[Samba] Ldap performance

Paul Gienger pgienger at ae-solutions.com
Fri Sep 3 14:02:22 GMT 2004

>>> >Another thing that may be slowing the ldap is that I need to use 
>>> scope >=sub
>>> >in my ldap.conf to find users and computers:
>>> So you're saying that in your ldap.conf you have things configured 
>>> like so?
>>> nss_base_passwd        dc=homelan,dc=com,dc=br?sub
>> With the correct indexes and enough RAM it shouldn't really matter.
> Yes I have this in my ldap.conf:
> nss_base_passwd         dc=ump,dc=edu,dc=br?sub
> nss_base_shadow         dc=ump,dc=edu,dc=br?sub
> nss_base_group          ou=groups,dc=ump,dc=edu,dc=br?one
> nss_base_hosts          ou=computers,dc=ump,dc=edu,dc=br
> I didn't change that yet because I like the idea of keeping computers 
> and users separated.

That isn't actually what you're doing by setting nss_base_hosts.  
Basically you're configuring ldap to look for dns information in 

The idea of putting hosts and users in different places as far as samba 
is concerned is a different beast.  Samba requires hosts to have a 
standard unix user account, ldap doesn't really know the difference 
since samba searches for a general posix account in the passwd scope.

Let me know if that's confusing, it seems like it probably is but I 
don't have my good explaining head on yet.

Paul Gienger                     Office: 701-281-1884
Applied Engineering Inc.         
Information Systems Consultant   Fax:    701-281-1322
URL: www.ae-solutions.com        mailto: pgienger at ae-solutions.com

More information about the samba mailing list