Hi I updated my samba server to 4.9 After that I had problem with starting samba an found this tred: https://pagure.io/freeipa/issue/7705 I add user mapping net groupmap add sid=S-1-5-32-546 unixgroup=nobody type=builtin and samba works
But now samba is very-very-very slow!
Some operations, like copy big file, ar normal, other - open dirs or create new files - very slow.
Any ideas? Wat can I do?
On ma, 28 loka 2019, Николай Савельев via FreeIPA-users wrote:
Hi I updated my samba server to 4.9 After that I had problem with starting samba an found this tred: https://pagure.io/freeipa/issue/7705 I add user mapping net groupmap add sid=S-1-5-32-546 unixgroup=nobody type=builtin and samba works
But now samba is very-very-very slow!
Some operations, like copy big file, ar normal, other - open dirs or create new files - very slow.
Any ideas? Wat can I do?
Start by describing you configuration. What did you upgrade, what is your actual set up, then show your logs that demonstrate slowness. There is no way to help without some objective data.
In general, upgrading separate components is not really recommended. The issue you pointed to required a number of changes on IPA side as well.
28.10.2019, 16:05, "Alexander Bokovoy" abokovoy@redhat.com:
On ma, 28 loka 2019, Николай Савельев via FreeIPA-users wrote:
Hi I updated my samba server to 4.9 After that I had problem with starting samba an found this tred: https://pagure.io/freeipa/issue/7705 I add user mapping net groupmap add sid=S-1-5-32-546 unixgroup=nobody type=builtin and samba works
But now samba is very-very-very slow!
Some operations, like copy big file, ar normal, other - open dirs or create new files - very slow.
Any ideas? Wat can I do?
Start by describing you configuration. What did you upgrade, what is your actual set up, then show your logs that demonstrate slowness. There is no way to help without some objective data.
In general, upgrading separate components is not really recommended. The issue you pointed to required a number of changes on IPA side as well.
-- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland
My smb.conf
[global] workgroup = FS security = user realm = FS.LAN dedicated keytab file = FILE:/etc/samba/samba.keytab kerberos method = dedicated keytab log file = /var/log/samba/log.%m
[common] comment = Обменник browseable = yes path = /media/750/common guest ok = yes create mask = 0666 directory mask = 2777 read only = no
All packages were update to newest in centos repo.
This server is into ipa domain. Ipa version - 4.6.5
I dont know how can I make log slowness. For example, to open dir i should spend about 5 seconds. For open or save file - same time.
On ma, 28 loka 2019, Николай Савельев wrote:
28.10.2019, 16:05, "Alexander Bokovoy" abokovoy@redhat.com:
On ma, 28 loka 2019, Николай Савельев via FreeIPA-users wrote:
Hi I updated my samba server to 4.9 After that I had problem with starting samba an found this tred: https://pagure.io/freeipa/issue/7705 I add user mapping net groupmap add sid=S-1-5-32-546 unixgroup=nobody type=builtin and samba works
But now samba is very-very-very slow!
Some operations, like copy big file, ar normal, other - open dirs or create new files - very slow.
Any ideas? Wat can I do?
Start by describing you configuration. What did you upgrade, what is your actual set up, then show your logs that demonstrate slowness. There is no way to help without some objective data.
In general, upgrading separate components is not really recommended. The issue you pointed to required a number of changes on IPA side as well.
My smb.conf
[global] workgroup = FS security = user realm = FS.LAN dedicated keytab file = FILE:/etc/samba/samba.keytab kerberos method = dedicated keytab log file = /var/log/samba/log.%m
[common] comment = Обменник browseable = yes path = /media/750/common guest ok = yes create mask = 0666 directory mask = 2777 read only = no
All packages were update to newest in centos repo.
This server is into ipa domain. Ipa version - 4.6.5
I dont know how can I make log slowness. For example, to open dir i should spend about 5 seconds. For open or save file - same time.
So, this is, strictly speaking, is incorrect configuration for anything enrolled into IPA domain. This is a single server setup, not really enrolled into anything. It misses idmap configuration, defaulting to tdbsam use. And I bet that your tdbsam database is empty.
Also, do you run winbindd? You should be using it for any non-standalone configuration or otherwise you'll incur a lot of slowdown because Samba removed all fall back code and now enforces use of winbindd.
You may want to read https://github.com/freeipa/freeipa/blob/master/doc/designs/adtrust/samba-dom... and https://github.com/freeipa/freeipa/blob/master/doc/designs/adtrust/samba-dom... for some details on how Samba domain member would be setup with FreeIPA 4.8+. This would not work for you fully (there are changes on IPA master that aren't existing in versions before 4.8.1 yet) but you can pick up the configuration as described in step (6) of samba-domain-member.md.
Thank you for help! I read this documentation, its very intrasted and helpful.
But this is a bit complicated for me. In the end I just downgrade mys samba to 4.8 It works fine! Tanks!
28.10.2019, 16:36, "Alexander Bokovoy" abokovoy@redhat.com:
On ma, 28 loka 2019, Николай Савельев wrote:
28.10.2019, 16:05, "Alexander Bokovoy" abokovoy@redhat.com:
On ma, 28 loka 2019, Николай Савельев via FreeIPA-users wrote:
Hi I updated my samba server to 4.9 After that I had problem with starting samba an found this tred: https://pagure.io/freeipa/issue/7705 I add user mapping net groupmap add sid=S-1-5-32-546 unixgroup=nobody type=builtin and samba works
But now samba is very-very-very slow!
Some operations, like copy big file, ar normal, other - open dirs or create new files - very slow.
Any ideas? Wat can I do?
Start by describing you configuration. What did you upgrade, what is your actual set up, then show your logs that demonstrate slowness. There is no way to help without some objective data.
In general, upgrading separate components is not really recommended. The issue you pointed to required a number of changes on IPA side as well.
My smb.conf
[global] workgroup = FS security = user realm = FS.LAN dedicated keytab file = FILE:/etc/samba/samba.keytab kerberos method = dedicated keytab log file = /var/log/samba/log.%m
[common] comment = Обменник browseable = yes path = /media/750/common guest ok = yes create mask = 0666 directory mask = 2777 read only = no
All packages were update to newest in centos repo.
This server is into ipa domain. Ipa version - 4.6.5
I dont know how can I make log slowness. For example, to open dir i should spend about 5 seconds. For open or save file - same time.
So, this is, strictly speaking, is incorrect configuration for anything enrolled into IPA domain. This is a single server setup, not really enrolled into anything. It misses idmap configuration, defaulting to tdbsam use. And I bet that your tdbsam database is empty.
Also, do you run winbindd? You should be using it for any non-standalone configuration or otherwise you'll incur a lot of slowdown because Samba removed all fall back code and now enforces use of winbindd.
You may want to read https://github.com/freeipa/freeipa/blob/master/doc/designs/adtrust/samba-dom... and https://github.com/freeipa/freeipa/blob/master/doc/designs/adtrust/samba-dom... for some details on how Samba domain member would be setup with FreeIPA 4.8+. This would not work for you fully (there are changes on IPA master that aren't existing in versions before 4.8.1 yet) but you can pick up the configuration as described in step (6) of samba-domain-member.md.
-- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland
freeipa-users@lists.fedorahosted.org
-
Alexander Bokovoy -
Николай Савельев