[Samba] Join Samba without GC role

[Luchko Dmitriy]

Andrew, thank for answer!

We understand about  limitation subdomains on Samba but we suggested that is one cause of current problem.

May be you know why python process can hung with 100%  CPU ? Does samba have limitation of groups or OU hierarchy? 
p.s. May be our questions too strange but we don’t have full documentation, about samba limitations and samba architecture.


-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org] 
Sent: Tuesday, November 17, 2015 11:53 AM
To: Luchko Dmitriy <Luchko.D at digdes.com>; samba at lists.samba.org
Subject: Re: [Samba] Join Samba without GC role

On Tue, 2015-11-17 at 08:27 +0000, Luchko Dmitriy wrote:
> I created test environment: 1 root domain, 2 subdomain. I created 
> about 250000 user accounts in subdomain 2 (sub2.company.com) ntds.dit 
> 14gb. Joining samba in first subdomain (sub1) was without problem.
>  But in production environment (with a lot of domains and objects) 
> python process was hung with 100% CPU (after 6 hour we killed hung 
> process).
> Why can this happened? This is samba subdomain support limitation, tdb 
> database limitation, feature works samba with  big active directrory 
> infrastructure (a lot sites, domains and objects), or is this bug?

Samba has simply never been designed or tested for use in the presence of subdomains, nor for that number of objects.

We hope to add subdomain support, and I have done some work towards that, but it is as you have noticed, unfinished. 

We would also like to improve Samba to scale up, and to support more diverse domain structures, but it isn't a small task.  

Sorry,

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba