facing very slow authentication responses from samba4, urget help needed

[Matthieu Patou]

On 05/22/2012 10:05 AM, Andreas Oster wrote:
> Am 22.05.2012 11:14, schrieb Andreas Oster:
>> Am 22.05.2012 10:08, schrieb Matthieu Patou:
>>> On 05/22/2012 12:35 AM, Andreas Oster wrote:
>>>> Am 22.05.2012 09:27, schrieb Matthieu Patou:
>>>>> On 05/21/2012 10:23 PM, Andreas Oster wrote:
>>>>>> Hello Matthieu,
>>>>>>
>>>>>> I have managed to improve responsiveness of the mail clients by
>>>>>> reducing the LDAP queries from Postfix. Actually there had been
>>>>>> an error in my config which resulted in a lot of useless querries.
>>>>>> But even with the reduced amount of queries it is not fast, compared
>>>>>> to the Windows server and I can see high CPU utilization by the
>>>>>> samba process whenever a LDAP query is done.
>>>>>>
>>>>> Do you have any idea of the queries that are done ?
>>>> what do you mean ?
>>> do you know which LDAP queries your postfix is now doing ?
>>>
>>> Matthieu
>>>
>> Hello Matthieu,
>>
>> I will test this evening and send you the logs.
>>
>> best regards
>>
>> Andreas
>>
> Hello Matthieu,
>
> this is the ldap queries when sending a mail from test account:
>
> ldb: ldb FULL SEARCH:
> (&(!(isDeleted=TRUE))(&(objectclass=person)(otherMailbox=test at novanetwork.de)))
> SCOPE: sub DN: ou=HQ,dc=novanetwork,dc=loc
>
> ldb: ldb FULL SEARCH:
> (&(!(isDeleted=TRUE))(&(objectclass=person)(|(mail=test at novanetwork.de)(otherMailbox=test at novanetwork.de))))
> SCOPE: sub DN: ou=HQ,dc=novanetwork,dc=loc
>
> so only two ldap requests for each sent mail.
No two non indexed search, you might have more than 2 LDAP queries the 
best way to see all the queries is to make a tcpdump trace from postfix 
to samba.
But still here you have 2 non indexed searches.

So the first question is how big is your installation (ie. how many 
computers, users, contacts), the second is are you ok to change your 
schema to index the non indexed attributes ?

Matthieu.

-- 
Matthieu Patou
Samba Team
http://samba.org