[Samba] Advice on Winbindd and NTLM Auth Performance

[Andrew Bartlett]

On Sun, 2017-09-03 at 22:34 +0100, Arnab Roy via samba wrote:
> Hi Rowland,
> 
> The only thing I'm using is winbindd the smbd and nmbd daemons are
> disabled.
> 
> However I have now found the bottleneck is because freeradius is
> calling
> the ntlm_auth binary and effectively forking out.
> 
> The guys at freeradius wrote a direct client libwbclient however
> their is
> no way of specifying the winbind privileged path using that method as
> it's
> hardcoded during compile time.
> 
> Why does samba hardcode this on all client applications is beyond my
> little
> knowledge :(

The libwbclient library is used in a privileged context (su, via
pam_winbind) so we can't safely runtime configure it.  If you want a
different path, specify it at build time.

Andrew Bartlett
-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT   
https://catalyst.net.nz/services/samba