RE: [Samba] Performance Issues with GBit LAN
Hi Steffen >At first: Thanks for the response. >Here are the performance Measures of my Harddisks in the Server. As the >Harddisks are not connected to the Onboard IDE, they're not limited to 9 >MB/sec >/dev/sdb is the RAID 0, Connected to the PCI Raid Controller Card. The only >Share Samba provides is on the RAID, so performance should be enough. >/dev/sdb: >Timing buffered disk reads: 64 MB in 1.55 seconds = 41.29 MB/sec >(Redhat9.0, 256 SD-RAM, 300MHz PII, RTL8169 NIC, 2x Western Digital WD200JB >RAID 0) to my Windows-PC(AMD Athlon XP 1800+, 1024 MB DDR-RAM, WINXP PRO, >RTL8169 NIC, 2x Western Digital WD080JB RAID 0) Looking at the configuration of the server PC, you have a Realtek network card and an unspecified RAID card on a P2 300. I'm guessing that the machine is based on an LX or BX chipset with PC66 or PC100 ram. You have 66mhz bandwidth to play with in the PCI bus. You also have 66mhz FSB thanks to the PII 300 CPU. All the benchmarking you have done (both Iperf and hdparm) both test the two subsystems individually, not together. My initial guess is that your PCI bus and/or CPU cannot drive this system at its full potential. Look at the load average on the server during transfer. Secondly you are running Redhat 9 with a Realtek 8169. There were a number of issues with the stock Redhat 9 kernel versus a Realtek 8169, see here http://www.linuxquestions.org/questions/showthread.php?s=&threadid=14975 1&highlight=8169. In fact these users are reporting only 8-10mb throughput which is exactly what you are describing. My advice to you is to roll a custom kernel for your system (optimized for Pentium 2, raid and network drivers built into kernel instead of modules). Then perform a proper hard disk benchmark using Bonnie++ so you know what the disks are truly capable of (hdparm -t doesn't cut it in this respect). Then I would compare the difference between throughput serving from both your SCSI disk (sda) and RAID array with the benchmark data given by bonnie++. This may reveal a CPU or FSB bottleneck. Good luck and thanks Tom -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and NtBackup 3.0.7: Revenge of NtBackup
Hi all I noticed that 3.0.7 is out (another security release)... does this contain the fixes for NtBackup connecting to a share? Currently I have to use ftp to copy the data to the server before backing up... not ideal. Thanks in advance Tom Hibbert Technical Specialist Phone: +64-9-306-0230 Technical Helpdesk: +64-9-306-0234 Mobile: +64-274-307-784 Email: [EMAIL PROTECTED] Website: http://www.nsp.co.nz The information in this email and any attachments is confidential. This information may be subject to legal, professional, or other privilege. It must not be disclosed to any person without our authority. If you are not the intended recipient you are not authorised to and must not disclose, copy, distribute, or retain this message or any part of it. Please return this message to the sender immediately and delete any and all copies from your system. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] file permissions head-ache on Samba V3.0.4
Hi Paul, You probably want to ensure you have EXT3 ACL support on your server, if it isn't already.. not sure if Redhate Enterprise supports this out of the box. I've found that editing permissions from a Windows NT 4.0 box leads to acls being set incorrectly on Samba - use win2k or higher. You probably also want to chown the directories to root, as once the users specified in the 'admin users' directive in smb.conf authenticate to the server they will be mapped in as root (you can see this when you ps aux |grep smbd). I've found the best way to start permissions wise is with owner root:root and permissions 0777 on the directory, and from the ACL editor in Windows restrict permissions that way. Hope this helps Tom -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of PaulD Sent: Thursday, 26 August 2004 11:06 p.m. To: [EMAIL PROTECTED] Subject: [Samba] file permissions head-ache on Samba V3.0.4 Hi, I hope that this is a quick answer, as it's probably been answered many times before and I'm just missing a very minor setting in my config. I have just setup a samba server(ver 3.0.4) on a Redhat Enterprise Linux Box ES3. The box has been setup as a member of a Windows NT4 domain, it's to be used as a fileserver for users on the NT domain. I have configured samba to use domain security, and have winbind working correctly (I think!!) - I can get the domain users and groups to show from a 'wbinfo -u or wbinfo -g. I have been trying (unsucessfully) to configure the /home directory so that the domain admins here can manage the subfolders and the permissions, from the server administrator or management console on their NT / 2000 workstations. I have used the following commands on the /home volume so that the domain admins/users can have access to the volume: chown DOMAIN+Administrator /home chgrp "DOMAIN+Domain Users" /home (both commands threw back no errors) I'm guessing that the problem may down to the smb.conf file but I'm not sure what I'm missing.. would be grateful if someone could assist. TIA Yahoo! Messenger - Communicate instantly..."Ping" your friends today! Download Messenger Now http://uk.messenger.yahoo.com/download/index.html -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba vs NtBackup Round 3.0.5
I don't really want to break my nice Debian setup so I will try and debianise 3.0.5rc1 and post the reagents here. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bruno Gimenes Pereti Sent: Tuesday, 3 August 2004 12:23 a.m. To: [EMAIL PROTECTED] Subject: Re: [Samba] Samba vs NtBackup Round 3.0.5 >Hi Tom! Hi Jeremy! Hi list! >I don't know what exaclty caused the problem but when I upgraded to Samba >3.0.5rc1 my NTBackup started working again. I'll show what i'm using here >and maybe somebody can figure out why it helped to me and not to you. >I compiled Samba 3.0.5rc1 from source with this options: -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba vs NtBackup Round 3.0.5
Curses! -Original Message- From: Jeremy Allison [mailto:[EMAIL PROTECTED] Sent: Monday, 2 August 2004 6:31 p.m. To: Tom Hibbert Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Samba vs NtBackup Round 3.0.5 On Mon, Aug 02, 2004 at 02:28:31PM +1200, Tom Hibbert wrote: > Hi all, > > I experienced the same problem with 3.0.4 that Jeremy and Bruno were discussing - NTBackup unable being to connect to shares and erroring out with 'Access Denied'. I have today upgraded to 3.0.5 (using the Debian Woody packages) and that didn't fix the problem. Was the fix in 3.0.5r1 only applicable to 2000/2003 server? I am stuck in the dark ages of NT 4 here, maybe that is a problem... > > Any help would be very much appreciated as we are now 2 months without a backup :/ 3.0.5 doesn't contain the fix for this bug. 3.0.5 fixes 2 security bugs *only*. Not even obvious fixes like the NTbackup bigfix were included - this is to allow sites to know exactly what changes go into a security release. 3.0.6preXX will contain this fix. Sorry, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba vs NtBackup Round 3.0.5
Hi all, I experienced the same problem with 3.0.4 that Jeremy and Bruno were discussing - NTBackup unable being to connect to shares and erroring out with 'Access Denied'. I have today upgraded to 3.0.5 (using the Debian Woody packages) and that didn't fix the problem. Was the fix in 3.0.5r1 only applicable to 2000/2003 server? I am stuck in the dark ages of NT 4 here, maybe that is a problem... Any help would be very much appreciated as we are now 2 months without a backup :/ Tom Tom Hibbert Technical Specialist Phone: +64-9-306-0230 Technical Helpdesk: +64-9-306-0234 Mobile: +64-274-307-784 Email: [EMAIL PROTECTED] Website: http://www.nsp.co.nz The information in this email and any attachments is confidential. This information may be subject to legal, professional, or other privilege. It must not be disclosed to any person without our authority. If you are not the intended recipient you are not authorised to and must not disclose, copy, distribute, or retain this message or any part of it. Please return this message to the sender immediately and delete any and all copies from your system. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
