[Samba] 3.0.25 Winbind high CPU usage

2007-05-18 Thread Jason Lanclos
/winbindd_dual.c:fork_domain_child(989)
  child daemon request 20
[2007/05/18 11:24:42, 3]
nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754)
  [29981]: lookupsid S-1-5-32-545
[2007/05/18 11:24:43, 4] nsswitch/winbindd_dual.c:fork_domain_child(989)
  child daemon request 20
[2007/05/18 11:24:43, 3]
nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754)
  [29981]: lookupsid S-1-5-32-546
[2007/05/18 11:24:43, 4] nsswitch/winbindd_dual.c:fork_domain_child(989)
  child daemon request 20
[2007/05/18 11:24:43, 3]
nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754)
  [29981]: lookupsid S-1-5-32-544
[2007/05/18 11:24:43, 4] nsswitch/winbindd_dual.c:fork_domain_child(989)
  child daemon request 20
[2007/05/18 11:24:43, 3]
nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754)
  [29981]: lookupsid S-1-5-32-545
[2007/05/18 11:24:44, 4] nsswitch/winbindd_dual.c:fork_domain_child(989)
  child daemon request 20
[2007/05/18 11:24:44, 3]
nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754)
  [29981]: lookupsid S-1-5-32-544
[2007/05/18 11:24:45, 4] nsswitch/winbindd_dual.c:fork_domain_child(989)
  child daemon request 20
[2007/05/18 11:24:45, 3]
nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754)
  [29981]: lookupsid S-1-5-32-544


Any ideas of whats going on with this?


Thanks,

Jason Lanclos - RHCE
Systems Administrator
Louisiana Department of Agriculture and Forestry


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] 3.0.25 Winbind high CPU usage

2007-05-18 Thread Jason Lanclos
 = no
printable = yes
writeable = no

[print$]
path = /data/SharedData/printdrivers
guest ok = yes
browseable = yes
write list = @WORKGROUP\Domain Admins
readonly = yes
[HomeDirectories]
comment = Home Directories
path = /data/HomeDirectories
writeable = yes
guest ok = no
veto files = /lost+found/jlanclos/k0268/
#acl group control = yes
map acl inherit = yes
valid users = @WORKGROUP\MIS

[OfficeDirectories]
comment = Long Term Data Storage
path = /data/SharedData/OfficeDirectories
map acl inherit = yes
ea support = yes
writeable = yes
guest ok = yes
admin users = @WORKGROUP\Domain Admins
inherit acls = yes
#inherit owner = yes
inherit permissions = yes
#acl group control = yes
dos filemode = yes
veto files = /.recycle/lost+found/
veto oplock files = /*.qbw*/*.QBW*/
#vfs object = recycle full_audit vscan-clamav
vfs object = recycle full_audit
recycle:repository = .recycle
recycle:keeptree = yes
recycle:versions = yes
recycle:touch = yes
recycle:touch_mtime = no
full_audit:prefix = %m|%u|%S
full_audit:success = unlink  rename mkdir pwrite rmdir
full_audit:failure = pwrite
#vscan-clamav: config-file = /etc/samba/vscan-clamav.conf
[Forms]
copy = OfficeDirectories
comment = Forms
path = /data/SharedData/Forms
[LDAFApps]
copy = OfficeDirectories
path = /data/SharedData/LDAFApps
comment = LDAF Applications
writeable = yes
guest ok = no
veto files = /lost+found/
[DocumentImaging]
copy = OfficeDirectories
comment = Document Imaging Application Images
path = /data/SharedData/DocumentImaging
writeable = yes
guest ok = no
[DFSShare]
copy = OfficeDirectories
comment =
path = /data/SharedData/DFS-Share

[Media]
copy = OfficeDirectories
comment = Executive PR
path = /data/SharedData/Media
writeable = yes
guest ok = yes
veto files = /lost+found/
[oldgdrive]
path = /data/SharedData/oldgdrive
writeable = yes
map acl inherit = yes
admin users = jlanclos, @WORKGROUP\Domain Admins
-




Thanks,

Jason





-Original Message-
From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] 
Sent: Friday, May 18, 2007 12:07 PM
To: Jason Lanclos
Cc: samba@lists.samba.org
Subject: Re: [Samba] 3.0.25 Winbind high CPU usage

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Jason Lanclos wrote:
 I just upgraded from 3.0.23d to 3.0.25 and I'm noticing that winbind
is
 chewing up a lot of CPU usage.
 
 There are always 2 winbindd processes and one uses about 80% cpu and
the
 other use 15% cpu.
 
 When I run a tcpdump and look at the traffic going to/from the domain
 controller winbindd is connected to, there is a constant flow of
 traffic.
 
 
 Here is the winbind setup from my smb.conf file:
 
#idmap uid = 16777216-33554431
#idmap gid = 16777216-33554431
allow trusted domains = no
#idmap backend = idmap_rid:WORKGROUP=16777216-33554431
idmap alloc backend = tdb
 
idmap domains = WORKGROUP
idmap config WORKGROUP: default =yes
idmap config WORKGROUP: backend =rid
idmap config WORKGROUP: read_only = yes
idmap config WORKGROUP: range = 16777216-33554431
idmap alloc config: range = 16777216-33554431
 
winbind offline logon = true
winbind nested groups = no
winbind enum users = yes
winbind enum groups = yes
winbind cache time = 900

First I would disable thwe winbindd enum users/group options.
Second, you might want to push the idmap cache time and
idmap negative cache time value up from their default values.

Finally, I have it on my TODO list to move the winbindd and
idmap cache managers into the main winbindd proces so we don't
have to cross process boundaries unless we actually hitting
the backend (i.e. xpired cache entries).

Can you give me a better idea of what is going on in smbd
and other applications running on the server?






cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGTd1MIR7qMdg1EfYRAoJMAJ9Nye7WhjjOOklNJsVbTfGCBSSn9ACgsCeq
KgPypRDG/SoGuhyb0J1A1BA=
=oc5C
-END PGP SIGNATURE-


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba