I just upgraded from 3.0.23d to 3.0.25 and I'm noticing that winbind is chewing up a lot of CPU usage.
There are always 2 winbindd processes and one uses about 80% cpu and the other use 15% cpu. When I run a tcpdump and look at the traffic going to/from the domain controller winbindd is connected to, there is a constant flow of traffic. Here is the winbind setup from my smb.conf file: #idmap uid = 16777216-33554431 #idmap gid = 16777216-33554431 allow trusted domains = no #idmap backend = idmap_rid:WORKGROUP=16777216-33554431 idmap alloc backend = tdb idmap domains = WORKGROUP idmap config WORKGROUP: default = yes idmap config WORKGROUP: backend = rid idmap config WORKGROUP: read_only = yes idmap config WORKGROUP: range = 16777216-33554431 idmap alloc config: range = 16777216-33554431 winbind offline logon = true winbind nested groups = no winbind enum users = yes winbind enum groups = yes winbind cache time = 900 #winbind cache time = 300 template shell = /bin/bash winbind use default domain = yes password server = print.ldaf.state.la.us dc2.ldaf.state.la.us usershare.ldaf.state.la.us agchem.ldaf.state.la.us * realm = LDAF.STATE.LA.US template homedir = /data/HomeDirectories/%U Lookin at the smbd logs I'm seeing a lot of user lookups for Shares... DocumentImaging and OfficeDirectories are Shares.. [2007/05/18 11:21:06, 5] nsswitch/winbindd_async.c:lookupname_recv2(801) lookup_name returned an error [2007/05/18 11:21:06, 5] nsswitch/winbindd_user.c:getpwnam_name2sid_recv(390) Could not lookup name for user dOcUMenTimagING [2007/05/18 11:21:06, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(346) [ 0]: getpwnam dOcUMentIMAGing [2007/05/18 11:21:06, 5] nsswitch/winbindd_async.c:lookupname_recv2(801) lookup_name returned an error [2007/05/18 11:21:06, 5] nsswitch/winbindd_user.c:getpwnam_name2sid_recv(390) Could not lookup name for user docUMentImaginG [2007/05/18 11:21:06, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(346) [ 0]: getpwnam docUMentiMAging [2007/05/18 11:21:06, 5] nsswitch/winbindd_async.c:lookupname_recv2(801) lookup_name returned an error [2007/05/18 11:21:06, 5] nsswitch/winbindd_user.c:getpwnam_name2sid_recv(390) Could not lookup name for user ofFIcEdirEctoRies [2007/05/18 11:21:06, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(346) [ 0]: getpwnam ofFIcEdirEctorIes [2007/05/18 11:21:06, 5] nsswitch/winbindd_async.c:lookupname_recv2(801) lookup_name returned an error [2007/05/18 11:21:06, 5] nsswitch/winbindd_user.c:getpwnam_name2sid_recv(390) Could not lookup name for user dOCUMenTimAgiNG [2007/05/18 11:21:06, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(346) [ 0]: getpwnam dOCUMenTimaGINg [2007/05/18 11:21:06, 5] nsswitch/winbindd_async.c:lookupname_recv2(801) lookup_name returned an error [2007/05/18 11:21:06, 5] nsswitch/winbindd_user.c:getpwnam_name2sid_recv(390) Could not lookup name for user dOcuMeNtimAgIng [2007/05/18 11:21:06, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(346) [ 0]: getpwnam dOcuMeNtimAgiNg [2007/05/18 11:21:06, 5] nsswitch/winbindd_async.c:lookupname_recv2(801) lookup_name returned an error [2007/05/18 11:21:06, 5] nsswitch/winbindd_user.c:getpwnam_name2sid_recv(390) Could not lookup name for user OFFicEdirECtoriEs [2007/05/18 11:21:06, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(346) [ 0]: getpwnam OFFicEdirECtorieS [2007/05/18 11:21:06, 5] nsswitch/winbindd_async.c:lookupname_recv2(801) lookup_name returned an error [2007/05/18 11:21:06, 5] nsswitch/winbindd_user.c:getpwnam_name2sid_recv(390) Could not lookup name for user DoCumentIMAGinG [2007/05/18 11:21:06, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(346) [ 0]: getpwnam DoCumentIMAgINg There are also a lot of lookups being logged in wb-BUILTIN log ==> /var/log/samba/log.wb-BUILTIN <== [2007/05/18 11:24:41, 4] nsswitch/winbindd_dual.c:fork_domain_child(989) child daemon request 20 [2007/05/18 11:24:41, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754) [29981]: lookupsid S-1-5-32-544 [2007/05/18 11:24:41, 4] nsswitch/winbindd_dual.c:fork_domain_child(989) child daemon request 20 [2007/05/18 11:24:41, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754) [29981]: lookupsid S-1-5-32-545 [2007/05/18 11:24:42, 4] nsswitch/winbindd_dual.c:fork_domain_child(989) child daemon request 20 [2007/05/18 11:24:42, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754) [29981]: lookupsid S-1-5-32-544 [2007/05/18 11:24:42, 4] nsswitch/winbindd_dual.c:fork_domain_child(989) child daemon request 20 [2007/05/18 11:24:42, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754) [29981]: lookupsid S-1-5-32-545 [2007/05/18 11:24:42, 4] nsswitch/winbindd_dual.c:fork_domain_child(989) child daemon request 20 [2007/05/18 11:24:42, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754) [29981]: lookupsid S-1-5-32-544 [2007/05/18 11:24:42, 4] nsswitch/winbindd_dual.c:fork_domain_child(989) child daemon request 20 [2007/05/18 11:24:42, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754) [29981]: lookupsid S-1-5-32-545 [2007/05/18 11:24:43, 4] nsswitch/winbindd_dual.c:fork_domain_child(989) child daemon request 20 [2007/05/18 11:24:43, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754) [29981]: lookupsid S-1-5-32-546 [2007/05/18 11:24:43, 4] nsswitch/winbindd_dual.c:fork_domain_child(989) child daemon request 20 [2007/05/18 11:24:43, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754) [29981]: lookupsid S-1-5-32-544 [2007/05/18 11:24:43, 4] nsswitch/winbindd_dual.c:fork_domain_child(989) child daemon request 20 [2007/05/18 11:24:43, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754) [29981]: lookupsid S-1-5-32-545 [2007/05/18 11:24:44, 4] nsswitch/winbindd_dual.c:fork_domain_child(989) child daemon request 20 [2007/05/18 11:24:44, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754) [29981]: lookupsid S-1-5-32-544 [2007/05/18 11:24:45, 4] nsswitch/winbindd_dual.c:fork_domain_child(989) child daemon request 20 [2007/05/18 11:24:45, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754) [29981]: lookupsid S-1-5-32-544 Any ideas of whats going on with this? Thanks, Jason Lanclos - RHCE Systems Administrator Louisiana Department of Agriculture and Forestry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba