samba - Aug 2018 - Is there a limit on Number of users connecting share

Hey Rowland!

Thanks for response. I admire your work. Please find my responses inline.

On 08/20/2018 02:19 PM, Rowland Penny via samba wrote:
> On Mon, 20 Aug 2018 11:06:48 +0530
> Amit via samba <samba at lists.samba.org> wrote:
>
>> Dear Devels,
>>
>> samba-4.2.3-10.el7.x86_64
>>
>> # vim smb.conf
>> [global]
>>         workgroup = MYGROUP
>>         server string = Samba Server Version %v
>>         log file = /var/log/samba/log.%m
>>         max log size = 50
>>         security = user
>>         passdb backend = tdbsam
>>         load printers = yes
>>         cups options = raw
>>         server signing = auto
>>         server signing = mandatory
>> [homes]
>>         comment = Home Directories
>>         browseable = no
>>         writable = yes
>> [printers]
>>         comment = All Printers
>>         path = /var/spool/samba
>>         browseable = no
>>         guest ok = no
>>         writable = no
>>         printable = yes
>>  [test]
>>         comment = samba share
>>         path = /test
>>         guest ok = no
>>         write list = @CAT
>>         browseable = yes
>>         create mask = 0755
>>         directory mask = 0775
>>         blocking locks = no
>>         block size = 4096
>>
>> Here CAT is local group.
>>
>> # id catuser
>> uid=5060(catuser) gid=1033(CAT) groups=1033(CAT)
>>
>>
>> For my customer, When 200+ User access /test (using catuser). Some
>> users can access share but blank contents.
>>
>> In smb logs:
>> For passing user:
>> 01hwcl858826 (ipv4:10.29.180.45:60627) connect to service test
>> initially as user catuser (uid=5060, gid=1033) (pid 5286)
>> check_reduced_name: . reduced to /test unix_mode(.) returning 0744
>> check_reduced_name [CAT/CAT_658/PROJECT/EXTERIOR/DG] [/test]
>>
>>
>>
>> For failing user:
>> 01hw1027178 (ipv4:172.29.208.178:54638) connect to service scratch
>> initially as user catuser (uid=5060, gid=1033) (pid 28686)
>> check_reduced_name: . reduced to /test unix_mode(.) returning 0744
>> checking for home directory test.ws <http://scratch.ws/>  gave
(NULL)
>> checking whether test.ws <http://scratch.ws/>  is a valid printer
>> name...
>>
>>
>> Query:
>> 1. Is there a limit on max number of connections to share? There must
>> be what's the max? 2. Is using force user, force group good option
>> here? 3. Is there limit on max number of files opened, Can this issue
>> be related to this? 4. Why in failing case it checking 'home dir,
>> Printers'?
>>
>>
> I think we need more info here:
>
> What are the clients ?    Windows-7,10 machines
>
> It looks like they are all using the same username to connect to the share,
is this correct ? Yes (catuser)
>
> If it is correct, are they all using the same password ? yes
>
> Is this standalone server in an AD domain ?  Standalone server
>
> Do the clients that don't work have NTLMv1 turned off ?  This i need to
enquire, But I think No. Beacause issue happens randomly on any of clients when
connections reaches > 200 or so.
>
> Rowland
>
-- 
Thanks
Amit Kumar
!!If you stumble, get back up. 
What happened yesterday, no longer matters.
Today is another day to move closer to your GOAL!!

On Mon, 20 Aug 2018 14:37:32 +0530
Amit via samba <samba at lists.samba.org> wrote:
> >>
> >>
> >> Query:
> >> 1. Is there a limit on max number of connections to share? There
> >> must be what's the max? 2. Is using force user, force group
good
> >> option here? 3. Is there limit on max number of files opened, Can
> >> this issue be related to this? 4. Why in failing case it checking
> >> 'home dir, Printers'?
> >>
> >>
> > I think we need more info here:
> >
> > What are the clients ?    Windows-7,10 machines
> >
> > It looks like they are all using the same username to connect to
> > the share, is this correct ? Yes (catuser)
> >
> > If it is correct, are they all using the same password ? yes
> >
> > Is this standalone server in an AD domain ?  Standalone server
That doesn't answer the question, it just confirms what is already
know. What are the other machines in ? A workgroup, an NT4-style
domain, or an AD domain.
> >
> > Do the clients that don't work have NTLMv1 turned off ?  This i
> > need to enquire, But I think No. Beacause issue happens randomly on
> > any of clients when connections reaches > 200 or so.
This would suggest that NTLMv1 isn't the problem, you could try
investigate setting 'max smbd processes' in smb.conf, see 'man
smb.conf' for more info.

From the number of users you say you have, it would probably be better
to run your standalone server as a Unix domain member.

Rowland

On 8/20/2018 11:32 AM, Rowland Penny via samba wrote:
> On Mon, 20 Aug 2018 14:37:32 +0530
> Amit via samba <samba at lists.samba.org> wrote:
> 
>>>>
>>>>
>>>> Query:
>>>> 1. Is there a limit on max number of connections to share?
There
>>>> must be what's the max? 2. Is using force user, force group
good
>>>> option here? 3. Is there limit on max number of files opened,
Can
>>>> this issue be related to this? 4. Why in failing case it
checking
>>>> 'home dir, Printers'?
>>>>
>>>>
>>> I think we need more info here:
>>>
>>> What are the clients ?    Windows-7,10 machines
>>>
>>> It looks like they are all using the same username to connect to
>>> the share, is this correct ? Yes (catuser)
>>>
>>> If it is correct, are they all using the same password ? yes
>>>
>>> Is this standalone server in an AD domain ?  Standalone server
> 
> That doesn't answer the question, it just confirms what is already
> know. What are the other machines in ? A workgroup, an NT4-style
> domain, or an AD domain.
> 
>>>
>>> Do the clients that don't work have NTLMv1 turned off ?  This i
>>> need to enquire, But I think No. Beacause issue happens randomly on
>>> any of clients when connections reaches > 200 or so.
> 
> This would suggest that NTLMv1 isn't the problem, you could try
> investigate setting 'max smbd processes' in smb.conf, see 'man
> smb.conf' for more info.
> 
>  From the number of users you say you have, it would probably be better
> to run your standalone server as a Unix domain member.
> 
By "Unix domain member" you mean?:

https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member

-- 
John Doe