thr3ads.net - samba - [Samba] [wsdd] Resolution takes several seconds [Oct 2024]

If this information is useful, please help other people find it:
Share via:

Gilles

2024-Oct-18 18:22 UTC

[Samba] [wsdd] Resolution takes several seconds

On 18/10/2024 19:39, Peter Milesson via samba wrote:> Check if you have got the nscd service running. If it is, try to 
> disable/remove it. It has played tricks on me in the past, and I 
> always make sure it's not installed. It's just a far fetched hunch,
> though.
AFAICT, it's not running:
==============root at debian:~# netstat -tunlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address?????????? Foreign Address???????? 
State?????? PID/Program name
tcp??????? 0????? 0 0.0.0.0:22 0.0.0.0:*?????????????? LISTEN????? 
382/sshd: /usr/sbin
tcp??????? 0????? 0 0.0.0.0:80 0.0.0.0:*?????????????? LISTEN????? 
297/nginx: master p
tcp??????? 0????? 0 192.168.0.15:139 0.0.0.0:*?????????????? LISTEN????? 
2994/smbd
tcp??????? 0????? 0 192.168.0.15:5357 0.0.0.0:*?????????????? 
LISTEN????? 7626/python3
tcp??????? 0????? 0 192.168.0.15:445 0.0.0.0:*?????????????? LISTEN????? 
2994/smbd
tcp??????? 0????? 0 127.0.0.1:445 0.0.0.0:*?????????????? LISTEN????? 
2994/smbd
tcp??????? 0????? 0 127.0.0.1:139 0.0.0.0:*?????????????? LISTEN????? 
2994/smbd
tcp6?????? 0????? 0 :::22 :::*??????????????????? LISTEN????? 382/sshd: 
/usr/sbin
tcp6?????? 0????? 0 fe80::50:43ff:fee7:5357 :::*??????????????????? 
LISTEN????? 7626/python3
udp??????? 0????? 0 192.168.0.15:3702 
0.0.0.0:*?????????????????????????? 7626/python3
udp??????? 0????? 0 239.255.255.250:3702 
0.0.0.0:*?????????????????????????? 7626/python3
udp??????? 0????? 0 0.0.0.0:51521 0.0.0.0:*?????????????????????????? 
7626/python3
udp??????? 0????? 0 0.0.0.0:68 0.0.0.0:*?????????????????????????? 
268/dhclient
udp6?????? 0????? 0 fe80::50:43ff:fee7:3702 
:::*??????????????????????????????? 7626/python3
udp6?????? 0????? 0 ff02::c:3702 :::*??????????????????????????????? 
7626/python3
udp6?????? 0????? 0 :::59334 :::*??????????????????????????????? 
7626/python3
==============root at debian:~# ps aux | grep nscd
root????? 8074? 0.0? 0.4?? 7484? 2092 pts/0??? S+?? 20:11?? 0:00 grep nscd
==============
On 18/10/2024 19:29, James Browning via samba wrote:> It almost sounds like ARP is being slow. I do not think that is it though.
I waited a couple of minutes after typing the first "net view" command
in Windows before re-running "arp -a". Samba's IP is still listed,
but
"net view" is again slow. Like Windows/Samba only keeps an open 
connection for a few minutes before closing it or something.

c:\>arp -a
Interface: 192.168.0.17 --- 0xc
 ? Internet Address????? Physical Address????? Type
 ? 192.168.0.13????????? 44-39-c4-56-04-c8???? dynamic
 ? 192.168.0.15????????? 02-50-43-e7-5c-e1???? dynamic
 ? 192.168.0.254???????? 00-07-cb-91-be-45???? dynamic
 ? 192.168.0.255???????? ff-ff-ff-ff-ff-ff???? static
 ? 224.0.0.22??????????? 01-00-5e-00-00-16???? static
 ? 224.0.0.251?????????? 01-00-5e-00-00-fb???? static
 ? 224.0.0.252?????????? 01-00-5e-00-00-fc???? static
 ? 224.15.1.80?????????? 01-00-5e-0f-01-50???? static
 ? 239.255.255.250?????? 01-00-5e-7f-ff-fa???? static
 ? 255.255.255.255?????? ff-ff-ff-ff-ff-ff???? static

