[Samba] Excessive traffic causing slow logons

[Trimble, Ronald D]

Your crystal ball must be pretty good because changing the winbind enum
user and group entries to "no" did the trick.  The man page isn't very
specific about this change.  Are they any downsides to this setting?

-----Original Message-----
From: Gerald (Jerry) Carter [mailto:jerry at samba.org] 
Sent: Thursday, May 04, 2006 2:05 PM
To: Trimble, Ronald D
Cc: samba at lists.samba.org
Subject: Re: [Samba] Excessive traffic causing slow logons

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Trimble, Ronald D wrote:

> I am seeing some extremely slow logons to my SUSE servers.  All are
> configured exactly the same.  When I attempt to log on, I can enter my
> domain (AD) account without any problems.  I then enter my password
and
> sit and wait for several minutes until it eventually takes me to my
> desktop.  In attempting to debug the problem, we have been able to see
> millions of calls to the domain controller.  They all look similar to
> this...
> As you can imagine, we see millions of these over the 4 to 5 minutes
it
> takes to log on.  On the Windows side, the domain controller does not
> report any errors in the logs.  
> 

You mention LDAP traffic but you say nothing about what the
traffic is actually doing nor do you give any details of how you
server is configured.  You could be using nss_ldap for all I know.

Just gazing into my crystal ball, I would ask whether or not
you have set 'winbind enum users = no' and 'winbind enum groups = no'?
If not, then do this first.

Then it would helpful to know more about your server.

> ...  Can anyone help me with this issue?  This
> issue is very quickly making us think twice about continuing 
> to use Samba.

That's your call.





cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEWkJUIR7qMdg1EfYRAmwXAJ4sP/Xfo/iVNppMH7LiZDWyWR9ZWQCgzAs1
apb03AgWO5h+/NTuTZy0Bds=
=LeHR
-----END PGP SIGNATURE-----