search for: ldapsrv_searchrequest

hi, I have to activate the thread again ... we keep having preformance problems on the DC, especially on Monday morning when the PCs are switched on and the users log in. some ldap-searches take a very long time, sometimes even over 15 seconds e.g: ldapsrv_SearchRequest: LDAP Query: Duration was 15.74s, SearchRequest by S-1-5-21-xxxxxxxxxx-xxxxxxxxxxxxxx-8585 from ipv4:192.168.35.117:49240 filter: [(objectClass=user)] basedn: [DC=example,DC=net] scope: [SUB] result: Success The load of the ldap processes reaches 100% of a CPU. The ldapserver is then no longer re...

On Mon, 2022-09-19 at 14:04 +0000, Heinz H?lzl via samba wrote: > hello, > I often have the problem of high load on the LDAP processes. > 1-3 LDAP processes cause 100% cpu load for approx. 10 sec. This > happens > regularly in intervals of 2-3 minutes. > How can I find out which client is causing this load and why? > How can I configure the logging to see who/what is causing

...indd.c:738(winbind_client_response_written) winbind_client_response_written[2303:PAM_AUTH]: delivered response to client ------------------------------ Now logging of samba4 on domain controller: ------------------------------ [2012/12/01 21:36:34, 5] ../source4/ldap_server/ldap_backend.c:572(ldapsrv_SearchRequest) ldb_request SUB dn=dc=MITXP,dc=COM filter=(&(|(sAMAccountType=805306368)(sAMAccountType=805306369)(sAMAccountType=805306370)(sAMAccountType=268435456)(sAMAccountType=536870912))(|(objectSid=\01\05\00\00\00\00\00\05\15\00\00\00\81i\7FPuFDc\BE-\EF\26S\04\00\00))) [2012/12/01 21:36:34, 5] ....

...srv_drsuapi_DsBind)   ../source4/rpc_server/drsuapi/dcesrv_drsuapi.c:89: doing DsBind with system_session [2017/12/27 08:20:55.641297,  3] ../lib/ldb-samba/ldb_wrap.c:326(ldb_wrap_connect)   ldb_wrap open of secrets.ldb [2017/12/27 08:20:55.644257,  5] ../source4/ldap_server/ldap_backend.c:578(ldapsrv_SearchRequest)   ldb_request BASE dn= filter=(|(objectClass=*)(distinguishedName=*)) [2017/12/27 08:20:55.706421,  6] ../lib/util/util_ldb.c:60(gendb_search_v)   gendb_search_v: DC=ad,DC=kdu,DC=com NULL -> 1 [2017/12/27 08:20:55.706573,  6] ../lib/util/util_ldb.c:60(gendb_search_v)   gendb_search_v: DC=ad,...

...v_drsuapi.c:89: doing DsBind > > with system_session > > [2017/12/27 08:20:55.641297,  3] > > ../lib/ldb-samba/ldb_wrap.c:326(ldb_wrap_connect) > >   ldb_wrap open of secrets.ldb > > [2017/12/27 08:20:55.644257,  5] > > ../source4/ldap_server/ldap_backend.c:578(ldapsrv_SearchRequest) > >   ldb_request BASE dn= > > filter=(|(objectClass=*)(distinguishedName=*)) [2017/12/27 > > 08:20:55.706421,  6] ../lib/util/util_ldb.c:60(gendb_search_v) > >   gendb_search_v: DC=ad,DC=kdu,DC=com NULL -> 1 > > [2017/12/27 08:20:55.706573,  6] > > ../lib/u...

...ond a few thousand members" and you don't. So it comes down to the other thing he mentions, LDAP responses that are just really big. In this other recent message https://lists.samba.org/archive/samba/2025-January/250841.html I was noticing that you have a lot of these requests: > ldapsrv_SearchRequest: LDAP Query: Duration was 1.74s, SearchRequest > by S-1-5-21-xxxxxxxxxxxxx-xxxxxxxxxxxxxx-xxxxxxxxxxxxxxx-3084 from > ipv4:192.168.48.87:33768 filter: > [(|(objectClass=user)(objectClass=group))] basedn: [dc=GVCC,dc=NET] > scope: [SUB] result: Success which to me looks like multiple c...

...ng for, however it is very very talkative and it fills up the log partition way too fast. I wanted to try to single out one debug class using "debug class = yes" in smb.conf, however the it does not gives any : [2019/11/18 22:02:54.687235, 5] ../../source4/ldap_server/ldap_backend.c:783(ldapsrv_SearchRequest) ldb_request SUB dn=cn=users,dc=testing,dc=lan filter=(|(objectClass=*)(distinguishedName=*)) When looking at other items in the log, I do have a debug class [2019/11/18 22:02:54.682490, 3, class=ldb] ../../lib/ldb-samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of privilege.ldb Is it...

...rce4/rpc_server/drsuapi/dcesrv_drsuapi.c:89: doing DsBind with > system_session > [2017/12/27 08:20:55.641297,  3] > ../lib/ldb-samba/ldb_wrap.c:326(ldb_wrap_connect) >   ldb_wrap open of secrets.ldb > [2017/12/27 08:20:55.644257,  5] > ../source4/ldap_server/ldap_backend.c:578(ldapsrv_SearchRequest) >   ldb_request BASE dn= filter=(|(objectClass=*)(distinguishedName=*)) > [2017/12/27 08:20:55.706421,  6] > ../lib/util/util_ldb.c:60(gendb_search_v) >   gendb_search_v: DC=ad,DC=kdu,DC=com NULL -> 1 > [2017/12/27 08:20:55.706573,  6] > ../lib/util/util_ldb.c:60(gendb_searc...

...oing DsBind >>> with system_session >>> [2017/12/27 08:20:55.641297,  3] >>> ../lib/ldb-samba/ldb_wrap.c:326(ldb_wrap_connect) >>>   ldb_wrap open of secrets.ldb >>> [2017/12/27 08:20:55.644257,  5] >>> ../source4/ldap_server/ldap_backend.c:578(ldapsrv_SearchRequest) >>>   ldb_request BASE dn= >>> filter=(|(objectClass=*)(distinguishedName=*)) [2017/12/27 >>> 08:20:55.706421,  6] ../lib/util/util_ldb.c:60(gendb_search_v) >>>   gendb_search_v: DC=ad,DC=kdu,DC=com NULL -> 1 >>> [2017/12/27 08:20:55.706573,  6] &g...

...I have to activate the thread again ... > > we keep having preformance problems on the DC, especially on Monday > morning when the PCs are switched on and the users log in. > > some ldap-searches take a very long time, sometimes even over 15 > seconds > > e.g: > > ldapsrv_SearchRequest: LDAP Query: Duration was 15.74s, SearchRequest > by S-1-5-21-xxxxxxxxxx-xxxxxxxxxxxxxx-8585 from > ipv4:192.168.35.117:49240 filter: [(objectClass=user)] basedn: > [DC=example,DC=net] scope: [SUB] result: Success > > > The load of the ldap processes reaches 100% of a CPU. The l...

...sion >>>>> [2017/12/27 08:20:55.641297, 3] >>>>> ../lib/ldb-samba/ldb_wrap.c:326(ldb_wrap_connect) >>>>> ldb_wrap open of secrets.ldb >>>>> [2017/12/27 08:20:55.644257, 5] >>>>> ../source4/ldap_server/ldap_backend.c:578(ldapsrv_SearchRequest >>>>> ) >>>>> ldb_request BASE dn= >>>>> filter=(|(objectClass=*)(distinguishedName=*)) [2017/12/27 >>>>> 08:20:55.706421, 6] ../lib/util/util_ldb.c:60(gendb_search_v) >>>>> gendb_search_v: DC=ad,DC=kdu,DC=com NULL -&...

...m_session > > > > [2017/12/27 08:20:55.641297, 3] > > > > ../lib/ldb-samba/ldb_wrap.c:326(ldb_wrap_connect) > > > > ldb_wrap open of secrets.ldb > > > > [2017/12/27 08:20:55.644257, 5] > > > > ../source4/ldap_server/ldap_backend.c:578(ldapsrv_SearchRequest > > > > ) > > > > ldb_request BASE dn= > > > > filter=(|(objectClass=*)(distinguishedName=*)) [2017/12/27 > > > > 08:20:55.706421, 6] ../lib/util/util_ldb.c:60(gendb_search_v) > > > > gendb_search_v: DC=ad,DC=kdu,DC=com NULL -> 1...

...other recent message https://urldefense.com/v3/__https://lists.samba.org/archive/samba/2025-January/250841.html__;!!IC0dFnBEFA8modo!S3aHN65Fn1ih_t2m5OlaQpmBO-ZIArbxHJBv4Zx7MphefeUpEVpTnkFBXvhFnGnkyygCrXS-VU6cXsPId_S0FpufGoAISaxgtqI$ I was noticing that you have a lot of these requests: > ldapsrv_SearchRequest: LDAP Query: Duration was 1.74s, SearchRequest > by S-1-5-21-xxxxxxxxxxxxx-xxxxxxxxxxxxxx-xxxxxxxxxxxxxxx-3084 from > ipv4:192.168.48.87:33768 filter: > [(|(objectClass=user)(objectClass=group))] basedn: [dc=GVCC,dc=NET] > scope: [SUB] result: Success which to me looks like multip...

...NT_STATUS_OBJECT_NAME_NOT_FOUND [2018/04/03 15:38:03.940021, 3] ../source4/rpc_server/drsuapi/dcesrv_drsuapi.c:89(dcesrv_drsuapi_DsBind) ../source4/rpc_server/drsuapi/dcesrv_drsuapi.c:89: doing DsBind with system_session [2018/04/03 15:38:03.943375, 5] ../source4/ldap_server/ldap_backend.c:578(ldapsrv_SearchRequest) ldb_request BASE dn=CN=WIN7-NET-01,CN=Computers,DC=teste,DC=net filter=(ObjectClass=*) [2018/04/03 15:38:03.953205, 3] ../source4/smbd/service_stream.c:65(stream_terminate_connection) Terminating connection - 'ldapsrv_call_wait_done: call->wait_recv() - NT_STATUS_LOCAL_DISCONNECT'...

...Samba log: Aug 22 14:07:46 ad samba[15167]: [2016/08/22 14:07:46.570925, 3] ../lib/ldb-samba/ldb_wrap.c:321(ldb_wrap_connect) Aug 22 14:07:46 ad samba[15167]: ldb_wrap open of secrets.ldb Aug 22 14:07:46 ad samba[15167]: [2016/08/22 14:07:46.578832, 5] ../source4/ldap_server/ldap_backend.c:576(ldapsrv_SearchRequest) Aug 22 14:07:46 ad samba[15167]: ldb_request BASE dn= filter=(|(objectClass=*)(distinguishedName=*)) Aug 22 14:07:46 ad samba[15169]: [2016/08/22 14:07:46.585286, 6] ../lib/util/util_ldb.c:60(gendb_search_v) Aug 22 14:07:46 ad samba[15169]: gendb_search_v: DC=corp,DC=example,DC=com,DC=pl NULL...

hi, here is the number of member assignments: regards, Heinz ldbsearch -H /usr/local/samba/private/sam.ldb | \ grep -o -C1 '^member\b' | uniq -c | grep member | sort -n 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1 member 1