im not at a computer ti look some things up but im thinking.. dbdir=/usr/local/samba.PDC/dbdirwhat is the size of this dir. what is the size of the ad db dir on every server now. i think, something in the old db import causes a resyncwhen you modify something in the db so i suggest try monitoring, disk io and cpu, look for buzzy files. if we know the files, we know the processes using it. if one all servers the same files are buzy. then maybe you found an unknown bug. the old db came from which samba version, tell about the old setup, did you use a ldap backend for example? maybe a post of your old config can be handy also. greetz, Louis Op 29 aug. 2016 om 20:46 heeft Rowland Penny via samba <samba at lists.samba.org> het volgende geschreven: dbdir=/usr/local/samba.PDC/dbdir
Follow, our old config: http://pastebin.com/kpfATT0h tks. 2016-08-29 16:18 GMT-03:00 L.P.H. van Belle via samba <samba at lists.samba.org>:> im not at a computer ti look some things up but im thinking.. > > > dbdir=/usr/local/samba.PDC/dbdirwhat is the size of this dir. > > > what is the size of the ad db dir on every server now. > > > i think, something in the old db import causes a resyncwhen you modify > something in the db > so i suggest try monitoring, disk io and cpu, look for buzzy files. > if we know the files, we know the processes using it. if one all servers > the same files are buzy. > then maybe you found an unknown bug. > > > the old db came from which samba version, tell about the old setup, did > you use a ldap backend for example? > maybe a post of your old config can be handy also. > > > greetz, > > > Louis > > > > > > Op 29 aug. 2016 om 20:46 heeft Rowland Penny via samba < > samba at lists.samba.org> het volgende geschreven: > > > dbdir=/usr/local/samba.PDC/dbdir > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >-- Att, Maiquel
On 8/29/2016 3:33 PM, Maiquel Consalter via samba wrote:> Follow, our old config: http://pastebin.com/kpfATT0h > > tks. > > 2016-08-29 16:18 GMT-03:00 L.P.H. van Belle via samba <samba at lists.samba.org >> : >> im not at a computer ti look some things up but im thinking.. >> >> >> dbdir=/usr/local/samba.PDC/dbdirwhat is the size of this dir. >> >> >> what is the size of the ad db dir on every server now. >> >> >> i think, something in the old db import causes a resyncwhen you modify >> something in the db >> so i suggest try monitoring, disk io and cpu, look for buzzy files. >> if we know the files, we know the processes using it. if one all servers >> the same files are buzy. >> then maybe you found an unknown bug. >> >> >> the old db came from which samba version, tell about the old setup, did >> you use a ldap backend for example? >> maybe a post of your old config can be handy also. >> >> >> greetz, >> >> >> Louis >> >> >> >> >> >> Op 29 aug. 2016 om 20:46 heeft Rowland Penny via samba < >> samba at lists.samba.org> het volgende geschreven: >> >> >> dbdir=/usr/local/samba.PDC/dbdir >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> > >Do you have this option in your smb.conf? 'allow dcerpc auth level connect = No' -- -James
On 8/29/2016 3:33 PM, Maiquel Consalter via samba wrote:> Follow, our old config: http://pastebin.com/kpfATT0h > > tks. > > 2016-08-29 16:18 GMT-03:00 L.P.H. van Belle via samba <samba at lists.samba.org >> : >> im not at a computer ti look some things up but im thinking.. >> >> >> dbdir=/usr/local/samba.PDC/dbdirwhat is the size of this dir. >> >> >> what is the size of the ad db dir on every server now. >> >> >> i think, something in the old db import causes a resyncwhen you modify >> something in the db >> so i suggest try monitoring, disk io and cpu, look for buzzy files. >> if we know the files, we know the processes using it. if one all servers >> the same files are buzy. >> then maybe you found an unknown bug. >> >> >> the old db came from which samba version, tell about the old setup, did >> you use a ldap backend for example? >> maybe a post of your old config can be handy also. >> >> >> greetz, >> >> >> Louis >> >> >> >> >> >> Op 29 aug. 2016 om 20:46 heeft Rowland Penny via samba < >> samba at lists.samba.org> het volgende geschreven: >> >> >> dbdir=/usr/local/samba.PDC/dbdir >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> > >Never mind. I think this option only exists in 4.3.8. Not yours which is 4.3.1. -- -James
