On Tue, 2016-08-30 at 07:46 +1200, Andrew Bartlett via samba wrote:> On Fri, 2016-08-19 at 14:29 -0300, Maiquel Consalter via samba wrote: > > > > Hi Group, > > i have 3 DC with samba4 with Centos 7, they are showing the CPU > > with > > 100% > > in all DC. The centos 7 is the basic installation and samba4 > > compile.I have > > 2.000 machine authenticated in this DC, is WinX, Win7, Win8 and > > Win10 > > . > > Someone have problem with samba4 with centos cpu 100%. ? > > > > Attached my config. > > Where is it spinning? > > With all the required debug packages installed, then run it under > perf > and generate a flame graph per: > > http://www.brendangregg.com/FlameGraphs/cpuflamegraphs.html > > The resulting .svg file is often quite enlightening. > > Andrew BartlettAlso, how many users, groups and in particular group members in each group (and in total)? If you have large numbers of group members, then Samba 4.5 will help a lot. Thanks, -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Hi Andrew,>Also, how many users, groups and in particular group members in each >group (and in total)? >If you have large numbers of group members, then Samba 4.5 will help a >lot.We have 53k users and 580 groups. 2016-08-30 5:17 GMT-03:00 Andrew Bartlett <abartlet at samba.org>:> On Tue, 2016-08-30 at 07:46 +1200, Andrew Bartlett via samba wrote: > > On Fri, 2016-08-19 at 14:29 -0300, Maiquel Consalter via samba wrote: > > > > > > Hi Group, > > > i have 3 DC with samba4 with Centos 7, they are showing the CPU > > > with > > > 100% > > > in all DC. The centos 7 is the basic installation and samba4 > > > compile.I have > > > 2.000 machine authenticated in this DC, is WinX, Win7, Win8 and > > > Win10 > > > . > > > Someone have problem with samba4 with centos cpu 100%. ? > > > > > > Attached my config. > > > > Where is it spinning? > > > > With all the required debug packages installed, then run it under > > perf > > and generate a flame graph per: > > > > http://www.brendangregg.com/FlameGraphs/cpuflamegraphs.html > > > > The resulting .svg file is often quite enlightening. > > > > Andrew Bartlett > > Also, how many users, groups and in particular group members in each > group (and in total)? > > If you have large numbers of group members, then Samba 4.5 will help a > lot. > > Thanks, > > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/ > services/samba > >-- Att, Maiquel
On Tue, 2016-08-30 at 11:15 -0300, Maiquel Consalter wrote:> Hi Andrew, > > >Also, how many users, groups and in particular group members in each > >group (and in total)? > >If you have large numbers of group members, then Samba 4.5 will help > a > >lot. > We have 53k users and 580 groups.OK. Then your spinner is the client-side replication code. Samba 4.5 will fix most of that. See https://www.samba.org/~dbagnall/perf-tests/ Further work can be done however, and I would strongly suggest you contact a commercial support provider to quote on that, as at your scale you will need the last of the O(N^2) loops fixed. In the meantime, set 'drs:max link sync=50' and that will help a lot. Thanks, Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support, Catalyst IT https://catalyst.net.nz/services/samba