thr3ads.net - samba - [Samba] Slow Samba AD DC performance compared to Microsoft AD DC [Aug 2020]

If this information is useful, please help other people find it:
Share via:

L.P.H. van Belle

2020-Aug-27 10:59 UTC

[Samba] Slow Samba AD DC performance compared to Microsoft AD DC

Lookup in the Windows setup where indexing is applied. 

And, upgrade you os +samba (as Rowland also said). 

Indexing on ad-object greatly improved in later samba versions. 

ldbsearch -H "$(samba -b|grep PRIVATE_DIR |awk '{ print $NF
}')/sam.ldb"  -s base -b @INDEXLIST
Will show you the index one's in samba.


Greetz, 

Louis

 
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Sinan Ozturk via samba
> Verzonden: donderdag 27 augustus 2020 12:48
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] Slow Samba AD DC performance compared to 
> Microsoft AD DC
> 
> Hello everyone.
> 
> I have a problem with performance of Samba AD DC.
> 
> We have a Laravel application that queries both Microsoft AD 
> DC and Samba AD DC.
> 
> When a query comes to AD it takes 1 second to complete, 
> however with Samba it can take up to 4-5 seconds.
> 
> The queries are updating user, creating group and attaching 
> people to groups.
> 
> Samba Server has more than 6000 users.
> 
> The VM has 2 CPU 2 GB Ram and Virtio network card running 
> Ubuntu 14.04 with Samba 4.3.11.
> 
> Is there any way I can speed up Samba server?
> 
> Here is the smb.conf file
> 
> ###########################################################
> # Global parameters
> [global]
>         workgroup = domain
>         realm = domain.COM
>         netbios name = JUGGERNAUT
>         server role = active directory domain controller
>         dns forwarder = 172.31.238.11
>         idmap_ldb:use rfc2307 = yes
>         log level = 1
>         ldap ssl = off
>         ldap server require strong auth = no
> [netlogon]
>         path = /var/lib/samba/sysvol/domain.com/scripts
>         read only = No
> 
> [sysvol]
>         path = /var/lib/samba/sysvol
>         read only = No
> 
> ###########################################################
> 
> Thanks.
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

Andrew Bartlett

2020-Aug-27 21:21 UTC

head link

[Samba] Slow Samba AD DC performance compared to Microsoft AD DC

Yeah, both indexed and not-indexed queries are so, so much better now.

Like orders of magnitude better for an un-indexed search after we fixed
some locking bugs, which showed our index scheme wasn't actually any
good, so we fixed that also.

I don't recall the exact numbers, but we went to the extent of writing
a tool to measure Samba and windows performance and found we now within
the same ball-park for certain combinations of load, db size and
machine size.

Andrew Bartlett

On Thu, 2020-08-27 at 12:59 +0200, L.P.H. van Belle via samba
wrote:> Lookup in the Windows setup where indexing is applied. 
> 
> And, upgrade you os +samba (as Rowland also said). 
> 
> Indexing on ad-object greatly improved in later samba versions. 
> 
> ldbsearch -H "$(samba -b|grep PRIVATE_DIR |awk '{ print $NF
> }')/sam.ldb"  -s base -b @INDEXLIST
> Will show you the index one's in samba.
> 
> 
> Greetz, 
> 
> Louis
> 
>  
> 
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> > Sinan Ozturk via samba
> > Verzonden: donderdag 27 augustus 2020 12:48
> > Aan: samba at lists.samba.org
> > Onderwerp: [Samba] Slow Samba AD DC performance compared to 
> > Microsoft AD DC
> > 
> > Hello everyone.
> > 
> > I have a problem with performance of Samba AD DC.
> > 
> > We have a Laravel application that queries both Microsoft AD 
> > DC and Samba AD DC.
> > 
> > When a query comes to AD it takes 1 second to complete, 
> > however with Samba it can take up to 4-5 seconds.
> > 
> > The queries are updating user, creating group and attaching 
> > people to groups.
> > 
> > Samba Server has more than 6000 users.
> > 
> > The VM has 2 CPU 2 GB Ram and Virtio network card running 
> > Ubuntu 14.04 with Samba 4.3.11.
> > 
> > Is there any way I can speed up Samba server?
> > 
> > Here is the smb.conf file
> > 
> > ###########################################################
> > # Global parameters
> > [global]
> >         workgroup = domain
> >         realm = domain.COM
> >         netbios name = JUGGERNAUT
> >         server role = active directory domain controller
> >         dns forwarder = 172.31.238.11
> >         idmap_ldb:use rfc2307 = yes
> >         log level = 1
> >         ldap ssl = off
> >         ldap server require strong auth = no
> > [netlogon]
> >         path = /var/lib/samba/sysvol/domain.com/scripts
> >         read only = No
> > 
> > [sysvol]
> >         path = /var/lib/samba/sysvol
> >         read only = No
> > 
> > ###########################################################
> > 
> > Thanks.
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> > 
> > 
> 
> -- 
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT          
https://catalyst.net.nz/services/samba

Sinan Ozturk

2020-Aug-28 08:16 UTC

head link

[Samba] Slow Samba AD DC performance compared to Microsoft AD DC

Hello again, I decided to upgrade.

