[Samba] Samba 3.4 authentication suddenly very slow.

[Don Krause]

Some additional info, I'm starting to believe that this is caused by an MS patch that was applied to our AD servers.

I've unarchived the original VMWare image of the test linux installation that we used to verify that 2008r2 AD and Samba would work with win7 clients, it behaves exactly the same way.

From windows, run \\test7 and it immediately returns the full list of available shares, however, click on a share, and it takes more than 1 full minute before access is granted.

Then, I set up a new VM, this time used Cent 6.2, with samba 3.5. Configured, joined the domain, etc.

net ads testjoin works, wbinfo works, kinit works, everything checks out, but this case, the problem is worse.

running \\test12 immediately brings up a list of all shares, attempting to click on any causes the > 1 min what, but then access is denied.

Odd, the logs appear to say that access is granted.

[2012/01/04 16:14:40.004734,  3] lib/access.c:392(check_access)
  check_access: no hostnames in host allow/deny list.
[2012/01/04 16:14:40.004933,  2] lib/access.c:409(check_access)
  Allowed connection from  (::ffff:172.24.143.3)
[2012/01/04 16:14:40.004981, 10] smbd/share_access.c:238(user_ok_token)
  user_ok_token: share scully is ok for unix user dkrause

But win7 says that access is denied.

Losing my hair here…

Thanks!

On Jan 4, 2012, at 11:00 AM, Don Krause wrote:

> After a scheduled power outage, with all hosts cleanly shut down, I'm having a bad performance issue on my samba server.
> 
> This configuration has worked well for over a year, but after the power outage, attempting to access any share takes over a minute.
> 
> net ads testjoin is fine,
> wbinfo -u and wbinfo -g returns the correct information.
> 
> The shares CAN be accessed, once accessed, read and write performance is fine.
> 
> The problem is the initial access. I can do \\filehost from the windows box, and it immediately returns a folder showing all shares. Clicking on any share however, pauses for more than a minute, before allowing access.
> 
> Prior to the power outage, typing \\filehost in the Windows "run" box would pop up an auto complete with all available shares, it does not do that now.
> 
> I'm stuck on where to look next. I have the log level set to 10 in my smb.conf file.
> 
> Clients are mixed Win7 and XP, AD is 2008R2, Samba is 3.4.0 on Ubuntu.
> 
>> From smb.conf:
> 
> [global]
>        workgroup = OPTIVUS
>        realm = OPTIVUS.COM
>        security = ADS
>        password server = optad.optivus.com
>        log level = 10
>        log file = /var/log/samba/%m.log
>        max log size = 50
>        unix extensions = No
>        template shell = /bin/bash
>        winbind enum users = Yes
>        winbind enum groups = Yes
>        winbind use default domain = Yes
>        hosts allow = 143.197.0.0/16, 172.24.0.0/16
> 
> Thanks!
> --
> Don Krause                                                                   
> 
> 
> 
> 
> 
> 
> 
> ______________________________________________________________________
> This email has been scanned by the Symantec Email Security.cloud service.
> For more information please visit http://www.symanteccloud.com
> ______________________________________________________________________-- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

--
Don Krause                                                                   
Head Systems Geek, 
Waver of Deceased Chickens.
Optivus Proton Therapy, Inc.
P.O. Box 608
Loma Linda, California 92354
909.799.8327 Tel
909.799.8366 Fax
dkrause at optivus.com
www.optivus.com
"This message represents the official view of the voices in my head."