[Samba] Fwd: Re: Ressources needed (cpus, ram, etc.) for a Samba server

[Edouard Guigné]

Hello Rowland,

Yes, this is an Unix Domain member.

Below, my smb.conf :

[global]
     security = ads
     realm = IPGAD.MYDOMAIN.FR
     workgroup = IPGAD
     kerberos method = secrets and keytab
     server signing = mandatory
     client signing = mandatory
     client use spnego = yes

     hosts allow = 127. 10.9.X. 10.9.X. 10.9.X. 10.9.4. 10.9.X.
     hosts deny = 10.9.X. 10.9.X.

     log file = /var/log/samba/%m.log
     max log size = 5000

     log level = 10
     local master = no
     domain master = no
     preferred master = no
     wins support = no
     wins proxy = no
     dns proxy = yes
     name resolve order = wins bcast host lmhosts
     use sendfile = true

     encrypt passwords = yes

     load printers = no
     cups options = raw
     printcap name = /dev/null

    disable spoolss = yes

     vfs objects = acl_xattr
     map acl inherit = yes
     store dos attributes = yes

    idmap config * : backend = tdb
    idmap config * : range = 15000-99999

     winbind nss info = rfc2307
     idmap config IPGAD : backend = ad
     idmap config IPGAD : schema_mode = rfc2307
     idmap config IPGAD : range = 1-14999
     idmap config IPGAD : unix_nss_info = yes
     idmap config IPGAD : unix_primary_group = yes

     client min protocol = SMB2
     client max protocol = SMB3

#[myshare]
[groups]
   comment = jaguar2
   path = /var/datashared
   public = no
   writable = yes
   guest ok = no
   valid users = @"utilisateurs du domaine at IPGAD.MYDOMAIN.FR"
# SHADOW COPY
   vfs objects = acl_xattr streams_xattr shadow_copy2
   shadow:snapdir = /data/datashared/snapshots
   shadow:basedir = /var/datashared
   shadow:sort = desc
   shadow:localtime = yes

[homes]
     comment = Home Directories
     read only = No
     create mask = 0700
     directory mask = 0700
     valid users = @"utilisateurs du domaine at IPGAD.MYDOMAIN.FR"
     path = /home
     hide files = /~*.tmp/profile/desktop.ini/~$*/
     browseable = no
     public = no
     guest ok = no

[printers]
     comment = All Printers
     path = /var/tmp
     printable = Yes
     create mask = 0600
     browseable = No

[print$]
     comment = Printer Drivers
     path = /var/lib/samba/drivers
     write list = root
     create mask = 0664
     directory mask = 0775

EdG



-------- Message transféré --------
Sujet : 	Re: [Samba] Ressources needed (cpus, ram, etc.) for a Samba server
Date : 	Wed, 10 Apr 2019 15:53:00 +0100
De : 	Rowland Penny via samba <samba at lists.samba.org>
Répondre à : 	Rowland Penny <rpenny at samba.org>
Pour : 	samba at lists.samba.org



On Wed, 10 Apr 2019 10:43:34 -0300
Edouard Guigné via samba <samba at lists.samba.org> wrote:

> Dear Samba Users,
>
> I am preparing a Samba box as standalone server (only files server, 
> centos 7).
>
> This Samba box is a domain member server, and is dedicaded to serve 
> files to about 80 domain users.

Which is it, a standalone server or a Unix domain member, it cannot be
both ;-)

>
> I am wondering if there are some special requirements for this
> purpose in terms of CPUs, Memory ?

This is easy, the biggest most powerful CPU possible, as much memory as
possible and the biggest HD possible ;-)

> The Samba box is a Vmware virtual machine, so I can easely configure
> this.

To be honest, it all depends on the number of users and just how they
are going to use the Samba machine.

>
> I noticed also in some Samba configurations, parameter socket options
> is set with TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=819
> Does it worth still setting this parameter on recent linux system ?
> According to the wiki
> https://wiki.samba.org/index.php/Performance_Tuning : "The Samba team
> highly-recommends not setting the parameters described in this
> section without understanding the technical background and knowing
> the consequences. In most environments, setting these parameters or
> changing the defaults decreases the Samba network performance."

The kernel has got a lot smarter and you should probably just leave it
up to it.

It might help if you could post your proposed smb.conf, we could then
point out any problems or suggest improvements.

Rowland

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba