[Samba] winbindd running amok

[simo]

On Fri, 2007-07-06 at 21:05 +0200, Bernd Schubert wrote:
> Hello Rune,
> 
> On Friday 06 July 2007 20:41:05 Rune Tønnesen wrote:
> > Bernd Schubert skrev:
> > > Hi,
> > >
> >
> > Hi Bernd
> >
> > mc (Midnight Commander) most likely caches usernames and groups. mc
> > needs the usernames when tje user wants to change ownership of files and
> > directories. You can properly get the same winbindd reaction from getent
> > passwd
> 
> thanks a lot for your really super fast help. Running 'getent passwd' takes 
> about 10s-40s, which is ok I think for 50000 entries. But mc keeps winbindd 
> busy for at least 5-10 min, which is rather critical. This efficiently 
> prevents other logins to this system at all. Well, mc is not the big deal, 
> but our customer has experienced quite a lot problems in the past and I'm 
> afraid they are doing something (don't know what), that does the same as mc.
> 
> Is there a way to increase disk cache of winbind? It presently takes 50MB, 
> which I guess it too less. Or any other ideas how to tune it?
> I know that winbindd from samba-3.0.25 is entirely rewritten in aspect to 
> cache, will it also solve those problems?

What about simply shutting down enumeration?
winbindd enum users = no
winbindd enum groups = no

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: idra at samba.org
http://samba.org