Hi everybody !
I am encountering performance problem on my bridgehead DC.
I have 19 DC (Debian Stretch / Samba 4.6.7 from Tranquil.it repo) and they all
synchronized on a main bridgehead DC.
This performance problem first appears when the bridgehead DC was on Debian
Jessie and kernel was updated with meltdown/spectre patch from Debian
(3.16.51-3+deb8u1)
I added "nopti" option to grub boot to resolve the performance
problem.
Last night, I upgrade this Bridgehead DC from Jessie -> Stretch (samba
package 4.6.7 from Tranquil.it is the same for Jessie and Stretch), I also keep
"nopti" option but problem is back again.
There is 2 processes eating lots of CPU, samba-tool drs showrepl takes minutes,
system is slow, load average is at 2 constantly
dc000:~# htop
PID USER PRI NI VIRT RES SHR S CPU% MEM% TIME+ Command
28923 root 20 0 641M 42604 19064 S 39.6 2.1 1h26:53 /usr/sbin/samba
28930 root 20 0 641M 36340 13136 R 54.4 1.8 45:00.58 /usr/sbin/samba
dc000:~# samba-tool processes | egrep "(28923|28930)"
rpc_server 28923
rpc_server 28923
rpc_server 28923
rpc_server 28923
rpc_server 28923
rpc_server 28923
rpc_server 28923
rpc_server 28923
rpc_server 28923
dreplsrv 28930
dc000:~# strace -p 28923 -f
strace: Process 28923 attached
strace: [ Process PID=28923 runs in x32 mode. ]
strace: [ Process PID=28923 runs in 64 bit mode. ]
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=332, l_len=1}) =
0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=368, l_len=1}) =
0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=5073496,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=368, l_len=1}) =
0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=368, l_len=1}) =
0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=5073496,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=368, l_len=1}) =
0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=376, l_len=1}) =
0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=5125448,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=376, l_len=1}) =
0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=376, l_len=1}) =
0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=5125448,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=376, l_len=1}) =
0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) =
0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=1545572,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) =
0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) =
0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=1545572,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=2265976,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) =
0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) =
0
.......
dc000:~# egrep "(28923|28930)" /proc/locks
16: POSIX ADVISORY READ 28923 ca:01:132971 168 EOF
17: POSIX ADVISORY WRITE 28923 ca:01:132971 8 8
18: POSIX ADVISORY READ 28923 ca:01:132978 168 EOF
19: POSIX ADVISORY WRITE 28923 ca:01:132978 8 8
20: POSIX ADVISORY READ 28923 ca:01:132976 168 EOF
21: POSIX ADVISORY WRITE 28923 ca:01:132976 8 8
22: POSIX ADVISORY READ 28923 ca:01:132970 168 EOF
23: POSIX ADVISORY WRITE 28923 ca:01:132970 8 8
24: POSIX ADVISORY READ 28923 ca:01:132968 168 EOF
25: POSIX ADVISORY WRITE 28923 ca:01:132968 8 8
26: POSIX ADVISORY READ 28923 ca:01:132940 168 EOF
27: POSIX ADVISORY WRITE 28923 ca:01:132940 8 8
28: POSIX ADVISORY READ 28923 ca:01:132930 168 EOF
29: POSIX ADVISORY WRITE 28923 ca:01:132930 8 8
31: POSIX ADVISORY WRITE 28923 00:12:387271 0 EOF
54: POSIX ADVISORY WRITE 28930 00:12:389224 0 EOF
dc000:~# ls -la /proc/28923/fd/15
lrwx------ 1 root root 64 mars 16 09:44 /proc/28923/fd/15 ->
/var/lib/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=PR,DC=EDUCATIONETFORMATION,DC=FR.ldb
I also have many access on :
dc000:~# ls -la /proc/28930/fd/14
lrwx------ 1 root root 64 mars 16 09:44 /proc/28930/fd/14 ->
/var/lib/samba/private/sam.ldb.d/DC=PR,DC=EDUCATIONETFORMATION,DC=FR.ldb
dc000:~# ls -la /proc/28930/fd/15
lrwx------ 1 root root 64 mars 16 09:44 /proc/28930/fd/15 ->
/var/lib/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=PR,DC=EDUCATIONETFORMATION,DC=FR.ldb
dc000:~# ls -la /proc/28930/fd/16
lrwx------ 1 root root 64 mars 16 09:44 /proc/28930/fd/16 ->
/var/lib/samba/private/sam.ldb.d/DC=FORESTDNSZONES,DC=PR,DC=EDUCATIONETFORMATION,DC=FR.ldb
dbcheck is fine on all DC (10 000 objects)
All dc are synced from the bridgehead
DC Bridgehead is running with 8 virtual CPU and 2Go of Ram
If you have any idea, you are welcome :)
Thanks
Jessie also has the problem, even before the meltdown patches. The kernel 3.16.x had ksoftirqd probems, eating up cpu cicles. Make sure you use kernel 4.9.0-6 And i suggest move up to samba 4.7.x or 4.7.4 from debian/buster, Or use my 4.6.12/4.7.6 packages for stretch, or ask if Tranquil.it can make them. The 4.6.14 is still in the make atm for stretch, 4.6.14 for jessie is done. And last, without any info from smb.conf we cant help much.. We need to see your settings also.. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > MORILLO Jordi via samba > Verzonden: vrijdag 16 maart 2018 11:52 > Aan: samba at lists.samba.org > Onderwerp: [Samba] performance problem on bridgehead DC > > Hi everybody ! > > I am encountering performance problem on my bridgehead DC. > I have 19 DC (Debian Stretch / Samba 4.6.7 from Tranquil.it > repo) and they all synchronized on a main bridgehead DC. > > This performance problem first appears when the bridgehead DC > was on Debian Jessie and kernel was updated with > meltdown/spectre patch from Debian (3.16.51-3+deb8u1) > I added "nopti" option to grub boot to resolve the > performance problem. > Last night, I upgrade this Bridgehead DC from Jessie -> > Stretch (samba package 4.6.7 from Tranquil.it is the same for > Jessie and Stretch), I also keep "nopti" option but problem > is back again. > > There is 2 processes eating lots of CPU, samba-tool drs > showrepl takes minutes, system is slow, load average is at 2 > constantly > > dc000:~# htop > PID USER PRI NI VIRT RES SHR S CPU% MEM% TIME+ Command > 28923 root 20 0 641M 42604 19064 S 39.6 2.1 > 1h26:53 /usr/sbin/samba > 28930 root 20 0 641M 36340 13136 R 54.4 1.8 > 45:00.58 /usr/sbin/samba > > dc000:~# samba-tool processes | egrep "(28923|28930)" > rpc_server 28923 > rpc_server 28923 > rpc_server 28923 > rpc_server 28923 > rpc_server 28923 > rpc_server 28923 > rpc_server 28923 > rpc_server 28923 > rpc_server 28923 > dreplsrv 28930 > > dc000:~# strace -p 28923 -f > strace: Process 28923 attached > strace: [ Process PID=28923 runs in x32 mode. ] > strace: [ Process PID=28923 runs in 64 bit mode. ] > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, > l_start=332, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > l_start=368, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > l_start=5073496, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, > l_start=368, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > l_start=368, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, > l_start=5073496, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, > l_start=368, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > l_start=376, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > l_start=5125448, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, > l_start=376, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > l_start=376, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, > l_start=5125448, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, > l_start=376, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > l_start=380, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > l_start=1545572, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, > l_start=380, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > l_start=380, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, > l_start=1545572, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > l_start=2265976, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, > l_start=380, l_len=1}) = 0 > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > l_start=380, l_len=1}) = 0 > ....... > > dc000:~# egrep "(28923|28930)" /proc/locks > 16: POSIX ADVISORY READ 28923 ca:01:132971 168 EOF > 17: POSIX ADVISORY WRITE 28923 