[Samba] Samba4 Centos 7 - CPU 100%

Tue Aug 30 14:14:52 UTC 2016

Hi Louis, Tks for your feedback. Sorry about delay.

>Just checked you smb.conf
>Now i dont know the exact working of : samba-tool domain classicupgrade
<Rowland know all about that but i see some things which might give the
problems.
>I’ll have to ask rowland to have a look in this..
>But i do thinks that the “old samba 3 “ domain was not a domain.
OK, that option not exist in my smb.conf.

>I dont know if that hurts the upgrade.
>Can you check if you have “2 x “ Administrator in your domain?
>And can you run :
>samba-tool ldapcmp --filter="whenChanged" ldap://DC1 ldap://DC2
Follow the output:
ldb_wrap open of secrets.ldb
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
Cannot do GSSAPI to an IP address
Got challenge flags:
Got NTLMSSP neg_flags=0x62898235
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x62088235
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x62088235
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x62088235
Cannot do GSSAPI to an IP address
Got challenge flags:
Got NTLMSSP neg_flags=0x62898235
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x62088235
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x62088235
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x62088235
* Comparing [DOMAIN] context...
* DN lists have different size: 35029 != 35030

CN=05\0ACNF:7f5f0d89-ff0f-42c1-a359-f5bc1de6ff4b,CN=Computers,DC=campus,DC=domain,DC=br
* Objects to be compared: 35029
ERROR(ldb): uncaught exception - LDAP client internal error:
NT_STATUS_CONNECTION_DISCONNECTED
  File
"/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/__init__.py",
line 175, in _run
    return self.run(*args, **kwargs)
  File
"/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.py",
line 983, in run
    if b1 == b2:
  File
"/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.py",
line 774, in __eq__
    outf=self.outf, errf=self.errf)
  File
"/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.py",
line 396, in __init__
    self.attributes = self.con.get_attributes(self.dn)
  File
"/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.py",
line 207, in get_attributes
    res = self.ldb.search(base=object_dn, scope=SCOPE_BASE, attrs=["*"])

>but im did see what you old samba version was.
>And you didnt tell how big the DB sized are.
>That can really be handy to know.
Here do you said for check the DB Size correct ? Exist some special command
for check thist, or you want to know how many users exist in my enviroment
?

2016-08-30 5:05 GMT-03:00 L.P.H. van Belle via samba <samba at lists.samba.org>
:

> Just checked you smb.conf
>
>
>
> Now i dont know the exact working of : samba-tool domain classicupgrade
>
> Rowland know all about that but i see some things which might give the
> problems.
>
> I’ll have to ask rowland to have a look in this..
>
>
>
> But i do thinks that the “old samba 3 “ domain was not a domain.
>
> I dont know if that hurts the upgrade.
>
>
>
> Can you check if you have “2 x “ Administrator in your domain?
>
>
>
> And can you run :
>
> samba-tool dapcmp --filter="whenChanged" ldap://DC1 ldap://DC2
>
>
>
> but im did see what you old samba version was.
>
> And you didnt tell how big the DB sized are.
>
> That can really be handy to know.
>
>
>
> Greetz,
>
>
>
> Louis
>
>
>
>
>
>
>
>
> Van: Maiquel Consalter [mailto:maiquelconsalter at gmail.com]
> Verzonden: maandag 29 augustus 2016 21:33
> Aan: L.P.H. van Belle
> CC: samba at lists.samba.org
> Onderwerp: Re: [Samba] Samba4 Centos 7 - CPU 100%
>
>
>
>
> Follow, our old config: http://pastebin.com/kpfATT0h
>
>
>
>
> tks.
>
>
>
>
>
> 2016-08-29 16:18 GMT-03:00 L.P.H. van Belle via samba <
> samba at lists.samba.org>:
>
> im not at a computer ti look some things up but im thinking..
>
>
> dbdir=/usr/local/samba.PDC/dbdirwhat is the size of this dir.
>
>
> what is the size of the ad db dir on every server now.
>
>
> i think, something in the old db import causes a resyncwhen you modify
> something in the db
> so i suggest try monitoring, disk io and cpu, look for buzzy files.
> if we know the files, we know the processes using it. if one all servers
> the same files are buzy.
> then maybe you found an unknown bug.
>
>
> the old db came from which  samba version, tell about the old setup, did
> you use a ldap backend for example?
> maybe a post of your old config can be handy also.
>
>
> greetz,
>
>
> Louis
>
>
>
>
>
> Op 29 aug. 2016 om 20:46 heeft Rowland Penny via samba <
> samba at lists.samba.org> het volgende geschreven:
>
>
> dbdir=/usr/local/samba.PDC/dbdir
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
>
>
>
>
>
>
>
>
>
>
> --
>
> Att,
> Maiquel
>
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

-- 
Att,
Maiquel