Slow Mappings with NIS and large groups

Tue Sep 26 13:20:30 GMT 2000

Lee,

We use Samba 2.07 and Solaris 7, but essentially to do what you do.
I notice that you are explicitly telling Samba to use NIS groups, we use

NIS but I use a stright compile of Samba and list the groups just as
groups. (no plus sign)

I let the Unix (Linux) resolving routines do the lookups outside of the
Samba software.
We have a similiar setup to yours here and experience no delays with
mass logon's.
 We have around a housand PC's hanging off one server and we have very
few problems.

Anyway I would suggest to try and remove the plus signs and see if it
speeds things up,
the other thing is are you doing a build of Samba with NIS enabled?

Are the usual thing's OK with the system? Memory etc..... I allow around
4 Mb per Samba
session. Have you checked the system with all the available tools while
this is happening?

Scott.

Message: 11
Date: Sun, 24 Sep 2000 13:53:48 +0100
From: Lee Cashmore <lee.cashmore at tcat.ac.uk>
To: samba at lists.samba.org
Subject: Slow Mappings with NIS and large groups

Does anyone have any experiance of these problems

OS Redhat 6.2
Samba version 2.0.7

Machine runs a slave NIS server and has 2 sets of groups one for staff
and
one for students e.g.

staff0:x:staffuser1,staffuser6,staffuser11,staffuser16,staffuser21,staffuse

r26......etc
staff1:x:staffuser2,staffuser7,staffuser12,staffuser17,staffuser22,staffuse

r27......etc
staff2:x:staffuser3,staffuser8,staffuser13,staffuser18,staffuser23,staffuse

r28......etc
staff3:x:staffuser4,staffuser9,staffuser14,staffuser19,staffuser24,staffuse

r29......etc
staff4:x:staffuser5,staffuser10,staffuser15,staffuser20,staffuser25,staffus

er30......etc

Student groups follow the same format but are groups  stud0 to stud9

all the groups for each user are correctly reported by linux and I can
find
no other problems and logon speed under linux is fine. The problem we
have
is that we have upto 550 pc's mapping to a share which runs off this box

(Details of share below). All the main logons happen within a short
period
of time i.e. when the students login in a morning and after breaks, for
some reason it is taking a long time for any windows NT machine to map a

drive to this particular share.

Samba is doing Domain Authentication and after doing various amounts of
testing and debuging I can find no way of improving the speed of the
drive
mapping process. We are thus experiancing 2 problems, firstly a lot of
the
drive mappings will fail (with a 240 error) when lots of people are
logging
on and secondly the box is put under so much load due to the exessive
amounts of time samba spends checking against the groups. If I copy the
password, shadow and group files off the primary nis server and put them
on
the local machine the drive mappings are almost immediate. We presently
have 1000 or so students in the groups and this will double if not
tripple
by the end of the year, There are also around 300 staff accounts.

This share is a specific one which allows students Read only access and
staff read/write access. the files in the share are owned by the
user/group
shares/shares respectivly.

Any help or ideas would be greatly appreciated

Lee Cashmore

P.S. Relavant sections of configs and log files listed below

Share config from smb.conf

[qdrive]
    comment = Staff/Student Share
    path = /var/exports/qdrive
    browseable = yes
    writable = yes
    available = yes
    public = no
    admin users = leec
    read list = +staff0, +staff1, +staff2, +staff3, +staff4, +stud0,
+stud1, +stud2, +stud3, +stud4, +stud5, +stud6, +stud7, +stud8, +stud9
    valid users = +staff0, +staff1, +staff2, +staff3, +staff4, +stud0,
+stud1, +stud2, +stud3, +stud4, +stud5, +stud6, +stud7, +stud8, +stud9
    write list = +staff0, +staff1, +staff2, +staff3, +staff4
    force user = shares
    force group = shares
    force create mode = 770
    force directory mode = 770

Section of Log file of NT 4 Wks Mapping to the samba server

[2000/09/24 13:10:19.810779, 5] lib/util.c:show_msg(446)
  smb_bcc=22
[2000/09/24 13:10:19.810825, 10] lib/util.c:dump_data(2918)
  [000] 00 5C 5C 49 4E 54 52 41  4E 45 54 5C 51 44 52 49  .\\INTRA
NET\QDRI
[2000/09/24 13:10:19.810925, 10] lib/util.c:dump_data(2926)
  [010] 56 45 00 41 3A 00                                 VE.A:.
[2000/09/24 13:10:19.811011, 3] smbd/process.c:switch_message(448)
  switch message SMBtconX (pid 15697)
[2000/09/24 13:10:19.811075, 4] smbd/reply.c:reply_tcon_and_X(311)
  Got device type A:
[2000/09/24 13:10:27.032062, 3] smbd/password.c:authorise_login(759)
  ACCEPTED: validated uid ok as non-guest  <<------- PROBLEM HERE TIME
DIFF
OF 8 seconds ???
[2000/09/24 13:10:28.810178, 3] smbd/service.c:make_connection(380)
  Forced user shares
[2000/09/24 13:10:28.810741, 3] smbd/service.c:make_connection(428)
  Forced group shares
[2000/09/24 13:10:28.810813, 3] smbd/service.c:make_connection(441)
  Connect path is /var/exports/qdrive
[2000/09/24 13:10:28.869361, 3] smbd/password.c:setup_groups(192)
  shares is in 1 groups: 1004
[2000/09/24 13:10:28.869495, 5] smbd/connection.c:claim_connection(137)
  trying claim /var/lock/samba STATUS. 100000
[2000/09/24 13:10:28.869607, 8] lib/util.c:fcntl_lock(2672)

------------------------------------------------------------------------

Lee Cashmore                              Telephone : +44 (0)1952 642286

Network Administrator (Postmaster)
Telford College of Arts & Technology    Web Site : http://www.tcat.ac.uk

------------------------------------------------------------------------

--

__________________________________________________________________

Scott Lawson
Systems Manager
Department Of Information Services
St. George's Hospital Medical School
Tooting
London SW17 0RE
UK

P: 44 (0)208 725 2896
F: 44 (0)208 725 3583

mailto:s.lawson at sghms.ac.uk

http://www.sghms.ac.uk

Quote of the week :

"The difference between 'involvement' and 'commitment' is like a
bacon-and-eggs breakfast: the chicken was 'involved' - the pig was
'committed'."

__________________________________________________________________