ca:01:132971 8 8 > 18: POSIX ADVISORY READ 28923 ca:01:132978 168 EOF > 19: POSIX ADVISORY WRITE 28923 ca:01:132978 8 8 > 20: POSIX ADVISORY READ 28923 ca:01:132976 168 EOF > 21: POSIX ADVISORY WRITE 28923 ca:01:132976 8 8 > 22: POSIX ADVISORY READ 28923 ca:01:132970 168 EOF > 23: POSIX ADVISORY WRITE 28923 ca:01:132970 8 8 > 24: POSIX ADVISORY READ 28923 ca:01:132968 168 EOF > 25: POSIX ADVISORY WRITE 28923 ca:01:132968 8 8 > 26: POSIX ADVISORY READ 28923 ca:01:132940 168 EOF > 27: POSIX ADVISORY WRITE 28923 ca:01:132940 8 8 > 28: POSIX ADVISORY READ 28923 ca:01:132930 168 EOF > 29: POSIX ADVISORY WRITE 28923 ca:01:132930 8 8 > 31: POSIX ADVISORY WRITE 28923 00:12:387271 0 EOF > 54: POSIX ADVISORY WRITE 28930 00:12:389224 0 EOF > > dc000:~# ls -la /proc/28923/fd/15 > lrwx------ 1 root root 64 mars 16 09:44 /proc/28923/fd/15 -> > /var/lib/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=PR,DC=ED > UCATIONETFORMATION,DC=FR.ldb > > I also have many access on : > dc000:~# ls -la /proc/28930/fd/14 > lrwx------ 1 root root 64 mars 16 09:44 /proc/28930/fd/14 -> > /var/lib/samba/private/sam.ldb.d/DC=PR,DC=EDUCATIONETFORMATION > ,DC=FR.ldb > dc000:~# ls -la /proc/28930/fd/15 > lrwx------ 1 root root 64 mars 16 09:44 /proc/28930/fd/15 -> > /var/lib/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=PR,DC=ED > UCATIONETFORMATION,DC=FR.ldb > dc000:~# ls -la /proc/28930/fd/16 > lrwx------ 1 root root 64 mars 16 09:44 /proc/28930/fd/16 -> > /var/lib/samba/private/sam.ldb.d/DC=FORESTDNSZONES,DC=PR,DC=ED > UCATIONETFORMATION,DC=FR.ldb > > dbcheck is fine on all DC (10 000 objects) > All dc are synced from the bridgehead > DC Bridgehead is running with 8 virtual CPU and 2Go of Ram > > > If you have any idea, you are welcome :) > Thanks > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
Hi Louis,
Move up to 4.7 is planned soon but I'm little scared to update bridgehead if
it actually had performance problem.
I would like to fix all problem before updating.
My smb.conf is really simple:
[global]
workgroup = PR
realm = pr.educationetformation.fr
netbios name = DC000
server role = active directory domain controller
bind interfaces only = yes
interfaces = lo eth0
printcap name = /dev/null
load printers = no
dns forwarder = 10.1.5.1 10.1.1.12
# Needed for FreeRadius PEAP MSCHAP
ntlm auth = yes
raw NTLMv2 auth = yes
[netlogon]
path = /var/lib/samba/sysvol/pr.educationetformation.fr/scripts
read only = No
guest ok = yes
[sysvol]
path = /var/lib/samba/sysvol
read only = No
guest ok = yes
King regards
-----Message d'origine-----
De : samba <samba-bounces at lists.samba.org> De la part de L.P.H. van
Belle via samba
Envoyé : vendredi 16 mars 2018 12:13
À : samba at lists.samba.org
Objet : Re: [Samba] performance problem on bridgehead DC
Jessie also has the problem, even before the meltdown patches.
The kernel 3.16.x had ksoftirqd probems, eating up cpu cicles.
Make sure you use kernel 4.9.0-6
And i suggest move up to samba 4.7.x or 4.7.4 from debian/buster, Or use my
4.6.12/4.7.6 packages for stretch, or ask if Tranquil.it can make them.
The 4.6.14 is still in the make atm for stretch, 4.6.14 for jessie is done.
And last, without any info from smb.conf we cant help much..
We need to see your settings also..
Greetz,
Louis
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens MORILLO Jordi
> via samba
> Verzonden: vrijdag 16 maart 2018 11:52
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] performance problem on bridgehead DC
>
> Hi everybody !
>
> I am encountering performance problem on my bridgehead DC.
> I have 19 DC (Debian Stretch / Samba 4.6.7 from Tranquil.it
> repo) and they all synchronized on a main bridgehead DC.
>
> This performance problem first appears when the bridgehead DC was on
> Debian Jessie and kernel was updated with meltdown/spectre patch from
> Debian (3.16.51-3+deb8u1) I added "nopti" option to grub boot to
> resolve the performance problem.
> Last night, I upgrade this Bridgehead DC from Jessie -> Stretch (samba
> package 4.6.7 from Tranquil.it is the same for Jessie and Stretch), I
> also keep "nopti" option but problem is back again.
