Re: [Samba] SMB2 write performace slower than SMB1 in 10Gb network

2012-04-27 Thread Volker Lendecke
On Sat, Apr 28, 2012 at 01:46:35PM +0800, Zhiming Zhou wrote:
> I use Iometer to test normal file read/write performance,
> at first, SMB2 is not enabled,test 1MB sequential read/write performance
> with SMB1, I got 610 MB/s write performance which
> is really good, while read performance is just 280 MB/s.
> 
> Then I change "max protocol" to "SMB2" in smb.conf to enable
> SMB2, other configs in smb.conf are not changed, restart samba,
> reconnect in Windows 2008, use Iometer to run test again, I got
>  470 MB/s write performance and 505 MB/s read performance.
> 
> It's quite good that read performance bursts with SMB2, but
> write performace droped by 140 MB/s, I run this write test
> serveral times again, write performance indeed droped a lot,
> so is it normal that SMB2 write performance is slower than
> SMB1?

No, this is not normal. Maybe you want to enable async I/O.
Depending on the platform, plain aio might work with

aio write size = 1

It might be a good idea to also enable

vfs objects = aio_fork

With latest Samba Jeremy Allison has also added the
aio_pthread module, but that is not yet in released code.
You can get it from the latest v3-6-test branch in our git
repository.

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kont...@sernet.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Problem adding sambaGroupMapping

2012-04-27 Thread stefano malini

Thank you! it runs

On 04/27/2012 08:10 PM, steve wrote:

dn: cn=Students,ou=Groups,dc=amahoro,dc=bi
changetype: modify
add: objectClass
objectClass: posixGroup
-
add: objectClass
objectClass: sambaGroupMapping
-
add: sambaSID
sambaSID: S-1-5-21-251852451-2940789264-3475694606
-
add: sambaGroupType
sambaGroupType: 5

Cheers,
Steve

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] SMB2 write performace slower than SMB1 in 10Gb network

2012-04-27 Thread Zhiming Zhou
Hi forks:

I've been testing SMB2 with samba 3.6.4 performance these days,
and I find a weird benchmark that SMB2 write performance is
slower than SMB1 in 10Gb ethernet network.

Server
---
Linux: Redhat Enterprise 6.1 x64
Kernel: 2.6.31 x86_64
Samba: 3.6.4 (almost using the default configuration)
Network: Chelsio T4 T420-SO-CR 10GbE network adapter
RAID:
Adaptec 51645 RAID Controller (Writeback RAID0 with 16 * 1TB
SATA II disks)
Filesystem: xfs (barrier off)

Clinet
---
Windows 2008 Server R2 64bit
Network: Chelsio T4 T420-SO-CR 10GbE network adapter
Test tool: Iometer
Iometer configuration:
Normal I/O test policy, 1MB sequential read/write

Every Iometer test run by 3 minutes, Iometer test file size
 is 180GB.

Server and client are connected directly with fabric links,
without any 10GbE switches.

I use Iometer to test normal file read/write performance,
at first, SMB2 is not enabled,test 1MB sequential read/write performance
with SMB1, I got 610 MB/s write performance which
is really good, while read performance is just 280 MB/s.

Then I change "max protocol" to "SMB2" in smb.conf to enable
SMB2, other configs in smb.conf are not changed, restart samba,
reconnect in Windows 2008, use Iometer to run test again, I got
 470 MB/s write performance and 505 MB/s read performance.

It's quite good that read performance bursts with SMB2, but
write performace droped by 140 MB/s, I run this write test
serveral times again, write performance indeed droped a lot,
so is it normal that SMB2 write performance is slower than
SMB1?

Thanks ^_^

Regards
Uranus Zhou
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Problems ldap authentication for Samba 3.5.11-2-1

2012-04-27 Thread rlvcosta
Samba team,

I'm having some problems to have a client Windows XP, I believe all systems
could have the same issue, using Ldap authentication with Samba.

This is a native OpenFiler configuration with a local LDAP server for Samba
shares. The problem is that sharing is never authenticated where my
suspicious is about sambaSID.

