[Samba] winbind - frequent high CPU utilization

[zby at post.cz]

Hi.

I use winbind + squid on Debian Buster to authenticate users + authorize 
them based on groups they are in. It all works, well, good, but winbind's 
CPU utilization peaks can reach up to 100%. The same solution ran OK on 
Debian Jessie with up to 20% CPU utilization at most.


The configuration of Buster must have been updated based on the samba 
version leap/shift compared to Jessie.

On Buster I encountered this error: https://serverfault.com/questions/
789532/winbindd-gss-init-sec-context-failed-with-unspecified-gss-failure

Thus, I set "winbind rpc only = yes". May this info serve you as a hints.





Current config:

Debian 10 (Buster), 2CPU, 4GB RAM, 64bit

winbind - 4.9.5+dfsg-5


samba - 4.9.5+dfsg-5

Connection information for squid (4.6):
        Number of clients accessing cache:      443




Additional info is here:  https://pastebin.com/U5idtgsv




Thank you for hints.

Zbynek