[Samba] samba3 upgrade misery

[Felipe Augusto van de Wiel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Curtis Maloney wrote, On 16-08-2007 21:08:
> Felipe Augusto van de Wiel wrote:
>> Curtis Maloney wrote, On 15-08-2007 21:07:
[...]
>> 	There are quite a few messages on the archive about
>> different speed problems with regards to Samba serving files,
> 
> Honestly, I think if I can stop smbd barfing and closing 
> sockets, the problems might just clear up...

	Seems reasonable.


> smbd is repeatedly spewing forth lists of socket options from print_socket_options:
[...]

	What testparm tells you about your smb.conf parameters with
regards to the socket options?


>> 	What options did you tried? Can you post more details
>> about your smb.conf?
> 
> With samba 2 I used the line:
> socket options = SO_KEEPALIVE TCP_NODELAY IPTOS_LOWDELAY SO_BROADCAST

	In recent version of Linux (2.6.x) it is the consensus
on this list to drop some of the flags, I'm not so sure about
Solaris kernel.


> And things were just fine.

	Here are a few messages from threads about performance,
maybe you can find something useful for your case.

http://lists.samba.org/archive/samba/2007-April/131096.html
http://lists.samba.org/archive/samba/2007-February/129562.html
http://lists.samba.org/archive/samba/2007-April/131091.html
http://lists.samba.org/archive/samba/2007-February/129139.html
http://lists.samba.org/archive/samba/2007-January/128814.html
http://lists.samba.org/archive/samba/2007-January/128645.html
http://lists.samba.org/archive/samba/2007-February/129652.html
http://lists.samba.org/archive/samba/2007-February/129797.html


>>> 3) And what can I say to my boss who keeps asking "What does samba3 give us over 
>>> samba2?"  Because frankly, I'm coming up empty.
>> 
>> 	First, maintainance, Samba2 is deprecated, no security
>> updates. It is better to "talk" with client machines in several
>> ways. It uses tdbs and/or LDAP, account policies, group mappings.
> 
> Well, security's always a good point... Could you possibly elaborate at all on 
> what advantage tdbs gives?  I have switched to using it, but, again, the docs 
> aren't very specific on its gains.

	Check tdb source forge page:

		http://sourceforge.net/projects/tdb/


	The idea is that it allow multiple writes, should
be faster and safer (because it uses internal locks).

		http://wiki.samba.org/index.php/TDB


	It also has nice backup tools to keep various
different information about Samba and its network
environment.


>> 	I'm not sure if you are using LDAP, it is a powerful
>> resource, specially if you want to have PDC/BDC behaviour. The
>> Samba3 changes a few points in the course of his development, I
>> don't know what migration doc you read, but if it is not about
>> 3.0.25, you need to check a few extra points from the release
>> notes that will solve a few problems.
> 
> The only feature of a PDC we use is the single point of authentication.  

	Hmmm... PDC/BDC spreads the authentication among them,
they do not use a single point. You can have a authentication
server without being a PDC. :-)


> Other than that, we just need to share files (and because of 
> some ridiculously old apps, printers).

	Nice, a standalone server would work great.


> The possibility of using LDAP has surfaced a few times, but 
> as yet it's been avoided as grossly over complex for us, a
> security hassle, and various other issues.

	I'm biased, but I would use LDAP for networks with 10
users. :-)


> I read the migration docs on the web site, so if they're not 
> current, someone should make them so.

	Seems fair, do you have any links?

	Kind regards,
- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGxaHvCj65ZxU4gPQRCPQbAKC2d+i8dF9elM8SmVdO3CQCjyVbkQCcDJSn
uiZ3OQ7pSyKc6ISmvoEaegg=
=xwoG
-----END PGP SIGNATURE-----