similar to: [Samba 4.5] Very slow LDAP Queries (almost unusable), performance tunning ?

No, you have to do that manualy, or look the the samba4 ADS script for kopano ( or zarafa ) But I mostly follow the documentation.   And when i run : time ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b @INDEXLIST .... real    0m0.230s user    0m0.184s sys     0m0.044s   so if yours take more that 20 sec there is something very wrong. I suggest check you samba AD database and

Zarafa is not on the same server as Samba We only have 2 AD/DC Samba 4.5 (CentOS 7) and we put required indexes on LDAP . Arround 1000 mailboxes but not all are simultaneously in use (approx 1/3 in use). MTA is postfix (and is still connected to Samba AD, this one is not causing the issue). As a workarround, we currently deployed a synchronization connector from AD to OpenLDAP. It solves the

Thank you for your message Andrew. Then .. Waiting for this improvement... :-) Indexes seem correct to me. But I'm not sure at 100% because I cannot find clear explanation regarding the searchFlags attribute value .. 1, 2, ... ? Maybe you have one ? Thanks ! ----- Mail original ----- De: "Andrew Bartlett" <abartlet at samba.org> À: "Gaetan SLONGO" <gslongo

Hi,   I talked to Zarafa (Kopano now) support and they acknowledge that their product in combination with Samba does not scale welland is only suitable for what they call smaller setups.     Met Vriendelijke Groet, Kind Regards, Salutations,     Bart Coninckx Bits 'n Tricks BVBA   Hoge Mierdse Heide 182 2360 Oud-Turnhout tel. +32 14 480 820 gsm +32 478 88 33 08 info at bitsandtricks.com

Are use using zarafaAccount=1 withing the search filters? I use this things like this : (&(objectClass=person)(zarafaAccount=1)(|(mail=%s)(otherMailbox=%s))) Or for groups. (&(objectclass=group)(zarafaAccount=1)(|(mail=%s)(otherMailbox=%s))) That helps a lot. ! If you switch to kopano beware to change the SCHEMA and filters zarafaAccount changed to kopanoAccount Greetz. Louis

Can you tell more about your setup? Is zarafa and samba on the same server for example. Which MTA are you using postfix/exim?   My top was about 150 users, and all my printers are connected also so about 200 devices do ldap searches. but my setup is split over 10+ servers ( 2 are AD DC )   So best is to tell what you can about your setup, anonimize if needed.   Greetz,   Louis  

On Mon, 2017-03-27 at 10:43 +0200, Gaetan SLONGO via samba wrote: > Zarafa is not on the same server as Samba  > > We only have 2 AD/DC Samba 4.5 (CentOS 7) and we put required indexes > on LDAP .  > > Arround 1000 mailboxes but not all are simultaneously in use (approx > 1/3 in use).  > MTA is postfix (and is still connected to Samba AD, this one is not > causing the

Mandi! Douglas Bagnall via samba In chel di` si favelave... I've noted that there's no info on samba wiki on index manipulation. And i've some doubt. > If you run > ldbsearch -s base -b @INDEXLIST > you will see a list of "@IDXATTR" attributes. You need to modify it so > that there is one saying: > @IDXATTR: member OK, i've 'member' not

I have a large installation >20k users. We're using samba4 for AD Authentication, and also email address validation. I'm trying to edit the @INDEXLIST in sam.ldb to add an index on otherMailbox to speed up searches (0.05 sec for indexed, vs 2.5 sec for non-indexed searches) I'm finding that when I use ldbedit to do this, it appears to add the additional @IDXATTR. However, when I

On 20/11/24 21:44, Heinz H?lzl wrote: > hi, > >> It is possible to tell Samba to index 'member'. > > How i can do this? > > dbindex:member = yes in smb.conf ?? > No, that has no effect. If you run ldbsearch -s base -b @INDEXLIST you will see a list of "@IDXATTR" attributes. You need to modify it so that there is one saying:

Hai, I need to add some extra indexing on my AD DB, and im not sure if what the correct/best methode is. And is there any reason i should not do this, i did search on the wiki, but could not find the info i searched for. I know the following. Checked the current index. ( source info : https://wiki.samba.org/index.php/LDB ) ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b @INDEXLIST

I have a system running Samba 4 Alpha 11, and I seem to have a corrupted LDB file in my directory. (Probably the result of taking a backup without using tdbbackup). Right now, running tdbbackup on the file produces an error message similar to the following: Failed to insert into DC=WWW,DC=EXAMPLE,DC=COM.ldb.bak.tmp failed to copy DC=WWW,DC=EXAMPLE,DC=COM.ldb If I run ldbsearch -H

Am 17.07.19 um 11:10 schrieb Rowland penny via samba: >> > I thought Samba always used schema version 47, so you should have the > objectclass & attributes in AD, this is the ldif for the objectclass: > > cn: ms-FVE-RecoveryInformation > ldapDisplayName: msFVE-RecoveryInformation > governsId: 1.2.840.113556.1.5.253 > objectClassCategory: 1 > rdnAttId: cn >

On 17/07/2019 09:50, Christian Naumer via samba wrote: > Hi, > I am trying to implement bitlocker key management in samba4 ad. This has > been posted a view times before: > > https://lists.samba.org/archive/samba/2015-December/196771.html > > https://lists.samba.org/archive/samba/2018-July/217168.html > > According to Andrew and this: > >

Hello Rowland, I have already checked and the DN's are in AD, see attached. SOA: <domain>.corp. 3600 IN SOA psad102zadprh.<domain>.corp. . 9766 3600 600 86400 3600 See below NS, but the 1st NS (zatprdc001) doesn't exsit, and I cannot find it anywhere. NS: <domain>.corp. 3600 IN NS zatprdc001.<domain>.corp. <domain>.corp. 3600

I've been programming in one directory and recently switched to another directory. It appears that in doing so I've uncovered a problem. My environment was saving something so that my code would work and now I don't know how to fix it. I have the following bit of code: for(i in 1:index){ indexList = lst[i] for(j in 2:jobs-1){ indexList =

On Wed, 31 Oct 2018 14:52:28 +0100 L.P.H. van Belle <belle at bazuin.nl> wrote: > Hai, >   > I've checked out the log you send and i re-read the complete thread. >   > Based on thats done and what i did see in you logs now, looks like a > * (wildcard)  entry is giving the problem. But i am not sure of that, > the wildcard bugs should be fixed, when i look in

On Fri, 2017-10-27 at 10:36 +0200, L.P.H. van Belle via samba wrote: > Hai, > > I need to add some extra indexing on my AD DB, and im not sure if what the correct/best methode is. > And is there any reason i should not do this, i did search on the wiki, but could not find the info i searched for. > > I know the following. Checked the current index. ( source info :

Hi there, need some helb please: I build a setup with two samba4 AD servers. Unfortunately there is a cadaver and doubled servername in the site-config and I am not able to delete it: root at sambak26:~# ldbsearch -H /var/lib/samba/private/sam.ldb '(objectGUID=cf7d8ac1-b0ae-4e72-9129-ed480ee38006)' --cross-ncs -d0 # record 1 dn: CN=NTDS

Dear all, Running samba-tool ldapcmp on my both DCs samba 4.1.7 leads to the output : Attributes found only in ldap://s4master: msDS-NcType serverState FAILED How to deal with this? I am missing something? [root at s4slave ~]# samba-tool ldapcmp ldap://s4master ldap://s4slave -Uadministrator domain Password for [TPLK\administrator]: * Comparing [DOMAIN]