Just checked you smb.conf Now i dont know the exact working of : samba-tool domain classicupgrade Rowland know all about that but i see some things which might give the problems. I’ll have to ask rowland to have a look in this.. But i do thinks that the “old samba 3 “ domain was not a domain. I dont know if that hurts the upgrade. Can you check if you have “2 x “ Administrator in your domain? And can you run : samba-tool dapcmp --filter="whenChanged" ldap://DC1 ldap://DC2 but im did see what you old samba version was. And you didnt tell how big the DB sized are. That can really be handy to know. Greetz, Louis Van: Maiquel Consalter [mailto:maiquelconsalter at gmail.com] Verzonden: maandag 29 augustus 2016 21:33 Aan: L.P.H. van Belle CC: samba at lists.samba.org Onderwerp: Re: [Samba] Samba4 Centos 7 - CPU 100% Follow, our old config: http://pastebin.com/kpfATT0h tks. 2016-08-29 16:18 GMT-03:00 L.P.H. van Belle via samba <samba at lists.samba.org>: im not at a computer ti look some things up but im thinking.. dbdir=/usr/local/samba.PDC/dbdirwhat is the size of this dir. what is the size of the ad db dir on every server now. i think, something in the old db import causes a resyncwhen you modify something in the db so i suggest try monitoring, disk io and cpu, look for buzzy files. if we know the files, we know the processes using it. if one all servers the same files are buzy. then maybe you found an unknown bug. the old db came from which samba version, tell about the old setup, did you use a ldap backend for example? maybe a post of your old config can be handy also. greetz, Louis Op 29 aug. 2016 om 20:46 heeft Rowland Penny via samba <samba at lists.samba.org> het volgende geschreven: dbdir=/usr/local/samba.PDC/dbdir -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- Att, Maiquel
On Tue, 30 Aug 2016 10:05:34 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:> Just checked you smb.conf > > > > Now i dont know the exact working of : samba-tool domain > classicupgrade > > Rowland know all about that but i see some things which might give > the problems. > > I’ll have to ask rowland to have a look in this.. > > > > But i do thinks that the “old samba 3 “ domain was not a domain. > > I dont know if that hurts the upgrade.From reading his old smb.conf it appears it was, but I noticed something: Maiquel, can you run this command on a DC and report back with the result. ldbsearch -H /usr/local/samba/private/sam.ldb -b 'CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=samdom,DC=example,DC=com' -s sub '(objectClass=msSFU30DomainInfo)' cn | grep 'cn:' | awk '{print $NF}' Replace 'DC=samdom,DC=example,DC=com' with your domain DN I also it take that ldap was running on the machine when you upgraded it to an AD DC Rowland> > > > Can you check if you have “2 x “ Administrator in your domain? > > > > And can you run : > > samba-tool dapcmp --filter="whenChanged" ldap://DC1 ldap://DC2 > > > > but im did see what you old samba version was. > > And you didnt tell how big the DB sized are. > > That can really be handy to know. > > > > Greetz, > > >
Hi Louis, Tks for your feedback. Sorry about delay.>Just checked you smb.conf >Now i dont know the exact working of : samba-tool domain classicupgrade<Rowland know all about that but i see some things which might give the problems.>I’ll have to ask rowland to have a look in this.. >But i do thinks that the “old samba 3 “ domain was not a domain.OK, that option not exist in my smb.conf.