[Samba] winbind and ads

[Robert St.Denis]

Well as I mentioned our tree is rather large, and the users are sorted
by region (not my idea), which means they aren't in any single given
ou=.  And those ou='s are all over the place.  I am seeing a whole lot
of traffic on ethereal where it looks like winbind is checking the whole
tree whenever someone tries to connect.

So I figured it might be best to limit the amount of the tree winbind
has to look at since I don't mind telling our ads guys to make one ou=
for all our users (just web developpers and such).

I recently saw there is a postfix section I can add to smb.conf, but not
sure if thats what we are looking for ?

Rob

On Tue, 2004-10-19 at 07:34, Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Robert St.Denis wrote:
> 
> | We have a large network and are seeing some serious
> | issues with ads in particular.  At best we are seeing an
> | id name take 5-6secs ... but averaging around 2 mins
> |
> | is there a way to tell winbind to start at a particular
> | ou and not look below it ?
> 
> Not currently.  Maybe it would help to provide some
> more details on exactly what you are seeing and how you
> came to the conclusion about requiring a more restricted
> search base?
> 
> 
> 
> 
> 
> cheers, jerry
> - ---------------------------------------------------------------------
> Alleviating the pain of Windows(tm)      ------- http://www.samba.org
> GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
> "If we're adding to the noise, turn off this song"--Switchfoot (2003)
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFBdPveIR7qMdg1EfYRAsseAKDVfKIU2wjsVY/FvyxA8bl2BK26hQCdHQx+
> 3htg/9E604vLo7LJf4X7BzI=
> =VRHU
> -----END PGP SIGNATURE-----