[Samba] slow logon with many ldap groups

[Robin Harteveld]

Dear all,

I'm having some problems with my samba-ldap configuration. The server is a 
domain controler. Most of the time there is no problem. But when some users 
try to logon, the workstation gets very slow.
After some testing i found the cause. When a user is a member of many ldap 
groups (more then 64), i get the following error:

"smbd[32384]: nss_ldap: could not get LDAP result - Decoding error"

After a wile the CPU load of smb starts to climb, and the only thing to do 
is <server smb restart>



server: Centos 4.4
        Samba3-3.0.23d
    	  OpenLDAP-2.2.13
    	  nss_ldap-226

workstation: windows XP prof SP2


I don't know where to start.