[Samba] Samba4 ClassicUpgrade

[Fabio Monteiro]

Hi, guys.

I had a server Debian with samba (PDC) 3.6 and ldap, but I needed 
upgrade to samba (AD) 4.1.13 with classicupgrade command.

See below the command:

# samba-tool domain classicupgrade --dbdir=/root/backup/var/lib/samba/ 
--use-xattrs=yes --dns-backend=BIND9_DLZ --realm=test.local 
/root/backup/etc/samba/smb.conf

The users, groups and machines was imported sucesful but the upgrade has 
some problems.

* When I start samba, there are one process that it's increasing the 
memory until error. The process starts with 500MB but it's increasing 
and 2 or 3 days after the process it's with 6GB and the server has only 
8GB RAM.

See the top below:

PID           %CPU    Size             Res               Res Res     
Res            Shared        Faults      Command
                  Used      KB              Set Text     Data   Lib    
           KB              Min    Maj
13959        24.9     4917724     4425780      76       0     4417236  
     9972          206    0    samba

# ps_mem.py

     Private  +   Shared  =  RAM used       Program
560.3 MiB +  49.9 MiB = 610.1 MiB       smbd (103)
      4.4 GiB +  13.8 MiB =   4.4 GiB       samba (13)

See the nestat from the PID:

netstat -putan | grep 13959

tcp        0      0 192.168.0.5:464 0.0.0.0:*               LISTEN 
        13959/samba
tcp        0      0 127.0.0.1:464 0.0.0.0:*               LISTEN        
13959/samba
tcp        0      0 192.168.0.5:88 0.0.0.0:*               LISTEN        
13959/samba
tcp        0      0 127.0.0.1:88 0.0.0.0:*               LISTEN        
13959/samba
udp        0      0 192.168.0.5:88 0.0.0.0:*                           
13959/samba
udp        0      0 127.0.0.1:88 0.0.0.0:*                           
13959/samba
udp        0      0 192.168.0.5:464 0.0.0.0:*                           
13959/samba
udp        0      0 127.0.0.1:464 0.0.0.0:*                           
13959/samba

* I'm not able to create group policies and show me the message below:

Isn't possible to attribute this security identification as object's owner.

Thanks a lot.

Best regards.

Fabio Monteiro