[Samba] winbind - frequent high CPU utilization

[Rowland penny]

On 13/08/2019 09:24, Zbynek via samba wrote:
> Hi.
>
> I use winbind + squid on Debian Buster to authenticate users + authorize
> them based on groups they are in. It all works, well, good, but winbind's
> CPU utilization peaks can reach up to 100%. The same solution ran OK on
> Debian Jessie with up to 20% CPU utilization at most.
>
>
> The configuration of Buster must have been updated based on the samba
> version leap/shift compared to Jessie.
>
> On Buster I encountered this error: https://serverfault.com/questions/
> 789532/winbindd-gss-init-sec-context-failed-with-unspecified-gss-failure
>
> Thus, I set "winbind rpc only = yes". May this info serve you as a hints.
>
>
> Current config:
>
> Debian 10 (Buster), 2CPU, 4GB RAM, 64bit
>
> winbind - 4.9.5+dfsg-5
>
>
> samba - 4.9.5+dfsg-5
>
> Connection information for squid (4.6):
>          Number of clients accessing cache:      443
>
>
> Additional info is here:  https://pastebin.com/U5idtgsv

Why are you using the DC xidnumber range on a Unix domain member ?

Why are using something meant for a DC (passdb backend = samba_dsdb) on 
a Unix domain member ?

Rowland