Hi Rowland, Sorry I missed out on the OS. CentOS Linux release 7.6.1810 (Core) smb.conf # Global parameters [global] bind interfaces only = Yes interfaces = lo ens192 netbios name = SERVER1 realm = EXAMPLE.COM server role = active directory domain controller workgroup = WORKGROUP idmap_ldb:use rfc2307 = yes ldap server require strong auth = no template shell = /bin/bash template homedir = /home/%U time server = yes [netlogon] path = /usr/local/samba/var/locks/sysvol/example.com/scripts read only = No [sysvol] path = /usr/local/samba/var/locks/sysvol read only = No Regards Alfonso On Wed, Aug 12, 2020 at 3:04 PM Rowland penny via samba < samba at lists.samba.org> wrote:> On 12/08/2020 02:28, Alfonso Conner via samba wrote: > > Hello Samba Community, > > > > I would like to seek advice as my Samba AD tends to consume high memory > > usage caused by KDC service. > > This issue will always come back within a couple of days after I restart > > samba-ad-dc service. > > It does not help by increasing memory. > > > > From message log: > > kernel: Out of memory: Kill process 14527 (samba) score 873 or sacrifice > > child > > > > Identified pid 14527 belongs to kdc_server: > > kdc_server 14527 > > > > Samba installed version: 4.9.11 (dns backend using Samba_Internal) > > > > Configured memory: > > Mem: 6GB > > Swap: 4GB > > > > Appreciate any advice provided. > > Thank you. > > > > Regards > > Alfonso > > Hi, can you give us a bit more info ? > > OS, smb.conf etc > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
On 12/08/2020 08:24, Alfonso Conner wrote:> Hi Rowland, > > Sorry I missed out on the OS. > > CentOS Linux release 7.6.1810 (Core) > > smb.conf > # Global parameters > [global] > ? ? ? ? bind interfaces only = Yes > ? ? ? ? interfaces = lo ens192 > ? ? ? ? netbios name = SERVER1 > ? ? ? ? realm = EXAMPLE.COM <http://EXAMPLE.COM> > ? ? ? ? server role = active directory domain controller > ? ? ? ? workgroup = WORKGROUP > ? ? ? ? idmap_ldb:use rfc2307 ?= yes > ? ? ? ? ldap server require strong auth = no > ? ? ? ? template shell = /bin/bash > ? ? ? ? template homedir = /home/%U > ? ? ? ? time server = yes > > [netlogon] > ? ? ? ? path = /usr/local/samba/var/locks/sysvol/example.com/scripts > <http://example.com/scripts> > ? ? ? ? read only = No > > [sysvol] > ? ? ? ? path = /usr/local/samba/var/locks/sysvol > ? ? ? ? read only = No > > Regards > AlfonsoIt looks like you have built Samba yourself, so did you run this script: https://git.samba.org/?p=samba.git;a=blob_plain;f=bootstrap/generated-dists/centos7/bootstrap.sh;hb=master Before you built Samba ? Have you installed and started 'krb5-server' ? Rowland
> It looks like you have built Samba yourself,Yes. I followed the guide and built Samba myself.> so did you run this script:https://git.samba.org/?p=samba.git;a=blob_plain;f=bootstrap/generated-dists/centos7/bootstrap.sh;hb=master>Before you built Samba ?No. I was not aware of this step.>Have you installed and started 'krb5-server' ?No. I have checked and only krb5-workstation and krb5-libs were installed. Kindly advise how I should follow up from here. Thank you. Regards Alfonso On Wed, Aug 12, 2020 at 3:39 PM Rowland penny via samba < samba at lists.samba.org> wrote:> On 12/08/2020 08:24, Alfonso Conner wrote: > > Hi Rowland, > > > > Sorry I missed out on the OS. > > > > CentOS Linux release 7.6.1810 (Core) > > > > smb.conf > > # Global parameters > > [global] > > bind interfaces only = Yes > > interfaces = lo ens192 > > netbios name = SERVER1 > > realm = EXAMPLE.COM <http://EXAMPLE.COM> > > server role = active directory domain controller > > workgroup = WORKGROUP > > idmap_ldb:use rfc2307 = yes > > ldap server require strong auth = no > > template shell = /bin/bash > > template homedir = /home/%U > > time server = yes > > > > [netlogon] > > path = /usr/local/samba/var/locks/sysvol/example.com/scripts > > <http://example.com/scripts> > > read only = No > > > > [sysvol] > > path = /usr/local/samba/var/locks/sysvol > > read only = No > > > > Regards > > Alfonso > > It looks like you have built Samba yourself, so did you run this script: > > > https://git.samba.org/?p=samba.git;a=blob_plain;f=bootstrap/generated-dists/centos7/bootstrap.sh;hb=master > > Before you built Samba ? > > Have you installed and started 'krb5-server' ? > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >