samba - Nov 2020 - AD Joining Failed in middle

Thanks Rowland for the Reply

On 04/11/20 5:44 pm, Rowland penny via samba wrote:
> On 04/11/2020 12:02, Biswajit Banerjee via samba wrote:
>> My Apologies
>>
>> It is? Windows 2008 AD
>>
> In which case, it should work, so what OS are you using ?
Centos 8
>
> Are you using OS samba packages or have you compiled Samba yourself ?
Complied
>
> All you really need to do is to remove the smb.conf and run the join 
> command again, but, even with your number of users and groups, it 
> shouldn't take hours.
Ok ,

As the Samba Server is visible in Windows AD , do we need to remove it ?
>
> Rowland
>
>
>

On 04/11/2020 12:41, Biswajit Banerjee via samba wrote:
> Thanks Rowland for the Reply
>
> On 04/11/20 5:44 pm, Rowland penny via samba wrote:
>> On 04/11/2020 12:02, Biswajit Banerjee via samba wrote:
>>> My Apologies
>>>
>>> It is? Windows 2008 AD
>>>
>> In which case, it should work, so what OS are you using ?
> Centos 8
>>
>> Are you using OS samba packages or have you compiled Samba yourself ?
> Complied
In which case, how, are you using the system kerberos (MIT) or Heimdal 
that comes bundled with Samba ?
>
> As the Samba Server is visible in Windows AD , do we need to remove it ?
Probably, but I have no idea how you remove it from Windows.

Rowland

On Wed, 2020-11-04 at 12:49 +0000, Rowland penny via samba
wrote:
> On 04/11/2020 12:41, Biswajit Banerjee via samba wrote:
> > Thanks Rowland for the Reply
> > 
> > On 04/11/20 5:44 pm, Rowland penny via samba wrote:
> > > On 04/11/2020 12:02, Biswajit Banerjee via samba wrote:
> > > > My Apologies
> > > > 
> > > > It is  Windows 2008 AD
> > > > 
> > > In which case, it should work, so what OS are you using ?
> > Centos 8
> > > Are you using OS samba packages or have you compiled Samba
> > > yourself ?
> > Complied
> In which case, how, are you using the system kerberos (MIT) or
> Heimdal 
> that comes bundled with Samba ?
It won't be any of that (mit/heimdal, self-compiled or packaged) - none
of that code or the things that changes is really involved at this
point.  This is all in the dsdb and ldb stack.

Samba self-cleans before each join so this won't be an issue.

Perhaps there are a lot of links, or a massive number of other objects,
if there are only 5000 accounts, this is normally handled in seconds.

In short, this isn't normal and if critical then I suggest profiling it
with a flame graph:  
http://www.brendangregg.com/FlameGraphs/cpuflamegraphs.html

Andrew Bartlett

-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT - Expert Open Source
Solutions
https://catalyst.net.nz/services/samba