[Samba] howto optimize samba/kerberos for 20k requests per minute - help needed

[L.P.H. van Belle]

I would start here. 
https://docs.software-univention.de/performance-guide-4.1.html

And run : 
ldbsearch -H "$(samba -b|grep PRIVATE_DIR |awk '{ print $NF }')/sam.ldb"  -s base -b @INDEXLIST 
That shows what is index at this moment.

You can add ldap proxy on the webserver to offload samba.
Also samba is Version 4.10.18-Univention newer version has better performace. 
There is/was a change as of 4.11 

On all AD-DC's run : 
samba-tool dbcheck
samba-tool dbcheck --reindex 
Might help a bit also. 

Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Rowland Penny via samba
> Verzonden: vrijdag 16 juli 2021 10:19
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] howto optimize samba/kerberos for 20k 
> requests per minute - help needed
> 
> On Fri, 2021-07-16 at 06:41 +0000, Stefan Bauer via samba wrote:
> > Seems that my attachment was removed. Kindly find it here please:
> > 
> > 
> > 
> > https://nopaste.chaoz-irc.net/view/64530586
> > 
> 
> 
> Can you try adding a standard Samba AD DC to your domain (I would
> suggest using Debian 10 with Louis's repo: https://apt.van-belle.nl/ )
> and point your clients at that.
> 
> This will rule out all the rubbish that Univention have added.
> 
> Rowland
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>