On 2008-04-09 at 21:31 +0200 Remy Zandwijk sent off: > Second: all printers had an 'invalid users' setting in the share definition. > It turned out that this considerably stresses the CPU. It took about 10 > seconds for the properties to show up for a 'HP 4250PS driver' printer. While > truss-ing the smbd process, we saw that the smbpasswd file was opened for 85
I had a similar issue some days ago with an smbd torturing it's LDAP server quite a lot. There was a directory with lots of different group ACEs on the files and hide unreadable being activated on that share. As lots of clients having change notification on that directory, smbd had a really hard time asking the LDAP server for gid-to-sid and uid-to-sid resolution. As this was a PDC winbind coudn't cache the results from the LDAP server. The increased amount of requests were a result of the exact uid/sid mappings introducted in 3.0.23c. "Hide unreadable" was the trigger that was causing so may checks to be done. As a result each client triggered some hundreds of LDAP request every 5 seconds. It might be that your "invalid users" parameter also triggers a huge amount of requests. You might try to use the attached patch which Volker wrote to cache uid/gid to sid requests in memory with 1h TTL. The patch was done against 3.0.25. That patch reduced the load that smbd put on the LDAP server dramatically. How about this patch being commited upstream? Cheers Björn -- SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen phone: +49-551-370000-0, fax: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
pgp2lCqhuTD52.pgp
Description: PGP signature
-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
