Re: [Samba] Winbindd has still bottlenecks when used with interdomain trusts.

2007-03-09 Thread Volker Lendecke
On Thu, Mar 08, 2007 at 11:24:10PM +0100, Harald Strack wrote: > Do you think it would be good idea to work on an parallelized > improvement of winbindd for these > check_ntlm_passwod calls? Sure, it would be an improvement. But due to the nature of the protocol this is not possible against a Wind

Re: [Samba] Winbindd has still bottlenecks when used with interdomain trusts.

2007-03-08 Thread Harald Strack
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I am already making tests with samba 3.0.25pre1 but because of this core dump problem, I tell you more about my stuff concerning the older samba versions, because I think there is a main design problem in winbindd. > > So you basically want the ap

Re: [Samba] Winbindd has still bottlenecks when used with interdomain trusts.

2007-03-02 Thread Harald Strack
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Harald Strack wrote: > > 2 My second (more reasonable) try was with the new idmap configuration. But I could not test it, since I do not know, how to set the password for > > idmap config RZ: ldap_user_dn = ... > > smbpasswd -w does not work for this p

Re: [Samba] Winbindd has still bottlenecks when used with interdomain trusts.

2007-03-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Harald Strack wrote: > Hi Jerry & Volker, > > thank you for your tips! > > First I want to explain you my initial problem on Detail, so that you > see what calls are causing timeouts when they appear in a huge amount. > > The following log output fr

Re: [Samba] Winbindd has still bottlenecks when used with interdomain trusts.

2007-03-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Volker Lendecke wrote: > My guess is that your are hit by us not yet having a > negative cache for idmapping. With 3.0.25 the id mapping > has been rewritten, and it does include a negative cache. > Maybe you could try the just released pre1 (not yet

Re: [Samba] Winbindd has still bottlenecks when used with interdomain trusts.

2007-03-01 Thread Volker Lendecke
On Wed, Feb 28, 2007 at 11:55:00PM +0100, Harald Strack wrote: > > > That's the "patch" for samba 3.0.14a: > > - --- ./source/sam/idmap_ldap.c 2005-03-11 14:47:05.0 +0100 > +++ ../samba-3.0.14a-p2/source/sam/idmap_ldap.c 2005-11-28 > 23:41:15.0 +0100 > @@ -497,7 +497,8 @@ >

Re: [Samba] Winbindd has still bottlenecks when used with interdomain trusts.

2007-03-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Harald Strack wrote: > The worker is simple too busy... Is there a > possibility to fork multiple workers > for a domain trust? E.g. sth. like this in So you basically want the apache prefork model to be able to have a poll of children to answer app

Re: [Samba] Winbindd has still bottlenecks when used with interdomain trusts.

2007-02-28 Thread Harald Strack
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good evening Volker, great to get an answer from YOU! > > Yes. The async stuff in Winbind is to enable parallel > operations to different trusted domains. Each domain is > serialized still. > I understand. Hm, that's bad for me.. > So the login as su

Re: [Samba] Winbindd has still bottlenecks when used with interdomain trusts.

2007-02-28 Thread Volker Lendecke
On Wed, Feb 28, 2007 at 10:16:32PM +0100, Harald Strack wrote: > The TCP connection between the central PDC and the department PDC > (winbindd) seems to be still a bottleneck. Is this right? What can I do? > Any help or comment on this issue is very very welcome! Yes. The async stuff in Winbind is

[Samba] Winbindd has still bottlenecks when used with interdomain trusts.

2007-02-28 Thread Harald Strack
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Greetings! I run samba 3 since several years in a domain with more than 1 users and multiple departments. We have a central Domain running a PDC and some domains in the departments. The domains in the departments are connected to the central domai