[Samba] CLDAP using CPU alltime on Samba 4.8.4

Rodrigo Sirio Coelho rodrigoscoelho at gmail.com
Thu Nov 29 12:43:23 UTC 2018


Hi,

My Samba AD-DC installation is using CPU all time on a process. I'm trying
everything to fix it, but without success.
It started when using it on Ubuntu 16.04, I upgraded o Ubuntu 18.04, and
now Ubuntu 18.10, that is using Samba 4.8.4 and the problem persist.

Using samba-tool process, I could see that the process using resources is
CLDAP.
I did samba-tool dbcheck --cross-ncs
samba-tool dbcheck
and no problem.

samba-tool processes
cldap_server           19864

19864 is the process with problem, related to cldap_server.

My smb.conf is the following:

# Global parameters
[global]
        get quota command = /opt/bin/samba-btrfs-quota.sh
        rpc_daemon:fssd = fork
        registry shares = yes
#       include = registry
#       log level = 3 passdb:5 auth:5
        log level = 0
        template homedir = /home/%U
#       idmap uid = 500-10000000
#       idmap gid = 500-10000000
        idmap config DOMAIN : unix_nss_info = yes
        winbind use default domain = yes
        winbind nested groups = yes
        username map = /etc/samba/user.map
        server services = rpc, nbt, wrepl, ldap, cldap, kdc, drepl,
winbind, ntp_signd, kcc, dnsupdate, dns, s3fs
        allow dns updates
        acl allow execute always = yes
        wide links = yes
        unix extensions = no
#       allow insecure wide links = yes
        follow symlinks = yes
        workgroup = FRATAR
        netbios name = SERVER
        os level = 20
        preferred master = yes
#       idmap config * : backend = tdb
#       idmap config * : range = 1000000 - 1999999
#       idmap config FRATAR : backend = rid
#       idmap config FRATAR : range = 10000 - 999999
#       idmap config FRATAR : schema mode = rfc2307
        dns forwarder = 8.8.8.8
        idmap_ldb:use rfc2307 = yes
        wins support = true
        winbind nss info = rfc2307
        tls enabled = yes
#       winbind trusted domains only = yes
        ldap server require strong auth = no
        server role = active directory domain controller
        allow insecure wide links = yes
        template shell = /bin/bash
        realm = FRATAR.LOCAL
        winbind enum users = true
        winbind enum groups = true
#       host msdfs = yes
[netlogon]
        path = /var/lib/samba/sysvol/fratar.local/scripts
        read only = No
        vfs objects = btrfs

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No
        vfs objects = btrfs
[proxmox]
        path = /mnt/backupinterno/proxmox
        read only = No
#       follow symlinks = yes
#       wide links = yes
        vfs objects = btrfs
        dont descend = .snapshots
[fratar]
        path = /mnt/fratar-btrfs/Fratar
        read only = No
        follow symlinks = yes
        wide links = yes
#       vfs objects = recycle btrfs
        vfs objects = snapper btrfs
        dont descend = .snapshots
#       vfs objects = recycle shadow_copy2 btrfs
#       shadow:sort = desc
#       shadow:basedir = /mnt/fratar-btrfs/Fratar
#       shadow:snapdir = /mnt/fratar-btrfs/.snapshots/Fratar
#       shadow:format = SNAPFratar_%Y%m%d%H%M
#       recycle:repository = /mnt/fratar-btrfs/Fratar/lixeira/%U
#       recycle:touch = Yes
#       recycle:keeptree = Yes
#       recycle:exclude = *.tmp,*.temp,*.o,*.obj,*.TMP,*.TEMP
#       recycle:excludedir = /recycle,/tmp,/temp,/TMP,/TEMP
[backup]
        path = /mnt/backupinterno/BACKUP
        vfs objects = btrfs
        read only = No

[backup-modelle]
        path = /mnt/backupinterno/BACKUP/BACKUP-MODELLE
        vfs objects = btrfs
        read only = No

[profiles]
        path = /mnt/fratar-btrfs/profiles
        read only = No
        hide files = /desktop.ini/$RECYCLE.BIN/
        vfs objects = btrfs
[users]
        path = /mnt/fratar-btrfs/users
        read only = No
        vfs objects = btrfs





strace -p PID  is giving a lot of messages like these:

fcntl(9, F_SETLK, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=168,
l_len=40000}) = 0
fcntl(9, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=40168,
l_len=0}) = 0
fcntl(12, F_SETLK, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=168,
l_len=40000}) = 0
fcntl(12, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=40168,
l_len=0}) = 0
fcntl(11, F_SETLK, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=168,
l_len=40000}) = 0
fcntl(11, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=40168,
l_len=0}) = 0
fcntl(13, F_SETLK, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=168,
l_len=40000}) = 0
fcntl(13, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=40168,
l_len=0}) = 0
fcntl(14, F_SETLK, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=168,
l_len=40000}) = 0
fcntl(14, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=40168,
l_len=0}) = 0
fcntl(10, F_SETLK, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=168,
l_len=40000}) = 0
fcntl(10, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=40168,
l_len=0}) = 0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
epoll_create(64)                        = 32
fcntl(32, F_GETFD)                      = 0
fcntl(32, F_SETFD, FD_CLOEXEC)          = 0
getpid()                                = 19864
epoll_create(64)                        = 33
fcntl(33, F_GETFD)                      = 0
fcntl(33, F_SETFD, FD_CLOEXEC)          = 0
getpid()                                = 19864
close(33)                               = 0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}) = 0
fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=176,
l_len=1}^C) = 0



Please, I don't know what more to try. Anyone knows how to proceed?

Thanks.


More information about the samba mailing list