Re: [Samba] Samba 3.0.11rc1 Available for Download

2005-02-02 Thread David Landgren
On Tue, 01 Feb 2005 15:47:22 -0600, Gerald (Jerry) Carter
[EMAIL PROTECTED] wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 David Landgren wrote:
 
 | # time smbclient //jersey/dsvi -U david%foobar -c 'exit'
 | creating lame upcase table
 | creating lame lowcase table
 | Domain=[BPINET] OS=[Unix] Server=[Samba 3.0.11rc1]
 |
 | real0m8.817s
 | user0m0.180s
 | sys 0m0.020s
 |
 
 David,  I'm not seeing anything like that here.
 
 time bin/smbclient //queso/public -U jerry%foo -W VALE -c 'exit'
 Domain=[VALE] OS=[Unix] Server=[Samba 3.0.11rc1]
 
 real0m0.386s
 user0m0.027s
 sys 0m0.005s
 
 This is a on linux 2.6 box.  Maybe a name resolution issue?
 Have you looked on the server for dns timeouts or wins
 server timeouts?

This is Solaris 2.9. Name resolution is fine (ns0 is my WINS server).
# time ./nmblookup -RU ns0 jersey
querying jersey on 0.0.0.0
172.17.0.101 jersey00

real0m0.167s
user0m0.150s
sys 0m0.010s

DNS performance is correct..Solaris lacks a 'host' command by default
which is a bit of a hassle, but watching the logs of the DNS server
shows that requests are handled in milliseconds.

You raised an eyebrow at security = domain in my config. It's been
that way since 2.2.8 and (poor) performance was never sufficiently
noticeable to warrant benchmarking.

Other servers are running Linux and have security = user and the
following params for querying the LDAP server directly:

passdb backend = ldapsam:ldap://ldap-master.example.com;
ldap suffix = dc=bpinet,dc=com
ldap admin dn = cn=Manager,dc=example,dc=com
ldap passwd sync = yes
ldap delete dn = no
ldap user suffix = ou=People
ldap machine suffix = ou=Computers
ldap group suffix = ou=Group
 
When I use this in the config, authenticated shares don't work, and
the following is logged:

[2005/02/02 08:10:32, 0] passdb/pdb_interface.c:make_pdb_methods_name(684)
  No builtin nor plugin backend for ldapsam found

I didn't compile --with-ldapsam. From what I read in the archives, I
thought it was a compatibility shim for 2.x ldap backends, and that
with nsswitch things would Just Work. Now that I look more carefully
at similar problems, I think I do have to compile --with-ldapsam.
Which means I can then use the above params, which hopefully means the
performance issues will sort themselves out. Does that sound
reasonable?

Thanks,
David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.11rc1 Available for Download

2005-02-02 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 2 Feb 2005, David Landgren wrote:

 You raised an eyebrow at security = domain in my config. It's been that 
 way since 2.2.8 and (poor) performance was never sufficiently noticeable 
 to warrant benchmarking.

No.  I was just trying to understand the configuration that you were 
working with.  What we need to find out is whether the delay is on the 
server or in smbclient.  I would look at a level 4 log on smbd with 'debug 
timestamp = yes' and look for any obvious gaps.  Trying to narrow down
to a specific code path.





cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc 
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFCAPYrIR7qMdg1EfYRAoL7AKC+JSFWheeMWqZmiYr0Gx9/e/kD3ACgzch4
dC8UpB86DDkgM/VrVL5LSME=
=UFs8
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.11rc1 Available for Download

2005-02-01 Thread David Landgren
On Mon, 31 Jan 2005 16:31:28 -0600, Gerald (Jerry) Carter
[EMAIL PROTECTED] wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 David Landgren wrote:
 
 | Not sure where those lame tables are coming from, but whatever. This
 | is on a machine with no-one else online, debug level set to zero.
 | Turning the debug level up doesn't show anything in particular. The
 | user and system is pretty negligeable anyway. Authentication is done
 | via ldap on another server (running Samba 3.0.10) on the same network
 | segment.
 
 So are you running with  security = user or security = domain here ?
 I think the former

no, domain: validation is being done by passing to it off the PDC or
BDC. (But if that means I'm missing something else from the config
then feel free to thump me :) In fact, security = user does not work.
I can't switch over right now to catch the error message, but in
essence, non-guest shares no longer authenticate and everyone is
locked out.

 Try testing the times for 'getent passwd david'.  How
 responsive it the LDAP server ?

Instantaneous:

# time getent passwd david
david::1001:513:david sys acct:/home/david:/bin/bash

real0m0.014s
user0m0.000s
sys 0m0.010s

David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.11rc1 Available for Download

2005-02-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
David Landgren wrote:
| # time smbclient //jersey/dsvi -U david%foobar -c 'exit'
| creating lame upcase table
| creating lame lowcase table
| Domain=[BPINET] OS=[Unix] Server=[Samba 3.0.11rc1]
|
| real0m8.817s
| user0m0.180s
| sys 0m0.020s
|
David,  I'm not seeing anything like that here.
time bin/smbclient //queso/public -U jerry%foo -W VALE -c 'exit'
Domain=[VALE] OS=[Unix] Server=[Samba 3.0.11rc1]
real0m0.386s
user0m0.027s
sys 0m0.005s
This is a on linux 2.6 box.  Maybe a name resolution issue?
Have you looked on the server for dns timeouts or wins
server timeouts?

cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFB//jpIR7qMdg1EfYRAgLyAKDQcvcZr8qyzfky9noJLWaA/rBlSwCdGRMn
uqV9vt8h56pZswHNxmf65Us=
=wkOn
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.11rc1 Available for Download

2005-02-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Thomas Bork wrote:
| I'm waiting for one last feedback about this. Hopefully
| it will come this week.
|
| If it is really fixed - what was the crucially change
| in 3.0.11rc1?
I think it might have been a culmination of fixes.
Still testing.

cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCAAz6IR7qMdg1EfYRAjl6AJ93s1sdHxqh96e8bxu5UksnNfADnQCfU2NA
JJ8UkkaTLqbcUqPOYDOPTxs=
=L3ly
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.11rc1 Available for Download

2005-01-31 Thread David Landgren
On Fri, 28 Jan 2005 15:15:07 -0600, Gerald Carter [EMAIL PROTECTED] wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 This is a release candidate of the Samba 3.0.11 code base
 and is provided for testing only.  While close to the final
 stable release, this snapshot is *not* intended for production
 servers.  If all goes well, this this version will become the
 final 3.0.11 stable release (with possible minor changes).
 
 Common bugs fixed in 3.0.11rc1 include:

Light testing here appears to indicate that it has fixed the bug of
ever-increasing number of documents appearing in Printer job windows.

thanks,
David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.11rc1 Available for Download

2005-01-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
David Landgren wrote:
|Common bugs fixed in 3.0.11rc1 include:
|
|
| Light testing here appears to indicate that it has fixed the
| bug of ever-increasing number of documents appearing
| in Printer job windows.
kewl.  Thanks for the feedback.
We're working towards 3.0.11-final at the end of this week if
all continues to goes well.  We did just fix a a problem with
wbinfo -m and security = ads this morning though.  Hopefully
just a few more small patches.

cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFB/oZ1IR7qMdg1EfYRAuPQAJ9x5MgNFNDEO54RJcYYbD1NfzoA7gCePRTC
iEah7plkgZUoLtJ15iFSBxo=
=2QJP
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.11rc1 Available for Download

2005-01-31 Thread Thomas Bork
Gerald (Jerry) Carter wrote:
| Light testing here appears to indicate that it has fixed the
| bug of ever-increasing number of documents appearing
| in Printer job windows.
kewl.  Thanks for the feedback.
I'm waiting for one last feedback about this. Hopefully it will come 
this week.

If it is really fixed - what was the crucially change in 3.0.11rc1?
der tom
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.11rc1 Available for Download

2005-01-31 Thread David Landgren
On Mon, 31 Jan 2005 13:26:45 -0600, Gerald (Jerry) Carter
[EMAIL PROTECTED] wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 David Landgren wrote:
 
 |Common bugs fixed in 3.0.11rc1 include:
 |
 |
 | Light testing here appears to indicate that it has fixed the
 | bug of ever-increasing number of documents appearing
 | in Printer job windows.
 
 kewl.  Thanks for the feedback.
 
 We're working towards 3.0.11-final at the end of this week if
 all continues to goes well.  We did just fix a a problem with
 wbinfo -m and security = ads this morning though.  Hopefully
 just a few more small patches.

Me again. Don't know if this is related, but I'm experiencing extreme
slowness in session setups. Doing an smbclient on localhost (ok, so it
*is* Solaris, but all the same...)

# time smbclient //jersey/dsvi -U david%foobar -c 'exit'
creating lame upcase table
creating lame lowcase table
Domain=[BPINET] OS=[Unix] Server=[Samba 3.0.11rc1]

real0m8.817s
user0m0.180s
sys 0m0.020s

Not sure where those lame tables are coming from, but whatever. This
is on a machine with no-one else online, debug level set to zero.
Turning the debug level up doesn't show anything in particular. The
user and system is pretty negligeable anyway. Authentication is done
via ldap on another server (running Samba 3.0.10) on the same network
segment.

I've cut the global section down to

[global]
unix charset = CP850
workgroup = BPINET
server string = jersey
security = DOMAIN
log file = /var/log/samba/%m.log
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
preferred master = No
domain master = No
wins server = 172.17.0.8
hide dot files = No

Don't know if I've left something crucial out, or done something silly
with what's left, but I'm at a bit of a loss as to why this is
occurring. Any clues will be gratefully received, otherwise I expect I
shall hear a lot of users moaning tomorrow.

Thanks,
David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.11rc1 Available for Download

2005-01-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
David Landgren wrote:
| Not sure where those lame tables are coming from, but whatever. This
| is on a machine with no-one else online, debug level set to zero.
| Turning the debug level up doesn't show anything in particular. The
| user and system is pretty negligeable anyway. Authentication is done
| via ldap on another server (running Samba 3.0.10) on the same network
| segment.
So are you running with  security = user or security = domain here ?
I think the former
Try testing the times for 'getent passwd david'.  How
responsive it the LDAP server ?

cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFB/rHAIR7qMdg1EfYRAr98AKC8+vieIj2Vj6BOjdhOxsfnIsdhsQCfexlu
jPwFxyG1nuEjQn9BQDOn99Q=
=1PhM
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.11rc1 Available for Download

2005-01-28 Thread Gerald Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
This is a release candidate of the Samba 3.0.11 code base
and is provided for testing only.  While close to the final
stable release, this snapshot is *not* intended for production
servers.  If all goes well, this this version will become the
final 3.0.11 stable release (with possible minor changes).
Common bugs fixed in 3.0.11rc1 include:
~  o Crash in smbd when using CUPS printing.
~  o Parsing error of other SIDs included in the
~user_info_3 structure returned from domain
~controllers.
Please note that documentation for 'net rpc rights' has been
included in the Samba-HOWTO-Collection distributed with this
release.
Download Details
- 
The uncompressed tarball and patch file have been signed
using GnuPG (ID F17F9772).  The source code and release
notes can be downloaded from:
http://download.samba.org/samba/ftp/rc/
Binary packages are available at
http://download.samba.org/samba/ftp/Binary_Packages/
Our Code, Our Bugs, Our Responsibility.
(https://bugzilla.samba.org/)
--Enjoy
The Samba Team


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFB+qtbIR7qMdg1EfYRAihYAKCO/MlqQO9UgF34hdpjUgJRkzjWNACgkVBv
feCEQhUspbq5NN0H1S1+6gQ=
=ef/T
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba