.werner domain users> 4096 Mai 3 15:52 Neuer Ordner 6>> real 0m11.759s> user 0m0.004s> sys 0m0.000s>>>> time id oliver.werner> uid=10150(oliver.werner) gid=10009(domain users) Gruppen=10009(domain> users),1396(kontrastvpn_it),1088(kontrast_administration),1344(kontrast_al> pina),1393(kontrast_bdsg),1028(kontrast_intern),1070(kontrast_medien_foto)> ,1053(kontrast_medien_video),1096(kontrast_obi),1359(kontrast_terminal),11> 05(kontrast_vemas),1025(kontrast_vodafone_d2),1326(kontrast_webadminlive),> 1363(kontrast_ingenhoven_architects),1364(kontrast_jw_ostendorf),1101(BUIL> TIN\users),1100(BUILTIN\administrators)>> real 0m13.560s> user 0m0.000s> sys 0m0.004s>> time wbinfo -u | wc -l> 0>> real 0m10.037s> user 0m0.008s> sys 0m0.000s> OLIVER WERNER> Systemadministrator>>>>>> Kontrast Communication Services GmbH> Grafenberger Allee 100, 40237 Düsseldorf, Germany>> Fon +49-211-91505-500> Fax +49-211-91505-530> www.kontrast.de <http://www.kontrast.de/>>> Amtsgericht Düsseldorf: HRB 26934> Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der> Vlist>> <https://www.facebook.com/kontrast.communication>> <https://twitter.com/KONTRAST_de>> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh>> <http://www.linkedin.com/company/kontrast-communication-services-gmbh>> <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de>>> Note: The information contained in this message may be privileged and> confidential and protected from disclosure. If the reader of this message> is not the intended recipient, or an employee or agent responsible for> delivering this message to the intended recipient, you are hereby notified> that any dissemination, distribution or copying of this communication is> strictly prohibited. If you have received this communication in error,> please notify us immediately by replying to the message and deleting it> from your computer.>> Please consider the environment and only print this if required.>>> > Anfang der weitergeleiteten Nachricht:> >> > Von: Oliver Werner <oliver.werner at kontrast.de>> > Betreff: win bind extremely slow after Upgrade to 4.2> > Datum: 27. April 2016 um 09:36:01 MESZ> > An: samba at lists.samba.org> >> > Hi,> >> > we have upgrade an Samba Member (DCs already upgraded) from Samba 4.1.17> to Samba 4.2.10.> >> > On DCs work fine after install winbind.> >> > But our member extremely slow.> >> > Connect to the Share takes 2-3 minutes and directory listing need 2-5> minutes.> >> >> > wbinfo -u takes around 20 seconds and will not return output> >> > wbinfo -g takes 3 seconds and show my groups> >> > id user.name takes 20 seconds and shows information of the user and its> groups> >> >> > smb.conf for samba member:> >> > [global]> > netbios name = PL0024> > security = ADS> > workgroup = HQKONTRAST> > realm = hq.kontrast> >> > log file = /var/log/samba/%m.log> > log level = 1> >> > dedicated keytab file = /etc/krb5.keytab> > kerberos method = secrets and keytab> > winbind refresh tickets = yes> >> > winbind trusted domains only = no> > winbind use default domain = yes> > winbind enum users = yes> > winbind enum groups = yes> > winbind cache time = 60> >> >> > # Default idmap config used for BUILTIN and local accounts/groups> > idmap config *:backend = tdb> > idmap config *:range = 500-1023> >> > # idmap config for domain HQKONTRAST> > idmap config HQKONTRAST:backend = ad> > idmap config HQKONTRAST:schema_mode = rfc2307> > idmap config HQKONTRAST:range = 1024-99999> >> > # Use settings from AD for login shell and home directory> > winbind nss info = rfc2307> >> > smb.conf DC:> >> > [global]> > workgroup = HQKONTRAST> > realm = HQ.KONTRAST> > netbios name = VL0227> > server role = active directory domain controller> > idmap_ldb:use rfc2307 = yes> > interfaces = eth0:35 eth0:38> > bind interfaces only=yes> > log level = 3> >> > ldap server require strong auth = no> >> > tls enabled = yes> > tls keyfile = /var/lib/samba/private/tls/key.pem> > tls certfile = /var/lib/samba/private/tls/cert.pem> > tls cafile = /var/lib/samba/private/tls/ca.pem> >> > [netlogon]> > path = /var/lib/samba/sysvol/hq.kontrast/scripts> > read only = No> >> > [sysvol]> > path = /var/lib/samba/sysvol> > read only = No> >> >> >> >> >> >> > OLIVER WERNER> > Systemadministrator> >> >> >> >> >> > Kontrast Communication Services GmbH> > Grafenberger Allee 100, 40237 Düsseldorf, Germany> >> > Fon +49-211-91505-500> > Fax +49-211-91505-530> > www.kontrast.de <http://www.kontrast.de/>> >> > Amtsgericht Düsseldorf: HRB 26934> > Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der> Vlist> >> > <https://www.facebook.com/kontrast.communication>> <https://twitter.com/KONTRAST_de>> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh>> <http://www.linkedin.com/company/kontrast-communication-services-gmbh>> <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de>> >> > Note: The information contained in this message may be privileged and> confidential and protected from disclosure. If the reader of this message> is not the intended recipient, or an employee or agent responsible for> delivering this message to the intended recipient, you are hereby notified> that any dissemination, distribution or copying of this communication is> strictly prohibited. If you have received this communication in error,> please notify us immediately by replying to the message and deleting it> from your computer.> >> > Please consider the environment and only print this if required.> >> >>> --> To unsubscribe from this list go to the following URL and read the> instructions: https://lists.samba.org/mailman/options/samba