>
> There is 2 processes eating lots of CPU, samba-tool drs showrepl takes
> minutes, system is slow, load average is at 2 constantly
>
> dc000:~# htop
> PID USER PRI NI VIRT RES SHR S CPU% MEM% TIME+ Command
> 28923 root 20 0 641M 42604 19064 S 39.6 2.1
> 1h26:53 /usr/sbin/samba
> 28930 root 20 0 641M 36340 13136 R 54.4 1.8
> 45:00.58 /usr/sbin/samba
>
> dc000:~# samba-tool processes | egrep "(28923|28930)"
> rpc_server 28923
> rpc_server 28923
> rpc_server 28923
> rpc_server 28923
> rpc_server 28923
> rpc_server 28923
> rpc_server 28923
> rpc_server 28923
> rpc_server 28923
> dreplsrv 28930
>
> dc000:~# strace -p 28923 -f
> strace: Process 28923 attached
> strace: [ Process PID=28923 runs in x32 mode. ]
> strace: [ Process PID=28923 runs in 64 bit mode. ] fcntl(15, F_SETLKW,
> {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=332, l_len=1}) = 0
> fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=368,
> l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
> l_start=5073496, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK,
> l_whence=SEEK_SET, l_start=368, l_len=1}) = 0 fcntl(15, F_SETLKW,
> {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=368, l_len=1}) = 0
> fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
> l_start=5073496, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK,
> l_whence=SEEK_SET, l_start=368, l_len=1}) = 0 fcntl(15, F_SETLKW,
> {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=376, l_len=1}) = 0
> fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
> l_start=5125448, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK,
> l_whence=SEEK_SET, l_start=376, l_len=1}) = 0 fcntl(15, F_SETLKW,
> {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=376, l_len=1}) = 0
> fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
> l_start=5125448, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK,
> l_whence=SEEK_SET, l_start=376, l_len=1}) = 0 fcntl(15, F_SETLKW,
> {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) = 0
> fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET,
> l_start=1545572, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK,
> l_whence=SEEK_SET, l_start=380, l_len=1}) = 0 fcntl(15, F_SETLKW,
> {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) = 0
> fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET,
> l_start=1545572, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_RDLCK,
> l_whence=SEEK_SET, l_start=2265976, l_len=1}) = 0 fcntl(15, F_SETLKW,
> {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) = 0
> fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=380,
> l_len=1}) = 0 .......
>
> dc000:~# egrep "(28923|28930)" /proc/locks
> 16: POSIX ADVISORY READ 28923 ca:01:132971 168 EOF
> 17: POSIX ADVISORY WRITE 28923 ca:01:132971 8 8
> 18: POSIX ADVISORY READ 28923 ca:01:132978 168 EOF
> 19: POSIX ADVISORY WRITE 28923 ca:01:132978 8 8
> 20: POSIX ADVISORY READ 28923 ca:01:132976 168 EOF
> 21: POSIX ADVISORY WRITE 28923 ca:01:132976 8 8
> 22: POSIX ADVISORY READ 28923 ca:01:132970 168 EOF
> 23: POSIX ADVISORY WRITE 28923 ca:01:132970 8 8
> 24: POSIX ADVISORY READ 28923 ca:01:132968 168 EOF
> 25: POSIX ADVISORY WRITE 28923 ca:01:132968 8 8
> 26: POSIX ADVISORY READ 28923 ca:01:132940 168 EOF
> 27: POSIX ADVISORY WRITE 28923 ca:01:132940 8 8
> 28: POSIX ADVISORY READ 28923 ca:01:132930 168 EOF
> 29: POSIX ADVISORY WRITE 28923 ca:01:132930 8 8
> 31: POSIX ADVISORY WRITE 28923 00:12:387271 0 EOF
> 54: POSIX ADVISORY WRITE 28930 00:12:389224 0 EOF
>
> dc000:~# ls -la /proc/28923/fd/15
> lrwx------ 1 root root 64 mars 16 09:44 /proc/28923/fd/15 ->
> /var/lib/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=PR,DC=ED
> UCATIONETFORMATION,DC=FR.ldb
>
> I also have many access on :
> dc000:~# ls -la /proc/28930/fd/14
> lrwx------ 1 root root 64 mars 16 09:44 /proc/28930/fd/14 ->
> /var/lib/samba/private/sam.ldb.d/DC=PR,DC=EDUCATIONETFORMATION
> ,DC=FR.ldb
> dc000:~# ls -la /proc/28930/fd/15
> lrwx------ 1 root root 64 mars 16 09:44 /proc/28930/fd/15 ->
> /var/lib/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=PR,DC=ED
> UCATIONETFORMATION,DC=FR.ldb
