Samba4 high cpu load

[steve]

On 05/13/2012 12:37 AM, Günter Kukkukk wrote:
> On Saturday, 12. May 2012 23:38:24 steve wrote:
>> On 05/09/2012 10:29 AM, Michael Wood wrote:
>>> Hi
>>>
>>> On 9 May 2012 10:21, steve<steve at steve-ss.com>   wrote:
>>>> On 09/05/12 04:02, Günter Kukkukk wrote:
>>> [...]
>>>
>>>>> i've contacted one of the gnutls developers (Nikos Mavrogiannopoulos).
>>>>> He told me that when generating the Diffie-Hellman key, some (3.x.x)
>>>>> versions used a very slow algorithm.
>>>>> He recommends to use gnutls>= 3.0.9
>>>>>
>>>>> Opensuse 12.1 uses gnutls 3.0.3 atm.
>>>>>
>>>>> So i did a recent gnutls-3.0.19 build.
>>>>>
>>>>> With gnutls 3.0.19
>>>>>
>>>>>      time certtool --generate-dh-params --bits 1024
>>>>>
>>>>> is now down to 1 - 2 seconds, compared to 3 - 5 minutes (!!!)
>>>>> with former version 3.0.3 (from opensuse 12.1)
>>>>>
>>>>> Will contact the opensuse maintainers.
>>>>>
>>>>> Cheers, Günter
>>>> Thanks again.
>>>>
>>>> Just compiled 3.0.19 on 12.1. Went OK after I installed libnettle;-) I
>>>> have now removed the workaround from smb.conf:
>>>> #       tls enabled = No
>>>> Can confirm the quick startup. 1 second as opposed to 5 minutes!
>>>>
>>>> I'm a little confused as when I went to uninstall 3.0.3 using Yast, I
>>>> saw only libgnutls28-3.0.3 and libgnutls-devel-3.0.3 were installed.
>>>> libgnutls28 had over 100 dependants so I left that installed and
>>>> removed only the devel package. gnutls-3.0.3 was not installed. Is that
>>>> OK?
>> Hi Günter
>>
>> Would you mind If I posted to the openSUSE list quoting this thread so that
>> we can get the latest gnutls in the forthcoming 12.2 release?
>>
>> Cheers,
>> Steve
> I had contacted Lars via email and also had a short irc talk with him.
> He opened this bug report
>      https://bugzilla.novell.com/show_bthe bugzilla?ug.cgi?id=761987
>
> Cheers, Günter
Forgot to ask. Would you mind if I added our openSUSE admin to the cc of 
761987? Lars does not take kindly to her and I don't want this to 
prevent us getting 3.0.19 into the mainstream.
Cheers,
Steve