[Samba] Slow Samba

[Josh Andrews]

I am running a Snap 4200 fileserver, which is a network appliance that
uses Samba to share files on a windows network.

I've been experiencing slow performance on the Snap. The issue started
suddenly 5 to 6 weeks ago, so I don't think it's a performance-related
problem. I SSHed into the unit and noticed some odd errors in the samba
event logs. They look something like this:

[2007/04/10 17:29:38, 0] smbd/posix_acls.c:has_pai_get_perm(474)
   has_pai_get_perm: unknown tag type in ACL
[2007/04/10 18:36:15, 0] smbd/service.c:make_connection(844)
   192.168.5.103 (192.168.5.103) couldn't find service furnitur
[2007/04/11 03:04:05, 0] lib/util_sock.c:read_socket_data(342)
   read_socket_data: recv failure for 4. Error = Connection reset by peer
[2007/04/11 07:28:13, 0] smbd/service.c:set_current_service(56)
   chdir (/shares/Meralta) failed
[2007/04/11 07:28:13, 0] smbd/service.c:set_current_service(56)
   chdir (/shares/Meralta) failed
[2007/04/11 07:28:13, 0] smbd/service.c:set_current_service(56)
   chdir (/shares/Meralta) failed
[2007/04/11 07:28:23, 0] smbd/service.c:set_current_service(56)
   chdir (/shares/TEMPLATE) failed
[2007/04/11 07:28:23, 0] smbd/service.c:set_current_service(56)
   chdir (/shares/TEMPLATE) failed
[2007/04/11 07:28:23, 0] smbd/service.c:set_current_service(56)
   chdir (/shares/TEMPLATE) failed
[2007/04/11 07:55:16, 0] smbd/service.c:set_current_service(56)
   chdir (/shares/Drawings) failed
[2007/04/11 07:55:16, 0] smbd/service.c:set_current_service(56)
   chdir (/shares/Drawings) failed
[2007/04/11 08:27:11, 0] lib/module.c:smb_load_module(40)
"log.smbd" [readonly] 3228L, 166021C

Odd errors about enumerating shares... So I did a directory listing of
the shares, and lo and behold, some odd permissions showed themselves:

drwxrwxrwx    8 DOMAIN\ DOMAIN\      103 Oct  1  2005 Archive
drwxrwx---   17 DOMAIN\ DOMAIN\     4096 Apr  5 11:40 Cad
drwxrwx---   89 admin    admingrp     4096 Apr 17 15:25 Design
drwxrwxrwx    6 DOMAIN\ DOMAIN\      112 Oct  2  2005 DesignData
drwxrwxrwx   13 DOMAIN\ DOMAIN\     4096 Feb 12 11:30 Finance
drwxrwxrwx    2 admin    admingrp        6 Oct  2  2005 Financeapps
drwxrwxrwx   29 admin    admingrp     4096 Apr 18 09:04 Furniture
drwxrwx---  1629 DOMAIN\ DOMAIN\    81920 Apr 19 15:53 In_Progress
drwxrwx---   34 DOMAIN\ DOMAIN\     4096 Apr 10 17:21 Marketing
drwxrwx---   15 admin    admingrp     4096 Apr 19 10:43 Meralta
drwxrwxrwx    2 DOMAIN\ DOMAIN\       78 Mar 31 18:27 NAN_bu_Month-End
drwxrwxrwx    2 DOMAIN\ DOMAIN\       43 Jun  3  2006 OllieBU_MonthEnd
drwxrwx---  223 admin    admingrp    16384 Apr 17 14:15 Purge-atory
drwxrwx---    2 DOMAIN\ admingrp      135 Apr 14 20:10 RESTORED
-rwxrwx---    1 DOMAIN\ DOMAIN\       89 Apr  6 21:05 SPOT_top_log.txt
-rwxrwxrwx    1 DOMAIN\ DOMAIN\      548 Nov  6  2005 Shortcut to
NetVault7_Administrators_Guide.pdf.lnk
drwxrwx---   84 admin    admingrp     4096 Apr 16 13:16 Transfer
drwxrwxrwx   35 DOMAIN\ DOMAIN\     4096 Feb  2 15:28 cab

The errors in the samba event logs correlate only to the directories
that have permissions of "admin" and "admingrp." Before I wipe the
problem out by brute force with chmod and chgrp, has anybody ever seen
errors like this before, and how did the permissions get changed from
DOMAIN|? Would they cause slow response time?

I've also noticed odd permissions scattered down through the directories
at various locations, and in some cases the owner of a file is set to a
5-digit number like "20160", etc.

Any ideas?

Josh