Hi guys I have a Samba server running as a member server on an NT 4.0 domain, using winbind to bring users across. All Windows NT services are able to connect to the server, except for NTBackup. NTBackup can see the mapped drives but does not see anything inside them. Any ideas?s Tom Hibbert Technical Specialist Phone: +64-9-306-0230 Technical Helpdesk: +64-9-306-0234 Mobile: +64-274-307-784 Email: [EMAIL PROTECTED] Website: http://www.nsp.co.nz The information in this email and any attachments is confidential. This information may be subject to legal, professional, or other privilege. It must not be disclosed to any person without our authority. If you are not the intended recipient you are not authorised to and must not disclose, copy, distribute, or retain this message or any part of it. Please return this message to the sender immediately and delete any and all copies from your system. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.5 pre1 cannot ad windows xp machine to domain
There is a registry file included in the Samba distribution that disables the local policy entry requiring server side "sealing" of the join process. I believe Samba does not support this process yet so the only way to go is disable it through policy. The file is named something like "WinXPSignOrSeal.reg". Merge it, reboot, and you should be good to go (provided your mechanisms for creating machine accounts are working correctly). Tom -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Glenn Arnold Sent: Thursday, 10 June 2004 12:58 p.m. To: [EMAIL PROTECTED] Subject: [Samba] Samba 3.0.5 pre1 cannot ad windows xp machine to domain Hi all, I can add my W2K machines to the Samba 3.0.5pre1 with no problems, but I can not add my XP machines. Existing XP machines work fine, but when I try to add new XP machine it does not work. Here is my smb.conf and pc from the log.smbd Thanks -Glenn [global] netbios name = HSFNP01 workgroup = MTHCS security = user os level = 64 domain master = yes local master = yes preferred master = yes time server = yes ;passdb backend = tdbsam passdb backend = tdbsam unix extensions = yes encrypt passwords = yes domain logons = yes logon script = logon.bat logon drive = H: logon home = \\%L\%U logon path = socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 wins support = no wins server = 10.100.0.10 veto files = /*.eml/*.nws/riched20.dll/ lanman auth = yes add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupdel %g add user script = /usr/sbin/useradd -d /dev/null -g 502 -c 'Machine Account' -s /bin/false -M %u oplocks = yes load printers = yes printing = cups printer admin = Administrator, @ntadmin idmap uid = 15000-2 idmap gid = 15000-2 winbind separator = - winbind use default domain = No [netlogon] path = /smbsrvr/netlogon/scripts guest ok = yes write list = ntadmin [homes] comment = Home Directories browseable = no read only = no hide dot files = yes veto files = /*.mp3/*.exe/*.com/*.js/*.bat/*.cmd/*.wsh/*.lnk/*.scr/*.zip/.*/ dos file times = yes [C$] valid users = @root path = /smbsrvr read only = no create mask = 0770 directory mask = 0770 force group = +ntadmin force directory mode = 0770 dos file times = yes [Apps] read only = no path = /smbsrvr/Apps [Students] path = /smbsrvr/Students read only = no create mask = 0770 directory mask = 0770 force group = +HSSTUDENTS force create mode = 0770 force directory mode = 0770 dos filetimes = yes [AdminTools$] path = /smbsrvr/AdminTools read only = no create mask = 0770 directory mask = 0770 force group = Domain Administrators force create mode = 0770 force directory mode = 0770 dos filetimes = yes [printers] comment = All Printers path = /var/spool/samba printable = yes browseable = no guest ok = yes [print$] comment = Printer Drivers path = /var/lib/samba/drivers browseable = yes guest ok = no read only = yes write list = root, @ntadmin [%G] path = /home/groups/%G/ read only = no force group = %G [home$] writeable = yes write list = +ntadmin,@"MTHS-Domain Admins",@ntadmin,@root path = /home force directory mode = 0770 force group = +ntadmin dos file times = yes create mask = 0770 directory mask = 0770 valid users = +ntadmins,+root,@"MTHS-Domain Admins",@ntadmin,@root [ezaudit] path = /smbsrvr/ezaudit read only = no browseable = yes available = yes write list = +HSBUILDING,+HSSTAFF,+HSSTUDENTS admin users = +ntadmin,+wheel [HSGUIDANCE] path = /smbsrvr/Guidance writelist = +HSGUIDANCE read only = no create mask = 0770 directory mask = 0770 force group = +HSGUIDANCE force create mode = 0770 force directory mode = 0770 dos filetimes = yes [HS PRINCIPAL] path = /smbsrvr/hsprincipal writelist = +HSPRINCIPAL read only = no create mask = 0770 directory mask = 0770 force group = +HSPRINCIPAL force create mode = 0770 force directory mode = 0770 dos filetimes = yes [CIP] path = /smbsrvr/CIP writelist = +HSSTAFF read only = no create mask = 0770 directory mask = 0770 force group = +HSSTAFF force create mode = 0770 force directory mode = 0770 dos filetimes = yes [POISE ISSUES] path = /smbsrvr/Poise Issues writelist = +BUILDING SECRETARIES read only = no create mask = 0770 directory mask = 0770 force group = +BUILDING SECRETARIES force create mode = 0770 force directory mode = 0770 dos filetimes = yes [HSDISCIPLINE] path = /smbsrvr/Discipline writelist = +BUILDING SECRETARIES read only = no create mask = 0770 directory mask = 0770 force group = +BUILDING SECRETARIES force create mode = 0770 force directory mode = 0770 dos filetimes = yes [YEARBOOK] path = /smbsrvr/yearbook writelist = +HSYEARBOOK read only = no create mask = 0770 directory mask = 0770 force group = +HSYEARBOOK force create mode = 0770 force directory mode = 0770 dos filetimes = yes [INSTALL] comm
RE: [Samba] Reasonable Throughput
On 100mbit networks I regularly get speeds of 9.1MBps (Samba or FTP have equal speeds which is good). This is common even when using low end network cards like the Realtek 8139. Comparably with the same hardware and WinXP involved on at least one side of the link I get 5.4MBps. Last year I had the opportunity to do some real world throughput testing using some fairly high end gear. Both machines were connected with Intel Pro1000 network cards through a 3com switch. Using a P4 workstation running Windows 2000 and a Xeon server running Samba 3.0a I achieved a throughput of 440MBps, the theoretical maximum of the hardware (3ware Escalade raid controller). Using the same server and workstation I could only push 200MBps. This speed was achieved under the Airbox TV broadcast software sucking down multiple MPEG2 streams off the RAID array. I also ran Netbench to verify the throughput speeds. If you are experiencing lower throughput than this the first place to look is cabling. Also be wary of the Davicom and Macronix network cards as I often found specimens that were sub standard and could only push 5MBps. Also the switch is a contributing factor so try crossing over and comparing speeds. Tom -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Josh Skains Sent: Thursday, 10 June 2004 7:48 a.m. To: [EMAIL PROTECTED] Subject: [Samba] Reasonable Throughput One thing that it seems hard to define is what a reasonable expectation of throughput on a 100Mbps Ethernet that a samba server should be running at. Currently, I seem to be getting about 4.8Mbps for a single client (NetBench). There is a switch between the server and the client I was testing with. Thoughts? Thanks, JMS -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.3 breaks domain somehow.
I have a similar problem, except I get the error NT_STATUS_UNSUCCESSFUL checking the trust account password. Again downgrading to 3.0.2a worked fine. Looks like bit rot has creeped into the code between .2a and .3. Tom -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Dickson Sent: Friday, 7 May 2004 12:01 p.m. To: samba mailing list Subject: [Samba] Samba 3.0.3 breaks domain somehow. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 After upgrading from 3.0.2 to 3.0.3 in a Windows 2000 Native Domain environment, 9x clients can't connect and wbinfo -t doesn't work: bash-2.05a# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc0ac) Could not check secret Downgrading to 3.0.2 fixes this. I can get log files, but they don't seem to have anything very useful in them. Server: Windows 2000 Native Domain Client: Windows ME or Mac OS X smb.conf follows: #=== Global Settings = [global] printcap name = /etc/printcap load printers = no log file = /var/log/samba/log.%m max log size = 50 encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = no passwd program = /usr/bin/passwd min password length = 3 logon path = "" # override some defaults enhanced browsing = no map archive = no max connections = 1000 max smbd processes = 1000 follow symlinks = no username map = /etc/samba/smbusers winbind separator = + winbind enum users = yes winbind enum groups = yes template shell = /sbin/nologin template homedir = /dev/null # # smbv3.0+ # create mask = 0700 directory mask = 0700 directory security mask = 0700 # map acl inherit = yes inherit permissions = yes inherit acls = yes force group = nobody # Changable Global Settings == ~ password server = WIN2KNATIVE ~ winbind uid = 1-1 ~ map to guest = never ~ security = ads ~ realm = NATIVEDOMAIN.LOCAL ~ domain logons = no ~ server string = ~ workgroup = NATIVEDOMAIN ~ winbind gid = 1-1 ~ netbios name = inlab ~ admin users = "@NATIVEDOMAIN.LOCAL+Domain Admins" [terabyte] ~ path = /mnt/H00/terabyte ~ comment = terabyte ~ valid users = ~ read only = no ~ available = yes ~ admin users = ! ~ write list = Thank you! More random output: bash-2.05a# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc0ac) Could not check secret bash-2.05a# wbinfo --get-auth-user NATIVEDOMAIN.LOCAL+nasadmin%nas bash-2.05a# wbinfo -a NATIVEDOMAIN.LOCAL+nasadmin%nas plaintext password authentication failed error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc0ac) error messsage was: Named pipe not available Could not authenticate user NATIVEDOMAIN.LOCAL+nasadmin%nas with plaintext password challenge/response password authentication failed error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc0ac) error messsage was: Named pipe not available Could not authenticate user NATIVEDOMAIN.LOCAL+nasadmin with challenge/response wbinfo -u works fine, and connections from the windows 2000 CLIENT works, also, so kerberos tickets seem to be happy times and dates: net time ; date Thu May 6 17:04:56 2004 Thu May 6 17:04:37 PDT 2004 -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD4DBQFAmtHF2dxAfYNwANIRAomLAJdEM/PBdg8OA8m17gQP5QTIo5XtAKCNt6p7 wGxOx7PDN1WAVPNVbk5esg== =Cxcf -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
Hi all, I'm building a Linux application server to replace 98% of the windows workstations in an enterprise. I'm using Winbind to auth users logging into the server (through kdm/xdmcp) against the existing win2k AD PDC. There are more than 50 different login scripts for the different users and groups. Because this company has no in house Linux support I want to keep it as simple and easy as possible for their existing NT admin to work with the new application server, and I want him to be able to admin the login scripts the same way he has always done. The main thing that the login scripts are used for is mounting drives. So what I am thinking of doing is somehow downloading the login scripts when a user goes to log in, piping that through some fancy python and creating the links to the relevant shares on the relevant servers on their KDE desktop. The thing that I am stuck on is how to retrieve the name of the login script that should be run when a user logs in. Since I cannot find any information on how to do this I am thinking of talking directly to the PDC's LDAP and retrieving the record from there. Unless of course you Samba gurus have already implemented a way to do this easily and painlessly ;) Thanks in advance, Tom Hibbert Technical Specialist Phone: +64-9-306-0230 DDI: +64-9-306-0234 Mobile: +64-27-430-7784 Email: [EMAIL PROTECTED] Website: http://www.nsp.co.nz The information in this email and any attachments is confidential. This information may be subject to legal, professional, or other privilege. It must not be disclosed to any person without our authority. If you are not the intended recipient you are not authorised to and must not disclose, copy, distribute, or retain this message or any part of it. Please return this message to the sender immediately and delete any and all copies from your system. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Migrating from Samba 2.2 smbpasswd to Samba 3 LDAP
Hi there, Does anyone have any experience with this? I was wondering about importing data from a Samba 2.2 smbpasswd file to a Samba 2.2 style LDAP and then using some perl scripting to update the schemas to samba 3. However there isnt really much info about migrating user data and stuff from smbpasswd to LDAP at all.. Somewhere there must be a nice howto or something ;) Cheers Tom -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba, LDAP as active directory controller
Hey all, What I have been reading is all quite confusing. Can someone tell me if it is actually possible to replace a top level Active Directory server with a Samba+LDAP+Kerberos one, and at what loss of functionality? Thanks, Tom Hibbert Home: +649 815 1838 Obtain my GPG Key from: http://cryptocracy.hn.org/pubkey.txt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