>I dont know if that hurts the upgrade. >Can you check if you have “2 x “ Administrator in your domain? >And can you run : >samba-tool ldapcmp --filter="whenChanged" ldap://DC1 ldap://DC2Follow the output: ldb_wrap open of secrets.ldb GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'spnego' registered GENSEC backend 'schannel' registered GENSEC backend 'naclrpc_as_system' registered GENSEC backend 'sasl-EXTERNAL' registered GENSEC backend 'ntlmssp' registered GENSEC backend 'ntlmssp_resume_ccache' registered GENSEC backend 'http_basic' registered GENSEC backend 'http_ntlm' registered GENSEC backend 'krb5' registered GENSEC backend 'fake_gssapi_krb5' registered Cannot do GSSAPI to an IP address Got challenge flags: Got NTLMSSP neg_flags=0x62898235 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x62088235 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x62088235 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x62088235 Cannot do GSSAPI to an IP address Got challenge flags: Got NTLMSSP neg_flags=0x62898235 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x62088235 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x62088235 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x62088235 * Comparing [DOMAIN] context... * DN lists have different size: 35029 != 35030 CN=05\0ACNF:7f5f0d89-ff0f-42c1-a359-f5bc1de6ff4b,CN=Computers,DC=campus,DC=domain,DC=br * Objects to be compared: 35029 ERROR(ldb): uncaught exception - LDAP client internal error: NT_STATUS_CONNECTION_DISCONNECTED File "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.py", line 983, in run if b1 == b2: File "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.py", line 774, in __eq__ outf=self.outf, errf=self.errf) File "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.py", line 396, in __init__ self.attributes = self.con.get_attributes(self.dn) File "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.py", line 207, in get_attributes res = self.ldb.search(base=object_dn, scope=SCOPE_BASE, attrs=["*"])>but im did see what you old samba version was. >And you didnt tell how big the DB sized are. >That can really be handy to know.Here do you said for check the DB Size correct ? Exist some special command for check thist, or you want to know how many users exist in my enviroment ? 2016-08-30 5:05 GMT-03:00 L.P.H. van Belle via samba <samba at lists.samba.org> :> Just checked you smb.conf > > > > Now i dont know the exact working of : samba-tool domain classicupgrade > > Rowland know all about that but i see some things which might give the > problems. > > I’ll have to ask rowland to have a look in this.. > > > > But i do thinks that the “old samba 3 “ domain was not a domain. > > I dont know if that hurts the upgrade. > > > > Can you check if you have “2 x “ Administrator in your domain? > > > > And can you run : > > samba-tool dapcmp --filter="whenChanged" ldap://DC1 ldap://DC2 > > > > but im did see what you old samba version was. > > And you didnt tell how big the DB sized are. > > That can really be handy to know. > > > > Greetz, > > > > Louis > > > > > > > > > Van: Maiquel Consalter [mailto:maiquelconsalter at gmail.com] > Verzonden: maandag 29 augustus 2016 21:33 > Aan: L.P.H. van Belle > CC: samba at lists.samba.org > Onderwerp: Re: [Samba] Samba4 Centos 7 - CPU 100% > > > > > Follow, our old config: http://pastebin.com/kpfATT0h > > > > > tks. > > > > > > 2016-08-29 16:18 GMT-03:00 L.P.H. van Belle via samba < > samba at lists.samba.org>: > > im not at a computer ti look some things up but im thinking.. > > > dbdir=/usr/local/samba.PDC/dbdirwhat is the size of this dir. > > > what is the size of the ad db dir on every server now. > > > i think, something in the old db import causes a resyncwhen you modify > something in the db > so i suggest try monitoring, disk io and cpu, look for buzzy files. > if we know the files, we know the processes using it. if one all servers > the same files are buzy. > then maybe you found an unknown bug. > > > the old db came from which samba version, tell about the old setup, did > you use a ldap backend for example? > maybe a post of your old config can be handy also. > > > greetz, > > > Louis > > > > > > Op 29 aug. 2016 om 20:46 heeft Rowland Penny via samba < > samba at lists.samba.org> het volgende geschreven: > > > dbdir=/usr/local/samba.PDC/dbdir > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > -- > > Att, > Maiquel > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >-- Att, Maiquel