Peter Milesson

2024-Oct-18 18:52 UTC

head link

[Samba] [wsdd] Resolution takes several seconds

On 18.10.2024 20:22, Gilles via samba wrote:> On 18/10/2024 19:39, Peter Milesson via samba wrote:
>> Check if you have got the nscd service running. If it is, try to 
>> disable/remove it. It has played tricks on me in the past, and I 
>> always make sure it's not installed. It's just a far fetched
hunch,
>> though.
>
> AFAICT, it's not running:
> ==============> root at debian:~# netstat -tunlp
> Active Internet connections (only servers)
> Proto Recv-Q Send-Q Local Address?????????? Foreign Address???????? 
> State?????? PID/Program name
> tcp??????? 0????? 0 0.0.0.0:22 0.0.0.0:*?????????????? LISTEN 
> 382/sshd: /usr/sbin
> tcp??????? 0????? 0 0.0.0.0:80 0.0.0.0:*?????????????? LISTEN 
> 297/nginx: master p
> tcp??????? 0????? 0 192.168.0.15:139 0.0.0.0:* LISTEN????? 2994/smbd
> tcp??????? 0????? 0 192.168.0.15:5357 0.0.0.0:* LISTEN????? 7626/python3
> tcp??????? 0????? 0 192.168.0.15:445 0.0.0.0:* LISTEN????? 2994/smbd
> tcp??????? 0????? 0 127.0.0.1:445 0.0.0.0:* LISTEN????? 2994/smbd
> tcp??????? 0????? 0 127.0.0.1:139 0.0.0.0:* LISTEN????? 2994/smbd
> tcp6?????? 0????? 0 :::22 :::*??????????????????? LISTEN 382/sshd: 
> /usr/sbin
> tcp6?????? 0????? 0 fe80::50:43ff:fee7:5357 :::*??????????????????? 
> LISTEN????? 7626/python3
> udp??????? 0????? 0 192.168.0.15:3702 
> 0.0.0.0:*?????????????????????????? 7626/python3
> udp??????? 0????? 0 239.255.255.250:3702 
> 0.0.0.0:*?????????????????????????? 7626/python3
> udp??????? 0????? 0 0.0.0.0:51521 0.0.0.0:*?????????????????????????? 
> 7626/python3
> udp??????? 0????? 0 0.0.0.0:68 0.0.0.0:* 268/dhclient
> udp6?????? 0????? 0 fe80::50:43ff:fee7:3702 
> :::*??????????????????????????????? 7626/python3
> udp6?????? 0????? 0 ff02::c:3702 :::*??????????????????????????????? 
> 7626/python3
> udp6?????? 0????? 0 :::59334 :::* 7626/python3
> ==============> root at debian:~# ps aux | grep nscd
> root????? 8074? 0.0? 0.4?? 7484? 2092 pts/0??? S+?? 20:11?? 0:00 grep 
> nscd
> ==============>
> On 18/10/2024 19:29, James Browning via samba wrote:
>> It almost sounds like ARP is being slow. I do not think that is it 
>> though.
>
> I waited a couple of minutes after typing the first "net view"
command
> in Windows before re-running "arp -a". Samba's IP is still
listed, but
> "net view" is again slow. Like Windows/Samba only keeps an open 
> connection for a few minutes before closing it or something.
>
> c:\>arp -a
> Interface: 192.168.0.17 --- 0xc
> ? Internet Address????? Physical Address????? Type
> ? 192.168.0.13????????? 44-39-c4-56-04-c8???? dynamic
> ? 192.168.0.15????????? 02-50-43-e7-5c-e1???? dynamic
> ? 192.168.0.254???????? 00-07-cb-91-be-45???? dynamic
> ? 192.168.0.255???????? ff-ff-ff-ff-ff-ff???? static
> ? 224.0.0.22??????????? 01-00-5e-00-00-16???? static
> ? 224.0.0.251?????????? 01-00-5e-00-00-fb???? static
> ? 224.0.0.252?????????? 01-00-5e-00-00-fc???? static
> ? 224.15.1.80?????????? 01-00-5e-0f-01-50???? static
> ? 239.255.255.250?????? 01-00-5e-7f-ff-fa???? static
> ? 255.255.255.255?????? ff-ff-ff-ff-ff-ff???? static
>
>Hi Gilles,

I see that port 139 is active. It shouldn't be there if you have turned 
netbios. In my smb.conf I have got:

 ??????? disable netbios = yes
 ??????? smb ports = 445

and no port 139 shows up.
Netbios is ancient and deprecated, shouldn't be there.

When having a look at your smb.conf excerpt, do you really need the lines:

hosts allow = 127.0.0.1 192.168.0.0/24
hosts deny = 0.0.0.0/0

bind interfaces only = yes
interfaces = 192.168.0.15/255.255.255.0 127.0.0.1/255.255.255.255

Unless you have more interfaces and IP addresses, those lines are not 
needed in a small network. Block unwanted networks in the firewall instead.

Then, interfaces you should probably refer to interfaces like lo and 
eth0, instead of IP-address/mask. I know that the wiki states that you 
can use IP addresses, but to me, an interface isn't an IP address.

Comment out the 4 lines, restart smbd and winbindd and try again.

Best regards,

Peter

Peter Milesson

2024-Oct-18 19:15 UTC

head link

[Samba] [wsdd] Resolution takes several seconds

On 18.10.2024 20:22, Gilles via samba wrote:> On 18/10/2024 19:39, Peter Milesson via samba wrote:
>> Check if you have got the nscd service running. If it is, try to 
>> disable/remove it. It has played tricks on me in the past, and I 
>> always make sure it's not installed. It's just a far fetched
hunch,
>> though.
>
> AFAICT, it's not running:
> ==============> root at debian:~# netstat -tunlp
> Active Internet connections (only servers)
> Proto Recv-Q Send-Q Local Address?????????? Foreign Address???????? 
> State?????? PID/Program name
> tcp??????? 0????? 0 0.0.0.0:22 0.0.0.0:*?????????????? LISTEN 
> 382/sshd: /usr/sbin
> tcp??????? 0????? 0 0.0.0.0:80 0.0.0.0:*?????????????? LISTEN 
> 297/nginx: master p
> tcp??????? 0????? 0 192.168.0.15:139 0.0.0.0:* LISTEN????? 2994/smbd
> tcp??????? 0????? 0 192.168.0.15:5357 0.0.0.0:* LISTEN????? 7626/python3
> tcp??????? 0????? 0 192.168.0.15:445 0.0.0.0:* LISTEN????? 2994/smbd
> tcp??????? 0????? 0 127.0.0.1:445 0.0.0.0:* LISTEN????? 2994/smbd
> tcp??????? 0????? 0 127.0.0.1:139 0.0.0.0:* LISTEN????? 2994/smbd
> tcp6?????? 0????? 0 :::22 :::*??????????????????? LISTEN 382/sshd: 
> /usr/sbin
> tcp6?????? 0????? 0 fe80::50:43ff:fee7:5357 :::*??????????????????? 
> LISTEN????? 7626/python3
> udp??????? 0????? 0 192.168.0.15:3702 
> 0.0.0.0:*?????????????????????????? 7626/python3
> udp??????? 0????? 0 239.255.255.250:3702 
> 0.0.0.0:*?????????????????????????? 7626/python3
> udp??????? 0????? 0 0.0.0.0:51521 0.0.0.0:*?????????????????????????? 
> 7626/python3
> udp??????? 0????? 0 0.0.0.0:68 0.0.0.0:* 268/dhclient
> udp6?????? 0????? 0 fe80::50:43ff:fee7:3702 
> :::*??????????????????????????????? 7626/python3
> udp6?????? 0????? 0 ff02::c:3702 :::*??????????????????????????????? 
> 7626/python3
> udp6?????? 0????? 0 :::59334 :::* 7626/python3
> ==============> root at debian:~# ps aux | grep nscd
> root????? 8074? 0.0? 0.4?? 7484? 2092 pts/0??? S+?? 20:11?? 0:00 grep 
> nscd
> ==============>
> On 18/10/2024 19:29, James Browning via samba wrote:
>> It almost sounds like ARP is being slow. I do not think that is it 
>> though.
>
> I waited a couple of minutes after typing the first "net view"
command
> in Windows before re-running "arp -a". Samba's IP is still
listed, but
> "net view" is again slow. Like Windows/Samba only keeps an open 
> connection for a few minutes before closing it or something.
>
> c:\>arp -a
> Interface: 192.168.0.17 --- 0xc
> ? Internet Address????? Physical Address????? Type
> ? 192.168.0.13????????? 44-39-c4-56-04-c8???? dynamic
> ? 192.168.0.15????????? 02-50-43-e7-5c-e1???? dynamic
> ? 192.168.0.254???????? 00-07-cb-91-be-45???? dynamic
> ? 192.168.0.255???????? ff-ff-ff-ff-ff-ff???? static
> ? 224.0.0.22??????????? 01-00-5e-00-00-16???? static
> ? 224.0.0.251?????????? 01-00-5e-00-00-fb???? static
> ? 224.0.0.252?????????? 01-00-5e-00-00-fc???? static
> ? 224.15.1.80?????????? 01-00-5e-0f-01-50???? static
> ? 239.255.255.250?????? 01-00-5e-7f-ff-fa???? static
> ? 255.255.255.255?????? ff-ff-ff-ff-ff-ff???? static
>
>Hi Gilles,

Just another point. What does the dhclient do in your server with a 
fixed IP address? It shouldn't be there, unless your server gets the 
address from DHCP. Disable/uninstall the service. Also make sure that 
your hosts file has got proper information. If your server has got a 
fixed IP address it should be something like:

127.0.0.1?????? localhost
192.168.0.15 ??? datasrv.private.home ? datasrv

# The following lines are desirable for IPv6 capable hosts
::1???? localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

Best regards,

Peter

samba - Oct 2024 - [wsdd] Resolution takes several seconds

[Samba] [wsdd] Resolution takes several seconds

[Samba] [wsdd] Resolution takes several seconds

[Samba] [wsdd] Resolution takes several seconds