[Samba] 3.0.25 Winbind high CPU usage

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jason Lanclos wrote:
> I just upgraded from 3.0.23d to 3.0.25 and I'm noticing that winbind is
> chewing up a lot of CPU usage.
> 
> There are always 2 winbindd processes and one uses about 80% cpu and the
> other use 15% cpu.
> 
> When I run a tcpdump and look at the traffic going to/from the domain
> controller winbindd is connected to, there is a constant flow of
> traffic.
> 
> 
> Here is the winbind setup from my smb.conf file:
> 
>    #idmap uid = 16777216-33554431
>    #idmap gid = 16777216-33554431
>    allow trusted domains = no
>    #idmap backend = idmap_rid:WORKGROUP=16777216-33554431
>    idmap alloc backend = tdb
> 
>    idmap domains = WORKGROUP
>    idmap config WORKGROUP: default =    yes
>    idmap config WORKGROUP: backend =    rid
>    idmap config WORKGROUP: read_only = yes
>    idmap config WORKGROUP: range = 16777216-33554431
>    idmap alloc config: range = 16777216-33554431
> 
>    winbind offline logon = true
>    winbind nested groups = no
>    winbind enum users = yes
>    winbind enum groups = yes
>    winbind cache time = 900

First I would disable thwe winbindd enum users/group options.
Second, you might want to push the "idmap cache time" and
"idmap negative cache time" value up from their default values.

Finally, I have it on my TODO list to move the winbindd and
idmap cache managers into the main winbindd proces so we don't
have to cross process boundaries unless we actually hitting
the backend (i.e. xpired cache entries).

Can you give me a better idea of what is going on in smbd
and other applications running on the server?






cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGTd1MIR7qMdg1EfYRAoJMAJ9Nye7WhjjOOklNJsVbTfGCBSSn9ACgsCeq
KgPypRDG/SoGuhyb0J1A1BA=
=oc5C
-----END PGP SIGNATURE-----