can I let all winbindd processes accept connections like nginx does

Volker Lendecke Volker.Lendecke at SerNet.DE
Tue Dec 10 15:00:37 MST 2013

On Tue, Dec 10, 2013 at 08:04:18PM +0800, Tom wrote:
> Hi list,
> I'm using samba3.6.12.
> I find that seems only the parent winbindd process can accept connections, and it dispatches connections to his child.
> besides it only dispatches connections to the completely idle child(find_idle_child).

This is because the children are not async or
multi-threaded, they are single-request-response.

> AFAIK, nginx lets all its processes to accept connections, so it has a good performance.
> I'm wondering can I modify some winbindd code to let all winbindd processes to accept connections and then handles the request.
> If it is possible, I think I can get a better performance winbindd.

Possibly, but right now this is not possible, sorry. The
reason why winbind does it this way is that for many kinds
of requests winbind has to answer it needs to talk to more
than one kind of service, represented by different children.
The current winbind design grew out of it having a
single-threaded RPC infrastructure, and we wanted to make
that more scalable among different tasks.

> I want to do this because I'm doing NTLM authentication using winbindd and I found winbindd's performance doesn't meet my requirement.
> I expect more than 1000 authentication transaction per second.

You will probably have a hard time to find a domain
controller to do that amount of load. We are working right
now to distribute the load across multiple DCs, so this
bottleneck should be removed at some point.

We believe that with the current architecture we could
scale, we believe the bottleneck is the DCs. Possibly we
need some careful performance tuning though. For that we
would need some powerful close to real world setup that we
could test against and, the most scarce resource
unfortunately, some time to do that work.

With best regards,

Volker Lendecke

SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen, mailto:kontakt at

More information about the samba-technical mailing list