[Samba] Slow Samba AD DC performance compared to Microsoft AD DC

[Andrew Bartlett]

Yeah, both indexed and not-indexed queries are so, so much better now.

Like orders of magnitude better for an un-indexed search after we fixed
some locking bugs, which showed our index scheme wasn't actually any
good, so we fixed that also.

I don't recall the exact numbers, but we went to the extent of writing
a tool to measure Samba and windows performance and found we now within
the same ball-park for certain combinations of load, db size and
machine size.

Andrew Bartlett

On Thu, 2020-08-27 at 12:59 +0200, L.P.H. van Belle via samba wrote:
> Lookup in the Windows setup where indexing is applied. 
> 
> And, upgrade you os +samba (as Rowland also said). 
> 
> Indexing on ad-object greatly improved in later samba versions. 
> 
> ldbsearch -H "$(samba -b|grep PRIVATE_DIR |awk '{ print $NF
> }')/sam.ldb"  -s base -b @INDEXLIST
> Will show you the index one's in samba.
> 
> 
> Greetz, 
> 
> Louis
> 
>  
> 
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> > Sinan Ozturk via samba
> > Verzonden: donderdag 27 augustus 2020 12:48
> > Aan: samba at lists.samba.org
> > Onderwerp: [Samba] Slow Samba AD DC performance compared to 
> > Microsoft AD DC
> > 
> > Hello everyone.
> > 
> > I have a problem with performance of Samba AD DC.
> > 
> > We have a Laravel application that queries both Microsoft AD 
> > DC and Samba AD DC.
> > 
> > When a query comes to AD it takes 1 second to complete, 
> > however with Samba it can take up to 4-5 seconds.
> > 
> > The queries are updating user, creating group and attaching 
> > people to groups.
> > 
> > Samba Server has more than 6000 users.
> > 
> > The VM has 2 CPU 2 GB Ram and Virtio network card running 
> > Ubuntu 14.04 with Samba 4.3.11.
> > 
> > Is there any way I can speed up Samba server?
> > 
> > Here is the smb.conf file
> > 
> > ###########################################################
> > # Global parameters
> > [global]
> >         workgroup = domain
> >         realm = domain.COM
> >         netbios name = JUGGERNAUT
> >         server role = active directory domain controller
> >         dns forwarder = 172.31.238.11
> >         idmap_ldb:use rfc2307 = yes
> >         log level = 1
> >         ldap ssl = off
> >         ldap server require strong auth = no
> > [netlogon]
> >         path = /var/lib/samba/sysvol/domain.com/scripts
> >         read only = No
> > 
> > [sysvol]
> >         path = /var/lib/samba/sysvol
> >         read only = No
> > 
> > ###########################################################
> > 
> > Thanks.
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> > 
> > 
> 
> 
-- 
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT          
https://catalyst.net.nz/services/samba