[Samba] Fwd: win bind extremely slow after Upgrade to 4.2

Wed May 4 08:57:02 UTC 2016

Oeps small correction.

> Other option is to use the sernet packages. ( now 4.2.12 ) 

the sernet packages  now 4.2.11.

Greetz, 

Louis

Van: L.P.H. van Belle [mailto:belle at bazuin.nl] 
Verzonden: woensdag 4 mei 2016 10:54
Aan: 'samba at lists.samba.org'
Onderwerp: RE: [Samba] Fwd: win bind extremely slow after Upgrade to 4.2

Hai Oliver/andreas, 

Best is to skip the debian 4.2.10 and 4.3.8 packages. 

Only the last 4.4.3 is imo working correct. 

I upgraded all my servers to 4.4.3 yesterday, and people noticed the network is responding faster.

You can use my packages for debian jessie (amd64 only) 

http://downloads.van-belle.nl/samba4/

Or recompile 4.4.3 from debian sid. 

If you need help with this, just mail me. 

The packages i made, dont conflict with the debian packages. 

You can test 4.4.3 and go back to debian samba. 

Sample policy output. 

apt-cache policy samba

samba:

  Installed: 2:4.4.3-lvb1

  Candidate: 2:4.4.3-lvb1

  Package pin: 2:4.4.3-lvb1

  Version table:

 *** 2:4.4.3-lvb1 500

        500 http://xxx.domain.tld/debian/ jessie/ Packages

        100 /var/lib/dpkg/status

    99:4.2.11-9 500

        300 https://download.sernet.de/packages/samba/4.2/debian/ jessie/main amd64 Packages

     2:4.2.10+dfsg-0+deb8u2 500

        500 http://security.debian.org/ jessie/updates/main amd64 Packages

     2:4.1.17+dfsg-2+deb8u2 500

        500 http://ftp.nl.debian.org/debian/ jessie/main amd64 Packages

Its setup to be compatible with the debian packages, so if update/upgrade it wil follow the highest samba version. 

Other option is to use the sernet packages. ( now 4.2.12 ) 

Notice with my packages. 

Due to some dependecie changes from debian stable and unstable, you get a notice that

One file is also in another package.  Fix : apt-get ?f install and overwrite it. 

Winbind complains in the log about a db missing.  Fix : apt-get install samba-dsdb-modules 

I?ll fix that later on, i?ll have to check the debian bug list if there is known about above.

Greetz, 

Louis

> -----Oorspronkelijk bericht-----

> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner

> Verzonden: woensdag 4 mei 2016 10:29

> Aan: samba

> Onderwerp: [Samba] Fwd: win bind extremely slow after Upgrade to 4.2

> 

> i have now try some other options:

> 

> - Fresh install of Samba AD Member

> - rejoin Member

> - change from winbindd to winbind

> 

> But nothing helps. Also really slow

> 

> 

> 

> time ls -lisa /daten/samba/

> insgesamt 48

> 8222  4 drwxrwxrwx  8 postmaster.postmaster kontrast_ws_quack_fischer

> 4096 Mai  3 15:52 .

>    2  4 drwxr-xr-x 12 root                  root

> 4096 Jan 25 15:30 ..

>  145 12 -rwxr--r--  1 oliver.werner         domain users

> 10244 Mai  4 07:11 .DS_Store

> 1173  4 -rwxr--r--  1 oliver.werner         domain users

> 4096 Apr 27 10:14 ._.DS_Store

> 8624  4 drwxr-xr-x  3 oliver.werner         domain users

> 4096 Apr 27 10:38 Neuer Ordner

> 8636  4 drwxr-xr-x  2 oliver.werner         domain users

> 4096 Mai  3 15:52 Neuer Ordner 2

> 8637  4 drwxr-xr-x  2 oliver.werner         domain users

> 4096 Mai  3 15:52 Neuer Ordner 3

> 8638  4 drwxr-xr-x  2 oliver.werner         domain users

> 4096 Mai  3 15:52 Neuer Ordner 4

> 8639  4 drwxr-xr-x  2 oliver.werner         domain users

> 4096 Mai  3 15:52 Neuer Ordner 5

> 8640  4 drwxr-xr-x  2 oliver.werner         domain users

> 4096 Mai  3 15:52 Neuer Ordner 6

> 

> real      0m11.759s

> user      0m0.004s

> sys 0m0.000s

> 

> 

> 

> time id oliver.werner

> uid=10150(oliver.werner) gid=10009(domain users) Gruppen=10009(domain

> users),1396(kontrastvpn_it),1088(kontrast_administration),1344(kontrast_al

> pina),1393(kontrast_bdsg),1028(kontrast_intern),1070(kontrast_medien_foto)

> ,1053(kontrast_medien_video),1096(kontrast_obi),1359(kontrast_terminal),11

> 05(kontrast_vemas),1025(kontrast_vodafone_d2),1326(kontrast_webadminlive),

> 1363(kontrast_ingenhoven_architects),1364(kontrast_jw_ostendorf),1101(BUIL

> TIN\users),1100(BUILTIN\administrators)

> 

> real      0m13.560s

> user      0m0.000s

> sys 0m0.004s

> 

> time wbinfo -u | wc -l

> 0

> 

> real      0m10.037s

> user      0m0.008s

> sys 0m0.000s

> OLIVER WERNER

> Systemadministrator

> 

> 

> 

> 

> 

> Kontrast Communication Services GmbH

> Grafenberger Allee 100, 40237 Düsseldorf, Germany

> 

> Fon  +49-211-91505-500

> Fax  +49-211-91505-530

> www.kontrast.de <http://www.kontrast.de/>

> 

> Amtsgericht Düsseldorf: HRB 26934

> Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der

> Vlist

> 

>  <https://www.facebook.com/kontrast.communication>

> <https://twitter.com/KONTRAST_de>

> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh>

> <http://www.linkedin.com/company/kontrast-communication-services-gmbh>

> <https://vimeo.com/kontrastcs>     <http://instagram.com/kontrast_de>

> 

> Note: The information contained in this message may be privileged and

> confidential and protected from disclosure. If the reader of this message

> is not the intended recipient, or an employee or agent responsible for

> delivering this message to the intended recipient, you are hereby notified

> that any dissemination, distribution or copying of this communication is

> strictly prohibited. If you have received this communication in error,

> please notify us immediately by replying to the message and deleting it

> from your computer.

> 

> Please consider the environment and only print this if required.

> 

> 

> > Anfang der weitergeleiteten Nachricht:

> >

> > Von: Oliver Werner <oliver.werner at kontrast.de>

> > Betreff: win bind extremely slow after Upgrade to 4.2

> > Datum: 27. April 2016 um 09:36:01 MESZ

> > An: samba at lists.samba.org

> >

> > Hi,

> >

> > we have upgrade an Samba Member (DCs already upgraded) from Samba 4.1.17

> to Samba 4.2.10.

> >

> > On DCs work fine after install winbind.

> >

> > But our member extremely slow.

> >

> > Connect to the Share takes 2-3 minutes and directory listing need 2-5

> minutes.

> >

> >

> > wbinfo -u takes around 20 seconds and will not return output

> >

> > wbinfo -g takes 3 seconds and show my groups

> >

> > id user.name takes 20 seconds and shows information  of the user and its

> groups

> >

> >

> > smb.conf for samba member:

> >

> > [global]

> >        netbios name = PL0024

> >        security = ADS

> >        workgroup = HQKONTRAST

> >        realm = hq.kontrast

> >

> >        log file = /var/log/samba/%m.log

> >        log level = 1

> >

> >        dedicated keytab file = /etc/krb5.keytab

> >        kerberos method = secrets and keytab

> >        winbind refresh tickets = yes

> >

> >        winbind trusted domains only = no

> >        winbind use default domain = yes

> >        winbind enum users  = yes

> >        winbind enum groups = yes

> >       winbind cache time = 60

> >

> >

> >        # Default idmap config used for BUILTIN and local accounts/groups

> >        idmap config *:backend = tdb

> >        idmap config *:range = 500-1023

> >

> >        # idmap config for domain HQKONTRAST

> >        idmap config HQKONTRAST:backend = ad

> >        idmap config HQKONTRAST:schema_mode = rfc2307

> >        idmap config HQKONTRAST:range = 1024-99999

> >

> >        # Use settings from AD for login shell and home directory

> >        winbind nss info = rfc2307

> >

> > smb.conf DC:

> >

> > [global]

> >   workgroup = HQKONTRAST

> >   realm = HQ.KONTRAST

> >   netbios name = VL0227

> >   server role = active directory domain controller

> >   idmap_ldb:use rfc2307 = yes

> >   interfaces = eth0:35 eth0:38

> >         bind interfaces only=yes

> >   log level = 3

> >

> >   ldap server require strong auth = no

> >

> >   tls enabled  = yes

> >   tls keyfile  = /var/lib/samba/private/tls/key.pem

> >   tls certfile = /var/lib/samba/private/tls/cert.pem

> >   tls cafile   = /var/lib/samba/private/tls/ca.pem

> >

> > [netlogon]

> >   path = /var/lib/samba/sysvol/hq.kontrast/scripts

> >   read only = No

> >

> > [sysvol]

> >   path = /var/lib/samba/sysvol

> >   read only = No

> >

> >

> >

> >

> >

> >

> > OLIVER WERNER

> > Systemadministrator

> >

> >

> >

> >

> >

> > Kontrast Communication Services GmbH

> > Grafenberger Allee 100, 40237 Düsseldorf, Germany

> >

> > Fon  +49-211-91505-500

> > Fax  +49-211-91505-530

> > www.kontrast.de <http://www.kontrast.de/>

> >

> > Amtsgericht Düsseldorf: HRB 26934

> > Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der

> Vlist

> >

> >  <https://www.facebook.com/kontrast.communication>

> <https://twitter.com/KONTRAST_de>

> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh>

> <http://www.linkedin.com/company/kontrast-communication-services-gmbh>

> <https://vimeo.com/kontrastcs>     <http://instagram.com/kontrast_de>

> >

> > Note: The information contained in this message may be privileged and

> confidential and protected from disclosure. If the reader of this message

> is not the intended recipient, or an employee or agent responsible for

> delivering this message to the intended recipient, you are hereby notified

> that any dissemination, distribution or copying of this communication is

> strictly prohibited. If you have received this communication in error,

> please notify us immediately by replying to the message and deleting it

> from your computer.

> >

> > Please consider the environment and only print this if required.

> >

> >

> 

> --

> To unsubscribe from this list go to the following URL and read the

> instructions:  https://lists.samba.org/mailman/options/samba