> dc000:~# ls -la /proc/28930/fd/16
> lrwx------ 1 root root 64 mars 16 09:44 /proc/28930/fd/16 ->
> /var/lib/samba/private/sam.ldb.d/DC=FORESTDNSZONES,DC=PR,DC=ED
> UCATIONETFORMATION,DC=FR.ldb
>
> dbcheck is fine on all DC (10 000 objects) All dc are synced from the
> bridgehead DC Bridgehead is running with 8 virtual CPU and 2Go of Ram
>
>
> If you have any idea, you are welcome :) Thanks
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
>
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Ah, ok You showed the problem.> # Needed for FreeRadius PEAP MSCHAP > ntlm auth = yes > raw NTLMv2 auth = yesThis is your "slowdown", i know an other use that uses the same and had the same problem. Googing for it now. Can you test with these commented out in the smb.conf Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > MORILLO Jordi via samba > Verzonden: vrijdag 16 maart 2018 14:11 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] performance problem on bridgehead DC > > Hi Louis, > > Move up to 4.7 is planned soon but I'm little scared to > update bridgehead if it actually had performance problem. > I would like to fix all problem before updating. > > My smb.conf is really simple: > > [global] > workgroup = PR > realm = pr.educationetformation.fr > netbios name = DC000 > server role = active directory domain controller > > bind interfaces only = yes > interfaces = lo eth0 > > printcap name = /dev/null > load printers = no > > dns forwarder = 10.1.5.1 10.1.1.12 > > # Needed for FreeRadius PEAP MSCHAP > ntlm auth = yes > raw NTLMv2 auth = yes > > [netlogon] > path = > /var/lib/samba/sysvol/pr.educationetformation.fr/scripts > read only = No > guest ok = yes > > [sysvol] > path = /var/lib/samba/sysvol > read only = No > guest ok = yes > > King regards > -----Message d'origine----- > De : samba <samba-bounces at lists.samba.org> De la part de > L.P.H. van Belle via samba > Envoyé : vendredi 16 mars 2018 12:13 > À : samba at lists.samba.org > Objet : Re: [Samba] performance problem on bridgehead DC > > Jessie also has the problem, even before the meltdown patches. > The kernel 3.16.x had ksoftirqd probems, eating up cpu cicles. > Make sure you use kernel 4.9.0-6 > > And i suggest move up to samba 4.7.x or 4.7.4 from > debian/buster, Or use my 4.6.12/4.7.6 packages for stretch, > or ask if Tranquil.it can make them. > The 4.6.14 is still in the make atm for stretch, 4.6.14 for > jessie is done. > > And last, without any info from smb.conf we cant help much.. > We need to see your settings also.. > > Greetz, > > Louis > > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > MORILLO Jordi > > via samba > > Verzonden: vrijdag 16 maart 2018 11:52 > > Aan: samba at lists.samba.org > > Onderwerp: [Samba] performance problem on bridgehead DC > > > > Hi everybody ! > > > > I am encountering performance problem on my bridgehead DC. > > I have 19 DC (Debian Stretch / Samba 4.6.7 from Tranquil.it > > repo) and they all synchronized on a main bridgehead DC. > > > > This performance problem first appears when the bridgehead > DC was on > > Debian Jessie and kernel was updated with meltdown/spectre > patch from > > Debian (3.16.51-3+deb8u1) I added "nopti" option to grub boot to > > resolve the performance problem. > > Last night, I upgrade this Bridgehead DC from Jessie -> > Stretch (samba > > package 4.6.7 from Tranquil.it is the same for Jessie and > Stretch), I > > also keep "nopti" option but problem is back again. > > > > There is 2 processes eating lots of CPU, samba-tool drs > showrepl takes > > minutes, system is slow, load average is at 2 constantly > > > > dc000:~# htop > > PID USER PRI NI VIRT RES SHR S CPU% MEM% > TIME+ Command > > 28923 root 20 0 641M 42604 19064 S 39.6 2.1 > > 1h26:53 /usr/sbin/samba > > 28930 root 20 0 641M 36340 13136 R 54.4 1.8 > > 45:00.58 /usr/sbin/samba > > > > dc000:~# samba-tool processes | egrep "(28923|28930)" > > rpc_server 28923 > > rpc_server 28923 > > rpc_server 28923 > > rpc_server 28923 > > rpc_server 28923 > > rpc_server 28923 > > rpc_server 28923 > > rpc_server 28923 > > rpc_server 28923 > > dreplsrv 28930 > > > > dc000:~# strace -p 28923 -f > > strace: Process 28923 attached > > strace: [ Process PID=28923 runs in x32 mode. ] > > strace: [ Process PID=28923 runs in 64 bit mode. ] > fcntl(15, F_SETLKW, > > {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=332, l_len=1}) = 0 > > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > l_start=368, > > l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_RDLCK, > l_whence=SEEK_SET, > > l_start=5073496, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK, > > l_whence=SEEK_SET, l_start=368, l_len=1}) = 0 fcntl(15, F_SETLKW, > > {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=368, l_len=1}) = 0 > > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, > > l_start=5073496, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK, > > l_whence=SEEK_SET, l_start=368, l_len=1}) = 0 fcntl(15, F_SETLKW, > > {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=376, l_len=1}) = 0 > > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > > l_start=5125448, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK, > > l_whence=SEEK_SET, l_start=376, l_len=1}) = 0 fcntl(15, F_SETLKW, > > {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=376, l_len=1}) = 0 > > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, > > l_start=5125448, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK, > > l_whence=SEEK_SET, l_start=376, l_len=1}) = 0 fcntl(15, F_SETLKW, > > {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) = 0 > > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > > l_start=1545572, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK, > > l_whence=SEEK_SET, l_start=380, l_len=1}) = 0 fcntl(15, F_SETLKW, > > {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) = 0 > > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, > > l_start=1545572, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_RDLCK, > > l_whence=SEEK_SET, l_start=2265976, l_len=1}) = 0 fcntl(15, > F_SETLKW, > > {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) = 0 > > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, > l_start=380, > > l_len=1}) = 0 ....... > > > > dc000:~# egrep "(28923|28930)" /proc/locks > > 16: POSIX ADVISORY READ 28923 ca:01:132971 168 EOF > > 17: POSIX ADVISORY WRITE 28923 ca:01:132971 8 8 > > 18: POSIX ADVISORY READ 28923 ca:01:132978 168 EOF > > 19: POSIX ADVISORY WRITE 28923 ca:01:132978 8 8 > > 20: POSIX ADVISORY READ 28923 ca:01:132976 168 EOF > > 21: POSIX ADVISORY WRITE 28923 ca:01:132976 8 8 > > 22: POSIX ADVISORY READ 28923 ca:01:132970 168 EOF > > 23: POSIX ADVISORY WRITE 28923 ca:01:132970 8 8 > > 24: POSIX ADVISORY READ 28923 ca:01:132968 168 EOF > > 25: POSIX ADVISORY WRITE 28923 ca:01:132968 8 8 > > 26: POSIX ADVISORY READ 28923 ca:01:132940 168 EOF > > 27: POSIX ADVISORY WRITE 28923 ca:01:132940 8 8 > > 28: POSIX ADVISORY READ 28923 ca:01:132930 168 EOF > > 29: POSIX ADVISORY WRITE 28923 ca:01:132930 8 8 > > 31: POSIX ADVISORY WRITE 28923 00:12:387271 0 EOF > > 54: POSIX ADVISORY WRITE 28930 00:12:389224 0 EOF > > > > dc000:~# ls -la /proc/28923/fd/15 > > lrwx------ 1 root root 64 mars 16 09:44 /proc/28923/fd/15 -> > > /var/lib/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=PR,DC=ED > > UCATIONETFORMATION,DC=FR.ldb > > > > I also have many access on : > > dc000:~# ls -la /proc/28930/fd/14 > > lrwx------ 1 root root 64 mars 16 09:44 /proc/28930/fd/14 -> > > /var/lib/samba/private/sam.ldb.d/DC=PR,DC=EDUCATIONETFORMATION > > ,DC=FR.ldb > > dc000:~# ls -la /proc/28930/fd/15 > > lrwx------ 1 root root 64 mars 16 09:44 /proc/28930/fd/15 -> > > /var/lib/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=PR,DC=ED > > UCATIONETFORMATION,DC=FR.ldb > > dc000:~# ls -la /proc/28930/fd/16 > > lrwx------ 1 root root 64 mars 16 09:44 /proc/28930/fd/16 -> > > /var/lib/samba/private/sam.ldb.d/DC=FORESTDNSZONES,DC=PR,DC=ED > > UCATIONETFORMATION,DC=FR.ldb > > > > dbcheck is fine on all DC (10 000 objects) All dc are > synced from the > > bridgehead DC Bridgehead is running with 8 virtual CPU and > 2Go of Ram > > > > > > If you have any idea, you are welcome :) Thanks > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >