[Samba] Winbindd has still bottlenecks when used with interdomain trusts.

[Volker Lendecke]

On Wed, Feb 28, 2007 at 11:55:00PM +0100, Harald Strack wrote:
> >
> That's the "patch" for samba 3.0.14a:
> 
> - --- ./source/sam/idmap_ldap.c   2005-03-11 14:47:05.000000000 +0100
> +++ ../samba-3.0.14a-p2/source/sam/idmap_ldap.c 2005-11-28
> 23:41:15.000000000 +0100
> @@ -497,7 +497,8 @@
>         if ( id_type & ID_USERID )
>                 type = get_attr_key2string( idpool_attr_list,
> LDAP_ATTR_UIDNUMBER );
>         else
> - -               type = get_attr_key2string( idpool_attr_list,
> LDAP_ATTR_GIDNUMBER );
> +               return ret;
> +               //type = get_attr_key2string( idpool_attr_list,
> LDAP_ATTR_GIDNUMBER );
> 
>         pstrcpy( suffix, lp_ldap_idmap_suffix() );
>         pstr_sprintf(filter, "(&(objectClass=%s)(%s=%d))",
> 
> 
> As you see, it was a workaround for samba before you implemented the new
> winbinds, just to speed up everything to unblock winbind as fast as
> possible.

My guess is that your are hit by us not yet having a
negative cache for idmapping. With 3.0.25 the id mapping
has been rewritten, and it does include a negative cache.
Maybe you could try the just released pre1 (not yet
production!).

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba/attachments/20070301/77052d19/attachment.bin