LDAP Query Delayed on Samba 3.0.10

[Volker Lendecke]

On Tue, Apr 12, 2005 at 05:32:52PM -0500, Murphy, William  wrote:
> We have a server running Solaris 9 and Samba 3.0.10 that is configured
> to query LDAP for group membership information.  It appears as though
> Session Setup AndX SMB calls make the server go to LDAP for group
> information between the 3rd and 4th packet in the session setup
> sequence.  Samba waits an excessive amount of time before doing the LDAP
> query (on the order of 2 - 8 seconds usually) and I was wondering is
> there a configurable option that would affect this or is there a known
> bug that would cause this?  Any advice would be appreciated.

Could it be that you have a large LDAP db and your nss_ldap makes a query for
the 'uniqueMember' attribute? At least with OpenLDAP I could not index on that
without a schema modification. Thus I got a full table scan from OpenLDAP. You
might want to check the port 389 traffic.

Volker