However, my method of doing upgrade is transferring files of 14.04 Samba to new
18.04 Samba Server with version 4.7.6.
The files under /etc/samba, /var/lib/samba and /etc/krb5.conf.

I actually test the upgrade only replPropertyMetaData has error in database and
db-check fixed it.  I also checked the logs there was no problem.
It looks like it is working.

Is this a bad way to upgrade?

What problems can occur?

Thanks.
________________________________
From: samba <samba-bounces at lists.samba.org> on behalf of Andrew
Bartlett via samba <samba at lists.samba.org>
Sent: Friday, August 28, 2020 00:21
To: L.P.H. van Belle <belle at bazuin.nl>; samba at lists.samba.org
<samba at lists.samba.org>
Cc: Douglas Bagnall <douglas.bagnall at catalyst.net.nz>
Subject: Re: [Samba] Slow Samba AD DC performance compared to Microsoft AD DC

Yeah, both indexed and not-indexed queries are so, so much better now.

Like orders of magnitude better for an un-indexed search after we fixed
some locking bugs, which showed our index scheme wasn't actually any
good, so we fixed that also.

I don't recall the exact numbers, but we went to the extent of writing
a tool to measure Samba and windows performance and found we now within
the same ball-park for certain combinations of load, db size and
machine size.

Andrew Bartlett

On Thu, 2020-08-27 at 12:59 +0200, L.P.H. van Belle via samba
wrote:> Lookup in the Windows setup where indexing is applied.
>
> And, upgrade you os +samba (as Rowland also said).
>
> Indexing on ad-object greatly improved in later samba versions.
>
> ldbsearch -H "$(samba -b|grep PRIVATE_DIR |awk '{ print $NF
> }')/sam.ldb"  -s base -b @INDEXLIST
> Will show you the index one's in samba.
>
>
> Greetz,
>
> Louis
>
>
>
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> > Sinan Ozturk via samba
> > Verzonden: donderdag 27 augustus 2020 12:48
> > Aan: samba at lists.samba.org
> > Onderwerp: [Samba] Slow Samba AD DC performance compared to
> > Microsoft AD DC
> >
> > Hello everyone.
> >
> > I have a problem with performance of Samba AD DC.
> >
> > We have a Laravel application that queries both Microsoft AD
> > DC and Samba AD DC.
> >
> > When a query comes to AD it takes 1 second to complete,
> > however with Samba it can take up to 4-5 seconds.
> >
> > The queries are updating user, creating group and attaching
> > people to groups.
> >
> > Samba Server has more than 6000 users.
> >
> > The VM has 2 CPU 2 GB Ram and Virtio network card running
> > Ubuntu 14.04 with Samba 4.3.11.
> >
> > Is there any way I can speed up Samba server?
> >
> > Here is the smb.conf file
> >
> > ###########################################################
> > # Global parameters
> > [global]
> >         workgroup = domain
> >         realm = domain.COM
> >         netbios name = JUGGERNAUT
> >         server role = active directory domain controller
> >         dns forwarder = 172.31.238.11
> >         idmap_ldb:use rfc2307 = yes
> >         log level = 1
> >         ldap ssl = off
> >         ldap server require strong auth = no
> > [netlogon]
> >         path = /var/lib/samba/sysvol/domain.com/scripts
> >         read only = No
> >
> > [sysvol]
> >         path = /var/lib/samba/sysvol
> >         read only = No
> >
> > ###########################################################
> >
> > Thanks.
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
> >
>
>--
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT
https://catalyst.net.nz/services/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Apparently Analagous Threads

Search for more apparently analagous threads

samba - Aug 2020 - Slow Samba AD DC performance compared to Microsoft AD DC

[Samba] Slow Samba AD DC performance compared to Microsoft AD DC

[Samba] Slow Samba AD DC performance compared to Microsoft AD DC

[Samba] Slow Samba AD DC performance compared to Microsoft AD DC

Apparently Analagous Threads