[Samba] slow logon with many ldap groups

[John Drescher]

On Wed, Jan 21, 2009 at 11:39 AM, Robin Harteveld
<robinharteveld at gmail.com> wrote:
>
>
> Dear all,
>
> I'm having some problems with my samba-ldap configuration. The server is a
> domain controler. Most of the time there is no problem. But when some users
> try to logon, the workstation gets very slow.
> After some testing i found the cause. When a user is a member of many ldap
> groups (more then 64), i get the following error:
>
> "smbd[32384]: nss_ldap: could not get LDAP result - Decoding error"
>
> After a wile the CPU load of smb starts to climb, and the only thing to do
> is <server smb restart>
>
>
>
> server: Centos 4.4
>        Samba3-3.0.23d
>          OpenLDAP-2.2.13
>          nss_ldap-226
>
> workstation: windows XP prof SP2
>
>
> I don't know where to start.
>

I would start by upgrading if possible. All of the above versions are
several years old.

John