Hello, we use samba with ldap backend. All is working well. Now the user count should grow to about 3000 users in a mixed environment with PCs and terminal servers. So the most of the users typically have (more than one) sessions to different terminal servers. The smb version is (tragically) still v1 and a lot of the clients comes over a NAT gateway. To reduce the traffic to the remote ldap server(s) in the backend and decrease the latency, I like to install a local OpenLDAP proxy cache on the samba server. Is this a practically way and does someone has experiences with such setup? Does anyone can recommend settings for the pcache? thanx in advance Meike
Hello dear list, does anybody can help me? Thanks Meike 2016-09-27 16:42 GMT+02:00 Meike Stone <meike.stone at googlemail.com>:> Hello, > > we use samba with ldap backend. All is working well. > Now the user count should grow to about 3000 users in a mixed > environment with PCs and terminal servers. > So the most of the users typically have (more than one) sessions to > different terminal servers. > The smb version is (tragically) still v1 and a lot of the clients > comes over a NAT gateway. > > To reduce the traffic to the remote ldap server(s) in the backend and > decrease the latency, I like to install a local OpenLDAP proxy cache > on the samba server. > > Is this a practically way and does someone has experiences with such setup? > Does anyone can recommend settings for the pcache? > > thanx in advance > > Meike
On Tue, 2016-09-27 at 16:42 +0200, Meike Stone via samba wrote:> Hello, > > we use samba with ldap backend. All is working well. > Now the user count should grow to about 3000 users in a mixed > environment with PCs and terminal servers. > So the most of the users typically have (more than one) sessions to > different terminal servers. > The smb version is (tragically) still v1 and a lot of the clients > comes over a NAT gateway. > > To reduce the traffic to the remote ldap server(s) in the backend and > decrease the latency, I like to install a local OpenLDAP proxy cache > on the samba server. > > Is this a practically way and does someone has experiences with such > setup? > Does anyone can recommend settings for the pcache?I would recommend a full replica, rather than a proxy cache. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
2016-11-02 18:18 GMT+01:00 Andrew Bartlett <abartlet at samba.org>:> On Tue, 2016-09-27 at 16:42 +0200, Meike Stone via samba wrote: >> Hello, >> >> we use samba with ldap backend. All is working well. >> Now the user count should grow to about 3000 users in a mixed >> environment with PCs and terminal servers. >> So the most of the users typically have (more than one) sessions to >> different terminal servers. >> The smb version is (tragically) still v1 and a lot of the clients >> comes over a NAT gateway. >> >> To reduce the traffic to the remote ldap server(s) in the backend and >> decrease the latency, I like to install a local OpenLDAP proxy cache >> on the samba server. >> >> Is this a practically way and does someone has experiences with such >> setup? >> Does anyone can recommend settings for the pcache? > > I would recommend a full replica, rather than a proxy cache.Yes, that would be the best choice, but I'm not the owner of the LDAP Server, it is a centralized service.... So a full replica is not possible ... Thanks Meike