Re: [Samba] Samba4 consumes more CPU

2013-08-31 Thread Prema
Dear Andrew,

As per your suggestion , I have attached the gdb log of the samba and smbd
process log running in the single server mode.
Also when I noted in the perf top, libndr.so consumes the maximum cpu.
I noticed that it happens soon after sometime the samba process is started
and the CPU is filled up.
Since the samba process occupies 100% atleast two or more CPUs out of 8 CPU
, the clients are not able to get authenticate to the server.
Kindly go through the logs and suggest what can be done to lessen the CPU
consumption.



On Mon, Aug 12, 2013 at 11:45 AM, Andrew Bartlett wrote:

> On Sun, 2013-08-11 at 10:12 +0530, Prema wrote:
> >
> > Also one more point  I would like to clarify., what is the maximum
> > User limit that Samba4 as a DC supports.
> >
> > I read somewhere that , there is a proportion between the system RAM +
> > hard disk size and user limit accepted in Samba4.
> >
> > Is that true., and in that case, how many users can be supported by a
> > 8 GB RAM and 500 GB hard disk size.
> >
> >
> > Kindly clarify this , since we have around 6k+ users spreaded for 20
> > DCs.
>
> G'Day,
>
> There are a few things going on here:
>  - The CPU utilisation isn't normal, for any use case.  If you were
> loading your system up to the maximum number of objects, for example, it
> would be slower, but as incoming authentication drop of, it would
> decrease back to normal levels.   To track down this, we need to work
> out what routine it consuing the CPU time, say with the linux 'perf'
> tools.  At the very least, attach to the process spinning with 'gdb -p
> ' and get me the output of 'bt full', in the hope that this
> indicates the spinning routine.
>
>  - Samba does have limits in terms of the number of users it can
> currently efficiently serve, but that isn't at the 6000 user level, as
> far as we are aware
>
> Also you need to set your expectations regarding when I might be able to
> assist you:
>  - Please send all mail, unless confidential to the
> samba@lists.samba.org mailing list.  That way, others can help you.
> You may send it to me if you like, but ensure you always also send it to
> the list.  This also means that others can learn from any answers I
> give, rather than them staying private, and others can help you when I'm
> not available.
>  - While I work on Samba, and I'm very grateful to my employers for the
> time I'm able to spend on it, but you need to give us all a reasonable
> time to reply, understanding that we may not work the same hours and
> days that you do.  For example, I'll be on leave most of this coming
> week.
>
> Finally, a crash in Samba, and this is essentially what you describe, is
> serious, and I certainly understand your worry.
>
> Andrew Bartlett
>
> --
> Andrew Bartlett
> http://samba.org/~abartlet/
> Authentication Developer, Samba Team   http://samba.org
> Samba Developer, Catalyst IT   http://catalyst.net.nz
>
>
>


-- 
Regards.,
Prema S
CDAC
Chennai
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Restricting Sites and services in Samba4 DC

2013-08-31 Thread Prema
Hi all,

I want to restrict the Samba4 DC to take the replication from only one
server among 30 servers in my network. So i joined the samba server with
--site option

samba-tool domain join test.local DC -Usuperadmin --site=win-pdc
--realm=test.local

But after joining the Sites and services entry for Samba DC automatically
generated all the 30 servers.
Deleting all the entries and manually creating only one server is of no
use. With in few minutes all the servers are getting generated again.
How to solve this issue in samba4.

-- 
Regards.,
Prema S
CDAC
Chennai
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Problem in Windows Dc replication due to Samba4

2013-08-31 Thread Prema
Hi all,

 Ours is a setup of 30 Windows multi master DCs currently running with
different servers (windows 2003 , Windows 2008 , Windows 2008 R2) . Till
now it is running there is no issues with replication among the Winodws
servers.
Now recently i joined a Samba4 DC in the network as a replicating multi
master DC. Everything goes fine for few hours but suddenly i got errors in
Windows DC.
The Windows 2008 R2 servers can replicate only among themselves and it
cannot replicate to Windows 2003 and Windows 2008 servers and Samba server.
The error code and solution is given as
http://support.microsoft.com/kb/837932
But none of the solutions proposed in this page works.

Has anybody comes across this issue before?I dont know whether  this issue
has arised really due to Samba4 Dc or how it would have arised. Infact i
dont want a solution for Windows DC, but want to know whether Samba can be
the root cause for this. Because till the moment i start the samba server ,
this error was not there. This has really became big headache and somebody
kindly throw some lights on this issue.




-- 
Regards.,
Prema S
CDAC
Chennai
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Problem in Samba server Replication

2013-07-26 Thread Prema
Dear all,

I have a setup of  MultiDCs currently running in Windows 2008 R2 .
Now I have successfully  joined  a Samba4 DC (gt version) with my Windows
DC. Replication works perfectly from Windows Dc to Samba DC., but the other
way is not working.
When i add a user in samba dc it is not getting replicated to Windows DC.
"samba-tool drs showrepl" shows "0 consecutive failures" and when i force
for a replication from samba Dc to any of my Windows DC from "Sites and
Services" the system just hangs.
Also  the NTDS replication settings lists all the 20 Windows DC. Even if i
delete them and keep only 2 servers for replication, within few mins it
refreshes and  shows all the 20 servers again.

How can i restrict the replication servers list in samba and how to achieve
a two way replication in samba.

More info available if needed.

-- 
Regards.,
Prema S
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Syncing Samba4 with AD DC

2013-05-29 Thread Prema
Hi all,

I have a running Active directory DC in windows server 2008 having several
child domains and I have both Linux and Windows clients joining to the
domain.
Now I am going to setup a Samba4 DC along with the parent Active directory
DC . I want it to be a replicating server Dc from Windows.
How can i do this effectively in samba4.

-- 
Regards.,
Prema S
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] User policy in samba

2013-05-22 Thread Prema
Hi,

Is it possible to set User specific password policies in Samba4.
Say I wan to set the Password length of a particular user to be "7" where
as my domain policy is "10"

How to do this in samba4?

-- 
Regards.,
Prema S
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba4 - joining linux clients to Samba subdomain

2013-05-09 Thread Prema
Dear all ,

We have installed and  setup Samba4 as Primary domain controller(pdc) in
Debian based Linux OS. I am able to join a debian machine as a client using
likewise-gui (PBIS) in the PDC.
Realm: cdacsamba.lan
Domain: cdacsamba
Similarly I have another setup of Samba4 (Secondary domain controller -
sdc1) currently running independently with debian machines as clients.
Realm: sub1.cdacsamba.lan
domain: sub1

Now i am trying to join the sdc1 as a subdomain of pdc. The requirement is
, the policies what ever i put in pdc should get synced with sdc, but the
local policies i put in sdc should not be sent back to pdc.

I tried to do the above setup using "samba-tool domain join" as DC , but
after joining I cant join and authenticate any clients to my sdc.
I also tried joining another machine to join pdc without provisioning   but
that also in vain.

Kindly guide me how to proceed and how i can join or create subdomains in
samba4 and the method of authenticating clients in a subdomain.

Thanks in advance.
-- 
Regards.,
Prema S
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba