[Samba] Samba 4.6.2 member server errors

[Rowland Penny]

On Sun, 15 Oct 2017 13:38:13 -0400 (EDT)
me at tdiehl.org wrote:

> Yes I understand, however, there are 2 things I am concerned about.
> 
> When the errors are spewing, winbind never goes to sleep and the load
> on the server runs somewhere between 6-8 constantly (as shown by
> top.). Even when there is no one in the office and hence no files
> being served I still see the high load.
> 
> When the errors stop (This happens intermittently) winbind will sleep
> and the load settles down to < 1.
> 
> The other thing that concerns me is that I am wondering if this is an
> indication that something more serious is about to break. It is one
> thing for me to see things in the background and entirely something
> else for it to impact the users. :-)
> 
> Suggestions?
> 
> Regards,
> 

If nothing is connecting, then winbind shouldn't be doing much, so if
it is, you need to find out why.

Try running 'samba-tool dbcheck' on the DCs
Check replication between the DCs
Check the Samba logs on the DCs, is there anything relevant showing at
the time that winbind is overloading on the domain member
Raise the log levels on the DCs and domain members and see if anything
pops out.

One thing I noticed when I looked it your smb.conf again was this:

realm = SAMDOM.MYDOMAIN.com.COM

I take it this was just a typo when you sanitised it.

If this is only happening on one domain member, try comparing the
various files on one with the other (/etc/hosts, /etc/krb5.conf and so
on).

Rowland