[Samba] Winbind problem (Trusting domains)

[Adrian Chow]

Hi,

are you telling me to install nscd and it will solve my problem?  Also i 
read somewhere in the samba website that you should not run nscd with 
winbind.  Is that true?    If it is, what are some ways of improving the 
performance of winbind and how can I make it scale?

Thanks for your replies.

adrian

Vijay Avarachen wrote:
> I am not sure if this will help but I was getting strange errors and 
> often dead winbinds due to the large amount of users and groups.  I have 
> had great success with setting up OpenLDAP for idmap backend.  Now all 
> my Linux machines are authenticating users and I also use nscd to speed 
> things up and ease the load on OpenLDAP. 
> 
> 
> On 12/14/05, *Adrian Chow* <achow at uwcsea.edu.sg 
> <mailto:achow at uwcsea.edu.sg>> wrote:
> 
>     HI all,
> 
>     I have install 2 domains both on linux servers running debian samba
>     3.0.20b-2+b1.  (Latest)
> 
>     I have both domains trusting each other.
> 
>     Domain A have 300 users and the other domain B have 3000 users.  I have
>     "winbind" on the nsswitch.conf for both PDCs.
> 
>     I have not errors runnning wbinfo -u, or wbinfo -g except when I run it
>     on Domain A PDC.  Domain users group which all 3000 users are at failed
>     to show up at the output.  The rest of the domain groups are displayed.
> 
>     Looking in the winbindd log:- (Domain B PDC = BAUGLIR; Domain B=UWCSTU)
>     --------------------------------------------------------------------
>     [2005/12/14 18:36:42, 10] nsswitch/winbindd_rpc.c:lookup_groupmem(539)
>        rpc: lookup_groupmem UWCSTU
>     sid=S-1-5-21-2723404422-2550591724-2764062575-513
>     [2005/12/14 18:36:52, 0] rpc_client/cli_pipe.c:rpc_api_pipe(438)
>        cli_pipe: return critical error. Error was Call timed out: server
>     did
>     not respond after 10000 milliseconds
>     [2005/12/14 18:36:52, 0] rpc_client/cli_pipe.c:rpc_api_pipe(438)
>        cli_pipe: return critical error. Error was Call timed out: server did
>     not respond after 10000 milliseconds
>     [2005/12/14 18:36:52, 10] nsswitch/winbindd_rpc.c:lookup_groupmem(539)
>     rpc: lookup_groupmem UWCSTU
>     sid=S-1-5-21-2723404422-2550591724-2764062575-513
>     [2005/12/14 18:36:52, 3] nsswitch/winbindd_cm.c:connection_ok(819)
>        Connection to BAUGLIR for domain UWCSTU has died or was never started
>     (fd == -1)
>     [2005/12/14 18:36:52, 0] rpc_client/cli_pipe.c:cli_rpc_close(1767)
>        cli_rpc_open failed on pipe \samr to machine BAUGLIR.  Error was
>     Call
>     timed out: server did not respond after 10000 milliseconds
> 
>     ------------------------------------
> 
>     Can anyone know who to cache winbind well or increase the pagesize?  I
>     guess the timeout is because of the 3000 entries.
> 
>     Regards,
> 
>     adrian
> 
>     --
>     To unsubscribe from this list go to the following URL and read the
>     instructions:  https://lists.samba.org/mailman/listinfo/samba
>     <https://lists.samba.org/mailman/listinfo/samba>
> 
> 
> 
> 
> -- 
> "Knowledge is the only wealth that grows as you spend it, and diminishes 
> as you save it."
> -- ancient Sanskrit saying