Basically I create a test user called "rlvcosta". This user was created into
LDAP as :

dn: uid=rlvcosta,ou=People,dc=flores,dc=com
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: sambaSamAccount
homeDirectory: /dev/null
loginShell: /bin/false
cn: rlvcosta
givenName: rlvcosta
sn: rlvcosta
uid: rlvcosta
uidNumber: 500
gidNumber: 9126
sambaSID: S-1-5-21-1299536883-3844537390-917088389-1001

This appears to be ok. Although when I put a tcpdumo trace I see:

Lightweight Directory Access Protocol
LDAPMessage searchRequest(161) "dc=flores,dc=com" wholeSubtree
messageID: 161
protocolOp: searchRequest (3)
searchRequest
baseObject: dc=flores,dc=com
scope: wholeSubtree (2)
derefAliases: neverDerefAliases (0)
sizeLimit: 0
timeLimit: 15
typesOnly: False
Filter:
(&(sambaSID=S-1-5-21-1299536883-3844537390-917088389-513)(objectclass=sambaSamAccount))
filter: and (0)
and:
(&(sambaSID=S-1-5-21-1299536883-3844537390-917088389-513)(objectclass=sambaSamAccount))
and: 2 items
Filter:
(sambaSID=S-1-5-21-1299536883-3844537390-917088389-513)
and item: equalityMatch (3)
equalityMatch
attributeDesc: sambaSID
assertionValue:
S-1-5-21-1299536883-3844537390-917088389-513
Filter: (objectclass=sambaSamAccount)
and item: equalityMatch (3)
equalityMatch
attributeDesc: objectclass
assertionValue: sambaSamAccount
attributes: 38 items
AttributeDescription: uid
AttributeDescription: uidNumber
AttributeDescription: gidNumber
AttributeDescription: homeDirectory
AttributeDescription: sambaPwdLastSet
AttributeDescription: sambaPwdCanChange
AttributeDescription: sambaPwdMustChange
AttributeDescription: sambaLogonTime
AttributeDescription: sambaLogoffTime
AttributeDescription: sambaKickoffTime
AttributeDescription: cn
AttributeDescription: sn
AttributeDescription: displayName
AttributeDescription: sambaHomeDrive
AttributeDescription: sambaHomePath
AttributeDescription: sambaLogonScript
AttributeDescription: sambaProfilePath
AttributeDescription: description
AttributeDescription: sambaUserWorkstations
AttributeDescription: sambaSID
AttributeDescription: sambaPrimaryGroupSID
AttributeDescription: sambaLMPassword
AttributeDescription: sambaNTPassword
AttributeDescription: sambaDomainName
AttributeDescription: objectClass
AttributeDescription: sambaAcctFlags
AttributeDescription: sambaMungedDial
AttributeDescription: sambaBadPasswordCount
AttributeDescription: sambaBadPasswordTime
AttributeDescription: sambaPasswordHistory
AttributeDescription: modifyTimestamp
AttributeDescription: sambaLogonHours
AttributeDescription: modifyTimestamp
AttributeDescription: uidNumber
AttributeDescription: gidNumber
AttributeDescription: homeDirectory
AttributeDescription: loginShell
AttributeDescription: gecos

See that by Ldap DB the rlvcosta sambaSID is supposed to be
S-1-5-21-1299536883-3844537390-917088389-1001. But the search made from
Samba use the sufix 513, unless 1001. Samba receives appropriately the
request from client but looks like it doesn't map correctly the search to
LDAP server.

I could not understand by the tcpdump trace the dynamic from Samba
authentication with LDAP. The LDAP has the correct structure but the search
from Samba doesn't create the correct sambaSID.

My understand would be that Samba search the sambaSID prefix, like below,
and then suffi

[Samba] Tools

2012-04-27 Thread sandy . napoles
Helo list, there is some tool to admin samba4 active directory users and
gpo under linux, for examplo in windows thereis a adminpack, in linux
thereis something as adminpack?
PD: I do not like phpldapadmin
salu2s

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba4 how to list all members of a group

2012-04-27 Thread steve

Version 4.0.0alpha20-GIT-1fbc185
On the Linux dc.

Thanks,
Steve
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Problem adding sambaGroupMapping

2012-04-27 Thread steve

Hi
Try:

dn: cn=Students,ou=Groups,dc=amahoro,dc=bi
changetype: modify
add: objectClass
objectClass: posixGroup
-
add: objectClass
objectClass: sambaGroupMapping
-
add: sambaSID
sambaSID: S-1-5-21-251852451-2940789264-3475694606
-
add: sambaGroupType
sambaGroupType: 5

Cheers,
Steve

On 27/04/12 19:07, stefano malini wrote:

This is the output, still wrong:

ldapmodify: modify operation type is missing at line 2, entry
"cn=Students,ou=Groups,dc=amahoro,dc=bi"
root@amahoro:~# ldapmodify -x -W -D 'cn=Manager,dc=amahoro,dc=bi'
Enter LDAP Password:
dn: cn=Students,ou=Groups,dc=amahoro,dc=bi
changetype: modify
add: objectClass
objectClass: posixGroup
add: objectClass
objectClass: sambaGroupMapping
add: sambaSID
sambaSID: S-1-5-21-251852451-2940789264-3475694606
add: sambaGroupType
sambaGroupType: 5

ldapmodify: wrong attributeType at line 5, entry
"cn=Students,ou=Groups,dc=amahoro,dc=bi"


On 04/27/2012 06:54 PM, steve wrote:

On 27/04/12 18:38, stefano malini wrote:

Hi,




dn: cn=Students,ou=Groups,dc=amahoro,dc=bi
changetype: modify
add: objectClass
objectClass: posixGroup
objectClass: sambaGroupMapping
sambaSID: S-1-5-21-251852451-2940789264-3475694606
sambaGroupType: 5



I think you have to separate them:

changetype: modify
add: objectClass
objectClass: posixGroup
-
add: objectClass
objectClass: sambaGroupMapping
-
add: sambaSID
sambaSID: S-1-5-21-251852451-2940789264-3475694606
-
add: sambaGroupType
sambaGroupType: 5

Cheers,
Steve


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] creating file on share getting "premission denied" on a linux client

2012-04-27 Thread kartheek katakam
Hello,

I have linux samba server trying to share user home directories, and I am
trying to mount the shares on a linux client. I am running into a issue.

here is truncated output of smb.conf

turncated o/p of my smb.conf for the share

   [50483]
path = /home/50483
users = dituser
public = no
writable = yes
printable = no
write list = 50483

on the samba server

[root@HOST1 50483]# cd /home/50483
[root@HOST1 50483]# ls -lrt
total 20
-rw---  1 50483 admin   10 Apr 26 12:55 .bash_history
drwxr-xr-x 10 rootroot4096 Apr 26 14:11 ../
drwxrwxr-x  2 50483 admin 4096 Apr 26 14:42 dir1/
drwxr-xr-x  3 50483 admin 4096 Apr 26 14:42 ./
[root@HOST2 ~1]$ id 50483
uid=509(50483) gid=500(admin) groups=500(admin)


I mounted the share on a linux client, but when I create a file I am
getting permission denied, not sure what I am missing here.
on client server

[root@HOST2 ~]# mount -t cifs -o
username=dituser,password=ditpasswd,rw,workgroup=MYGROUP  '//
10.10.3.43/50483' /mnt/cifs/
[root@HOST2 ~]# su - 50483
[50483@HOST2 ~]$ cd /mnt/cifs/dir1/
[50483@HOST2 dir1]$ touch file1
touch: cannot touch `file1': Permission denied
[50483@HOST2 dir1]$ id
uid=509(50483) gid=500(admin) groups=500(admin)

Thanks,
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Destination share larger than windows source

2012-04-27 Thread Mike Kelly
On Fri, Apr 20, 2012 at 11:57:31AM -0700, Jeremy Allison wrote:
> Ah. Try setting the per share parameter "allocation roundup size = 1024"
> (instead of the default 1mb).
> 
This resolved my problem!

Thanks!

Mike
(:

-- 
m...@piratehaven.org---The_glass_is_too_big
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Problem adding sambaGroupMapping

2012-04-27 Thread stefano malini

This is the output, still wrong:

ldapmodify: modify operation type is missing at line 2, entry 
"cn=Students,ou=Groups,dc=amahoro,dc=bi"

root@amahoro:~# ldapmodify -x -W -D 'cn=Manager,dc=amahoro,dc=bi'
Enter LDAP Password:
dn: cn=Students,ou=Groups,dc=amahoro,dc=bi
changetype: modify
add: objectClass
objectClass: posixGroup
add: objectClass
objectClass: sambaGroupMapping
add: sambaSID
sambaSID: S-1-5-21-251852451-2940789264-3475694606
add: sambaGroupType
sambaGroupType: 5

ldapmodify: wrong attributeType at line 5, entry 
"cn=Students,ou=Groups,dc=amahoro,dc=bi"



On 04/27/2012 06:54 PM, steve wrote:

On 27/04/12 18:38, stefano malini wrote:

Hi,




dn: cn=Students,ou=Groups,dc=amahoro,dc=bi
changetype: modify
add: objectClass
objectClass: posixGroup
objectClass: sambaGroupMapping
sambaSID: S-1-5-21-251852451-2940789264-3475694606
sambaGroupType: 5



I think you have to separate them:

changetype: modify
add: objectClass
objectClass: posixGroup
-
add: objectClass
objectClass: sambaGroupMapping
-
add: sambaSID
sambaSID: S-1-5-21-251852451-2940789264-3475694606
-
add: sambaGroupType
sambaGroupType: 5

Cheers,
Steve

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Problem adding sambaGroupMapping

2012-04-27 Thread steve

On 27/04/12 18:38, stefano malini wrote:

Hi,




dn: cn=Students,ou=Groups,dc=amahoro,dc=bi
changetype: modify
add: objectClass
objectClass: posixGroup
objectClass: sambaGroupMapping
sambaSID: S-1-5-21-251852451-2940789264-3475694606
sambaGroupType: 5



I think you have to separate them:

changetype: modify
add: objectClass
objectClass: posixGroup
-
add: objectClass
objectClass: sambaGroupMapping
-
add: sambaSID
sambaSID: S-1-5-21-251852451-2940789264-3475694606
-
add: sambaGroupType
sambaGroupType: 5

Cheers,
Steve
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Problem adding sambaGroupMapping

2012-04-27 Thread stefano malini

Hi,

i show the command-output trying to add the objectClass 
sambaGroupMapping to some entries that have posixGroup objectClass:


root@amahoro:~# ldapmodify -x -W -D 'cn=Manager,dc=amahoro,dc=bi'
Enter LDAP Password:
dn: cn=Students,ou=Groups,dc=amahoro,dc=bi
changetype: modify
add: objectClass
objectClass: posixGroup
objectClass: sambaGroupMapping
sambaSID: S-1-5-21-251852451-2940789264-3475694606
sambaGroupType: 5

ldapmodify: wrong attributeType at line 6, entry 
"cn=Students,ou=Groups,dc=amahoro,dc=bi"


I don't know what is wrong, sambaSID is a correct attribute. Do you have 
ideas?


Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Semantics of "smb ports = 0"

2012-04-27 Thread Nikolaus Rath
On 04/26/2012 09:13 PM, Jeremy Allison wrote:
> On Wed, Apr 25, 2012 at 10:04:30AM -0400, Nikolaus Rath wrote:
>> Hello,
>>
>> The qemu emulator has a feature to fork a samba instance for file
>> sharing with the emulated hosts. It communicates with smbd over stdin.
>> The generated configuration file contains a "smb ports = 0" directive to
>> prevent smbd from listening to any ports.
>>
>> Unfortunately, with at least Samba 3.6.4 this causes a segfault
>> instead:
>>
>> [0] vostro:/tmp/qemu-smb.6836-0# smbd -i -s smb.conf
>> Unable to setup corepath for smbd: Operation not permitted
>> smbd version 3.6.4 started.
>> Copyright Andrew Tridgell and the Samba Team 1992-2011
>> open_sockets_smbd: No sockets available to bind to.
>> ===
>> Abnormal server exit: open_sockets_smbd() failed
>> ===
>> BACKTRACE: 6 stack frames:
>>  #0 smbd(log_stack_trace+0x1a) [0x7fe50c14f8ba]
>>  #1 smbd(+0x6a0743) [0x7fe50c3bd743]
>>  #2 smbd(+0x6a0a41) [0x7fe50c3bda41]
>>  #3 smbd(main+0xa52) [0x7fe50be26d42]
>>  #4 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7fe508ac0ead]
>>  #5 smbd(+0x10a6b9) [0x7fe50be276b9]
>>
>>
>> Also, there is some confusion as to whether this option was actually
>> ever necessary.
>>
>> Could someone clarify if something like this is still needed, or if
>> Samba does the right think automatically? In the later case, has this
>> always been the case or was it introduced in a specific version (and the
>> "smb ports = 0" required before)?
> 
> In fack looking at the current code in v3-6-test, so long as
> you ensure that you run without the '-D' (deamonize) option,
> and fd 0 is a socket (we use getsockopt(fd, SOL_SOCKET, SO_TYPE...)
> to detect this) then we'll go into 'inetd' mode, which I
> think is what you want.

Yes. I am just wondering if this has always been the case, or if this is
a recent feature and smb ports = 0 may have been required in earlier
versions.


Bests,

   -Nikolaus

-- 
 »Time flies like an arrow, fruit flies like a Banana.«

  PGP fingerprint: 5B93 61F8 4EA2 E279 ABF6  02CF A9AD B7F8 AE4E 425C
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Semantics of "smb ports = 0"

2012-04-27 Thread Nikolaus Rath
On 04/26/2012 09:09 PM, Jeremy Allison wrote:
> On Wed, Apr 25, 2012 at 10:04:30AM -0400, Nikolaus Rath wrote:
>> Hello,
>>
>> The qemu emulator has a feature to fork a samba instance for file
>> sharing with the emulated hosts. It communicates with smbd over stdin.
>> The generated configuration file contains a "smb ports = 0" directive to
>> prevent smbd from listening to any ports.
>>
>> Unfortunately, with at least Samba 3.6.4 this causes a segfault
>> instead:
>>
>> [0] vostro:/tmp/qemu-smb.6836-0# smbd -i -s smb.conf
>> Unable to setup corepath for smbd: Operation not permitted
>> smbd version 3.6.4 started.
>> Copyright Andrew Tridgell and the Samba Team 1992-2011
>> open_sockets_smbd: No sockets available to bind to.
>> ===
>> Abnormal server exit: open_sockets_smbd() failed
>> ===
>> BACKTRACE: 6 stack frames:
>>  #0 smbd(log_stack_trace+0x1a) [0x7fe50c14f8ba]
>>  #1 smbd(+0x6a0743) [0x7fe50c3bd743]
>>  #2 smbd(+0x6a0a41) [0x7fe50c3bda41]
>>  #3 smbd(main+0xa52) [0x7fe50be26d42]
>>  #4 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7fe508ac0ead]
>>  #5 smbd(+0x10a6b9) [0x7fe50be276b9]
>>
>>
>> Also, there is some confusion as to whether this option was actually
>> ever necessary.
>>
>> Could someone clarify if something like this is still needed, or if
>> Samba does the right think automatically? In the later case, has this
>> always been the case or was it introduced in a specific version (and the
>> "smb ports = 0" required before)?
> 
> If you remove the "smb ports = 0" value does the started Samba
> bind to any interfaces ?

No, with Samba 3.6.4 it does not listen anywhere. So this has always
been the case?


Best,

   -Nikolaus

-- 
 »Time flies like an arrow, fruit flies like a Banana.«

  PGP fingerprint: 5B93 61F8 4EA2 E279 ABF6  02CF A9AD B7F8 AE4E 425C
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba