samba - Feb 2017 - net ads and wbinfo are painfully slow -- but they work

On Wed, 1 Feb 2017 09:47:38 +0100
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:
> We are missing the content of /etc/nsswitch.conf 
> Can you post that also. 
> 
> But you probely see:
> hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4
> 
> i suggest
> hosts: files dns mdns4_minimal [NOTFOUND=return]  mdns4
> 
> since your using a .local TLD which is really not recommended. 
> 
> 
He already has posted it ;-)

/etc/nsswitch.conf:
# default
#group: compat
#group_compat: nis
#passwd: compat
#passwd_compat: nis

# 20170131 samba setup
group: files winbind
passwd: files winbind

hosts: files dns
networks: files
shells: files
services: compat
services_compat: nis
protocols: files
rpc: files

He is also unlikely to be running avahi, he is using Freebsd 10.3

Rowland

On Wed, Feb 1, 2017 at 1:12 AM, Rowland Penny via samba
<samba at lists.samba.org> wrote:
> He is also unlikely to be running avahi, he is using Freebsd 10.3
truss (like strace) showed that wbinfo, net, and sshd were all hanging
after system calls to getuid() and getpid().  At the time I thought it
was those calls that were slow but today I realize (although I don't
have access to the system today) that the slowdown was *after*
getuid()/getpid().

My suspicion is that "passwd: files winbind" is causing some low level
function to be very slow although I'm not sure which one yet.

Chris

On Wed, 1 Feb 2017 07:30:19 -0800
Chris Stankevitz <chrisstankevitz at gmail.com> wrote:
> On Wed, Feb 1, 2017 at 1:12 AM, Rowland Penny via samba
> <samba at lists.samba.org> wrote:
> > He is also unlikely to be running avahi, he is using Freebsd 10.3
> 
> truss (like strace) showed that wbinfo, net, and sshd were all hanging
> after system calls to getuid() and getpid().  At the time I thought it
> was those calls that were slow but today I realize (although I don't
> have access to the system today) that the slowdown was *after*
> getuid()/getpid().
> 
> My suspicion is that "passwd: files winbind" is causing some low
level
> function to be very slow although I'm not sure which one yet.
> 
> Chris
There is definitely something strange going on here, if I flush
the winbind cache, then ask for a users info with getent, I get this:

time getent passwd rowland
rowland:*:10000:10000:Rowland Penny:/home/rowland:/bin/bash

real	0m0.054s
user	0m0.004s
sys	0m0.000s

then if I ask for it again:

real	0m0.001s
user	0m0.000s
sys	0m0.000s

is PAM set up correctly ?

Rowland