[Samba] Need help troubleshooting TCP thrashing, possible kernel bug?

[Rowland Penny]

On Wed, 8 Feb 2017 16:43:53 -0600
Paul Klapperich via samba <samba at lists.samba.org> wrote:

> Very well. Here is the affected smb.conf.
> ------
> [global]
>     server min protocol = NT1
>     server max protocol = SMB3
>     interfaces = 127.0.0.1 10.0.0.8
>     bind interfaces only = yes
>     encrypt passwords = yes
>     dns proxy = no
>     strict locking = no
>     oplocks = yes
>     deadtime = 15
>     max log size = 51200
>     max open files = 2830016
>     logging = file
>     load printers = no
>     printing = bsd
>     printcap name = /dev/null
>     disable spoolss = yes
>     getwd cache = yes
>     guest account = nobody
>     map to guest = Bad User
>     obey pam restrictions = yes
>     directory name cache size = 0
>     kernel change notify = no
>     panic action = /usr/local/libexec/samba/samba-backtrace
>     nsupdate command = /usr/local/bin/samba-nsupdate -g
>     server string = backup of files
>     ea support = yes
>     store dos attributes = yes
>     lm announce = yes
>     hostname lookups = yes
>     unix extensions = no
>     acl allow execute always = true
>     dos filemode = yes
>     multicast dns register = no
>     local master = no
>     idmap config *: backend = tdb
>     idmap config *: range = 10000-90000
>     server role = member server
>     security = user
>     passdb backend = ldapsam:ldap://ldap0.packetdigital.com
>     ldap admin dn = cn=admin,dc=packetdigital,dc=com
>     ldap suffix = dc=packetdigital,dc=com
>     ldap user suffix = ou=Users
>     ldap group suffix = ou=Groups
>     ldap ssl = off
>     ldap replication sleep = 1000
>     ldap passwd sync = yes
>     ldapsam:trusted = yes
>     netbios name = HAMMER
>     workgroup = PACKETDIGITAL
>     domain logons = yes
>     idmap config PACKETDIGITAL: backend = ldap
>     idmap config PACKETDIGITAL: range = 10000-90000
>     idmap config PACKETDIGITAL: ldap url = ldap0.packetdigital.com
>     pid directory = /var/run/samba
>     create mask = 0666
>     directory mask = 0777
>     client ntlmv2 auth = yes
>     dos charset = CP437
>     unix charset = UTF-8
>     log level = 1
>     #map unix users to 1 or more names
>     ## can map an @group to a username
>     #username map = /mnt/storage/configs/samba_users.map
>     follow symlinks = yes
>     wide links = yes
>     unix extensions = no
>     create mask = 0660
>     idmap uid = 10000-90000
>     idmap gid = 10000-90000
> 
> 
> [Software]
>     path = /mnt/storage/cifs-share/Software
>     printable = no
>     veto files = /.snapshot/.windows/.mac/.zfs/
>     writeable = yes
>     browseable = yes
>     vfs objects = zfs_space zfsacl
>     hide dot files = yes
>     guest ok = no
>     nfs4:mode = special
>     nfs4:acedup = merge
>     nfs4:chown = true
>     zfsacl:acesort = dontcare
>     create mask = 0775
>     force create mode = 0775
>     directory mask = 0775
>     force directory mode = 0775
>     force group = Software
>     valid users = @Software, @Software-RO
>     read only = yes
>     write list = @Software
> 

I think you need to go and read 'man smb.conf'

'server role = member server' means it should be joined to a windows
domain, but 'domain logons = yes' makes it a PDC, so which is it ?

Rowland