question about stability/scalability...

Luke Kenneth Casson Leighton lkcl at switchboard.net
Wed Mar 24 03:08:37 GMT 1999


josh,

check the archives both samba-technical and samba-ntdom, let them speak
for themselves.  the "user manager for domains" functionality is actually
completely unnecessary.

the minimal functionality is there.  there are workarounds for those bits
that aren't (e.g printing).

luke

On Tue, 23 Mar 1999, Josh Duncan wrote:

> 
> Hello all,
> 
> My computer science department at my univ. is currently using samba as our
> primary file server, as well as pdc.  We are using a 2.0.x release of
> samba, but want to move to the head code(2.1beta?) to get support for
> domain user lists(acls) and the like.
> 
> However, we do not want, nor can we afford, to jump in blindly with the
> head code.
> 
> My question is this:
> I know that people are currently using all these features in samba.  How
> stable is it? That is, how well does your samba server handle the auth
> requests, etc etc before(if) it dies?  Is this something that you would
> recommend, or have done, to implement it on a site with approx 150-250
> workstations, and anywhere between 500-1000+ user accounts?
> 
> We know that all this can be done, because we are already authenticating
> these users, with file services, but we are wondering if the access
> control code is stable enough for prime-time use.(functionality we now
> use: authenticate user, connect to shares.  functionality we want:
> authenticate user, with proper privs/rights/policies on the local machine,
> and connect shares)
> 
> I realize I may not have put together the clearest email here(this nt crap
> confooses the heck outa me.)  If i sound like I am talking gobbledy gook,
> please let me know and I will try to enumerate better our needs.
> 
> If what I said made some semblance of sense, could you please let me know
> your experiences with the stability of the head code with respect to what 
> we want to do?
> 
> 
> thanks in advance for any advice on our situation,
> Josh
> 
> On Wed, 24 Mar 1999, Luke Kenneth Casson Leighton wrote:
> 
> > Date: Wed, 24 Mar 1999 07:50:28 +1100
> > From: Luke Kenneth Casson Leighton <lkcl at switchboard.net>
> > To: Multiple recipients of list <samba-ntdom at samba.org>
> > Subject: Re: rpcclient
> > 
> > ok, committed a change which should allow rpcclient to read an unlimited
> > number of users.  groups and aliases are still limited to MAX_SAM_ENTRIES,
> > which  is hard-coded to 250 right now.
> > 
> > On Wed, 24 Mar 1999, Luke Kenneth Casson Leighton wrote:
> > 
> > > i'm doing malloc'd array right now.
> > > 
> > > On Tue, 23 Mar 1999, Dave J. Andruczyk wrote:
> > > 
> > > > > > > enumusers
> > > > > > > 
> > > > > > > SAM Enumerate Users
> > > > > > > From: MADAGASCAR To: \\MONTREAL1 Domain: DL_MONTREAL SID:
> > > > > > > S-1-5-21-1967852569-1490712752-444732941
> > > > > > > cli_pipe: return critical error. Error was ERRDOS - ERRpipebusy (All instances
> > > > > > > of the requested pipe are busy.)
> > > > > 
> > > > > ok i am seeing this blow up because there is a hard limit on the static
> > > > > alloc'd array to 250 users.
> > > > 
> > > > Why not use a linked list?
> > > > 
> > > > Dave J. Andruczyk
> > > > Instructional Support Associate
> > > > Department of Technology     
> > > > Buffalo State College
> > > > 
> > > > 
> > > > 
> > > > 
> > > 
> > > <a href="mailto:lkcl at samba.org"   > Luke Kenneth Casson Leighton  </a>
> > > <a href="http://www.cb1.com/~lkcl"> Samba and Network Development </a>
> > > <a href="http://samba.org"        > Samba Web site                </a>
> > > 
> > > =====================================================================
> > > Luke Kenneth Casson Leighton        |  Direct Dial   : (678) 443-6183
> > > Systems Engineer / ISS XForce Team  |  ISS Front Desk: (678) 443-6000
> > > Internet Security Systems, Inc.     |  ISS Fax       : (678) 443-6477
> > > 
> > > http://www.iss.net/    *Adaptive Network Security for the Enterprise*
> > >      ISS Connect   -   International User Conference   -  May '99
> > > =====================================================================
> > > 
> > > 
> > 
> > <a href="mailto:lkcl at samba.org"   > Luke Kenneth Casson Leighton  </a>
> > <a href="http://www.cb1.com/~lkcl"> Samba and Network Development </a>
> > <a href="http://samba.org"        > Samba Web site                </a>
> > 
> > =====================================================================
> > Luke Kenneth Casson Leighton        |  Direct Dial   : (678) 443-6183
> > Systems Engineer / ISS XForce Team  |  ISS Front Desk: (678) 443-6000
> > Internet Security Systems, Inc.     |  ISS Fax       : (678) 443-6477
> > 
> > http://www.iss.net/    *Adaptive Network Security for the Enterprise*
> >      ISS Connect   -   International User Conference   -  May '99
> > =====================================================================
> > 
> > 
> 
> --
>     There is never any peace for those who resist God.
>                                ... Francois Fenelon (1651-1715)
> 
> Josh Duncan
> duncan at msmd.org
> http://www.msmd.org/
> 
> 

<a href="mailto:lkcl at samba.org"   > Luke Kenneth Casson Leighton  </a>
<a href="http://www.cb1.com/~lkcl"> Samba and Network Development </a>
<a href="http://samba.org"        > Samba Web site                </a>

=====================================================================
Luke Kenneth Casson Leighton        |  Direct Dial   : (678) 443-6183
Systems Engineer / ISS XForce Team  |  ISS Front Desk: (678) 443-6000
Internet Security Systems, Inc.     |  ISS Fax       : (678) 443-6477

http://www.iss.net/    *Adaptive Network Security for the Enterprise*
     ISS Connect   -   International User Conference   -  May '99
=====================================================================



More information about the samba-ntdom mailing list