[Samba] slow logon with many ldap groups

Robin Harteveld robinharteveld at gmail.com
Wed Jan 21 16:39:48 GMT 2009

Dear all,

I'm having some problems with my samba-ldap configuration. The server is a 
domain controler. Most of the time there is no problem. But when some users 
try to logon, the workstation gets very slow.
After some testing i found the cause. When a user is a member of many ldap 
groups (more then 64), i get the following error:

"smbd[32384]: nss_ldap: could not get LDAP result - Decoding error"

After a wile the CPU load of smb starts to climb, and the only thing to do 
is <server smb restart>

server: Centos 4.4

workstation: windows XP prof SP2

I don't know where to start.

More information about the samba mailing list