[Samba] Join Samba without GC role
Luchko.D at digdes.com
Tue Nov 17 12:44:19 UTC 2015
Andrew, thank for answer!
We understand about limitation subdomains on Samba but we suggested that is one cause of current problem.
May be you know why python process can hung with 100% CPU ? Does samba have limitation of groups or OU hierarchy?
p.s. May be our questions too strange but we don’t have full documentation, about samba limitations and samba architecture.
From: Andrew Bartlett [mailto:abartlet at samba.org]
Sent: Tuesday, November 17, 2015 11:53 AM
To: Luchko Dmitriy <Luchko.D at digdes.com>; samba at lists.samba.org
Subject: Re: [Samba] Join Samba without GC role
On Tue, 2015-11-17 at 08:27 +0000, Luchko Dmitriy wrote:
> I created test environment: 1 root domain, 2 subdomain. I created
> about 250000 user accounts in subdomain 2 (sub2.company.com) ntds.dit
> 14gb. Joining samba in first subdomain (sub1) was without problem.
> But in production environment (with a lot of domains and objects)
> python process was hung with 100% CPU (after 6 hour we killed hung
> Why can this happened? This is samba subdomain support limitation, tdb
> database limitation, feature works samba with big active directrory
> infrastructure (a lot sites, domains and objects), or is this bug?
Samba has simply never been designed or tested for use in the presence of subdomains, nor for that number of objects.
We hope to add subdomain support, and I have done some work towards that, but it is as you have noticed, unfinished.
We would also like to improve Samba to scale up, and to support more diverse domain structures, but it isn't a small task.
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
More information about the samba