[Samba] Samba 3.0.11 hammering NIS

David Michaels dragon at raytheon.com
Mon Apr 4 21:54:01 GMT 2005

I installed Samba recently on a ClearCase server (Solaris 8) to remove 
the need for DiskAccess on the Windows clients.  I'm having two problems 
with it, actually.  The important one that I'm asking the list about is 
that Samba is hammering my NIS master with requests for DoMaiN+UseR (and 
every conceivable combination of cases--note + instead of \, per winbind 
separator statement in config file, though the same problem manifested 
with the default \).  This results in hundreds of requests per 
authentication need.  I've mitigated the problem somewhat by making the 
server a NIS slave, so it's no longer using the network to make these 
requests.  However, my ypserv process is chewing up almost an entire CPU 
by itself, and is slowing everything else down.

I have my nsswitch.conf to use 'winbind' before NIS, but that doesn't 
seem to have helped.

(The other problem has to do with ClearCase munging up path names 
(mixing \ and / within a single pathname).  Haven't been able to 
reproduce that problem outside of Rational ClearCase, so I haven't 
bothered the Samba list with it.--anyone know how to tell Samba to treat 
both \ and / as /?)

Here are my global settings, and one of the shares.  Does it have to do 
with the 'username level' perhaps?  I started this config file with an 
existing/working config file from another project, and modified it from 
/security = server/ to /security = domain/ (and made other appropriate 
changes).  This output is from testparm:

# Global parameters
        workgroup = MYDOMAIN
        interfaces = ce*,
        bind interfaces only = Yes
        security = DOMAIN
        password server = W2003-in-NT-emulation.my.win.domain.com
        username level = 5
        log file = /var/samba/log/clients/%m
        max log size = 50
        socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=65536 
        add machine script = /usr/sbin/useradd -d /var/lib/nobody -g 100 
-s /bin/false -M %u
        preferred master = No
        local master = No
        domain master = No
        wins server =
        kernel oplocks = No
        lock directory = /var/samba/lock
        pid directory = /var/samba/run
        template homedir = /npd/%U
        winbind separator = +
        winbind use default domain = Yes
        hosts deny =,
        case sensitive = No
        mangled names = No
        oplocks = No
        comment = ClearCase Share
        path = /rational
        read only = No
        force create mode = 0664
        force directory mode = 0775
        guest ok = Yes

"**In theory, there is no difference between theory and practice. But, 
in practice, there is."


More information about the samba mailing list