[Samba] Ldap performance

[Paul Gienger]

>>> >Another thing that may be slowing the ldap is that I need to use 
>>> scope >=sub
>>> >in my ldap.conf to find users and computers:
>>> So you're saying that in your ldap.conf you have things configured 
>>> like so?
>>> nss_base_passwd        dc=homelan,dc=com,dc=br?sub
>>
>>
>> With the correct indexes and enough RAM it shouldn't really matter.
>>
>
> Yes I have this in my ldap.conf:
>
> nss_base_passwd         dc=ump,dc=edu,dc=br?sub
> nss_base_shadow         dc=ump,dc=edu,dc=br?sub
> nss_base_group          ou=groups,dc=ump,dc=edu,dc=br?one
> nss_base_hosts          ou=computers,dc=ump,dc=edu,dc=br
>
> I didn't change that yet because I like the idea of keeping computers 
> and users separated.

That isn't actually what you're doing by setting nss_base_hosts.  
Basically you're configuring ldap to look for dns information in 
ou=Computers. 

The idea of putting hosts and users in different places as far as samba 
is concerned is a different beast.  Samba requires hosts to have a 
standard unix user account, ldap doesn't really know the difference 
since samba searches for a general posix account in the passwd scope.

Let me know if that's confusing, it seems like it probably is but I 
don't have my good explaining head on yet.

-- 
Paul Gienger                     Office: 701-281-1884
Applied Engineering Inc.         
Information Systems Consultant   Fax:    701-281-1322
URL: www.ae-solutions.com        mailto: pgienger at ae-solutions.com