PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : Performance Problem Samba 2.2 und 3.x



masteryoda1047
27.07.05, 13:59
Hallo,

wir haben ein ekliges Performance Problem mit samba 2.2.x soiwe samba 3. (das sich allerdings die LDAP Daten vom samba 2.2 holt)

und zwar dauert der 1. Zugriff auf einen Samba Share 10-15 Sekunden. Sobald einmal darauf zugegriffen wurde, bleibts bis zum nächsten Reboot des Clients schnell so wie die üblichen Zugriffe auf Netzlaufwerke.

Jemand ne Idee in welcher Richtung das Problem zu suchen ist?


Achja: kennt jemand ne gute Adresse von einem kommerziellen Samba-Dienstleister ?

emba
27.07.05, 16:38
du musst dann schonmal den packetsniffer bei deinen spärlichen angaben hier anschmeißen

mein tipp: euer kabel ist brüchig und einige daten landen im mülleimer und nicht auf der anderen seite...

dienstleister -> sernet

greez

masteryoda1047
27.07.05, 17:51
danke für die Adresse,

welche Infos bräuchtest du denn alles?
naja hier mal die config vom PDC (2.2.8a):



[global]
log level = 1
log file = /var/log/samba/%m.log
ldap ssl = no
passwd chat debug = No
character set = ISO8859-15
passwd chat = *password* %n\n *password* %n\n *successfully*
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 SO_KEEPALIVE IPTOS_LOWDELAY
username map = /etc/samba/user.map
domain master = Yes
encrypt passwords = yes
ldap server = 127.0.0.1
passwd program = /usr/local/sbin/smbldap-passwd.pl -o %u
wins support = Yes
netbios name = SRVDATEN
netbios aliases = EDV
ldap port = 389
server string = Samba-PDC
time server = yes
logon script = logon.bat
ldap suffix = dc=test,dc=edu
unix password sync = yes
default service = global
workgroup = EDV
os level = 255
ldap admin dn = cn=Manager,dc=test,dc=edu
add user script = /usr/local/sbin/smbldap-useradd.pl -w %u
security=users
#security = DOMAIN
max log size = 100
domain admin group = @domadmin
domain logons = Yes
deadtime = 0
read raw = yes
write raw = yes
max xmit = 65535
getwd cache = yes
oplocks = yes



und hier die ausführliche Version von testparm:


[global]
coding system =
client code page = 850
code page directory = /usr/share/samba/codepages
workgroup = EDV
netbios name = SRVDATEN
netbios aliases = EDV
netbios scope =
server string = Samba-PDC
interfaces =
bind interfaces only = No
security = USER
encrypt passwords = Yes
update encrypted = No
allow trusted domains = Yes
hosts equiv =
min passwd length = 5
map to guest = Never
null passwords = No
obey pam restrictions = No
password server =
smb passwd file = /etc/samba/smbpasswd
root directory =
pam password change = No
passwd program = /usr/local/sbin/smbldap-passwd.pl -o %u
passwd chat = *password* %n\n *password* %n\n *successfully*
passwd chat debug = No
username map = /etc/samba/user.map
password level = 0
username level = 0
unix password sync = Yes
restrict anonymous = No
lanman auth = Yes
use rhosts = No
admin log = No
log level = 1
syslog = 1
syslog only = No
log file = /var/log/samba/%m.log
max log size = 100
timestamp logs = Yes
debug hires timestamp = No
debug pid = No
debug uid = No
protocol = NT1
large readwrite = Yes
max protocol = NT1
min protocol = CORE
read bmpx = No
read raw = Yes
write raw = Yes
acl compatibility =
nt smb support = Yes
nt pipe support = Yes
nt status support = Yes
server schannel = Auto
announce version = 4.9
announce as = NT
max mux = 50
max xmit = 65535
name resolve order = lmhosts host wins bcast
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = Yes
unix extensions = No
change notify timeout = 60
deadtime = 0
getwd cache = Yes
keepalive = 300
lpq cache time = 10
max smbd processes = 0
max disk size = 0
max open files = 10000
name cache timeout = 660
read size = 16384
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 SO_KEEPALIVE IPTOS_LOWDELAY
stat cache size = 50
use mmap = Yes
total print jobs = 0
load printers = Yes
printcap name = /etc/printcap
disable spoolss = No
enumports command =
addprinter command =
deleteprinter command =
show add printer wizard = Yes
os2 driver map =
strip dot = No
mangling method = hash
character set = ISO8859-15
mangled stack = 50
stat cache = Yes
domain admin group = @domadmin
domain guest group =
machine password timeout = 604800
add user script = /usr/local/sbin/smbldap-useradd.pl -w %u
delete user script =
logon script = logon.bat
logon path = \\%N\%U\profile
logon drive =
logon home = \\%N\%U
domain logons = Yes
os level = 255
lm announce = Auto
lm interval = 60
preferred master = Auto
local master = Yes
domain master = Yes
browse list = Yes
enhanced browsing = Yes
dns proxy = Yes
wins proxy = No
wins server =
wins support = Yes
wins hook =
kernel oplocks = Yes
lock spin count = 3
lock spin time = 10
oplock break wait time = 0
ldap server = 127.0.0.1
ldap port = 389
ldap suffix = dc=test,dc=edu
ldap filter = (&(uid=%u)(objectclass=sambaAccount))
ldap admin dn = cn=Manager,dc=test,dc=edu
ldap ssl = no
ldap del only sam attr = No
add share command =
change share command =
delete share command =
config file =
preload =
lock dir = /var/lib/samba
pid directory = /var/run/samba
utmp directory =
wtmp directory =
utmp = No
default service = global
message command =
dfree command =
valid chars =
remote announce =
remote browse sync =
socket address = 0.0.0.0
homedir map = auto.home
time offset = 0
NIS homedir = No
source environment =
panic action =
hide local users = No
host msdfs = No
winbind uid =
winbind gid =
template homedir = /home/%D/%U
template shell = /bin/false
winbind separator = \
winbind cache time = 15
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = No
comment =
path =
alternate permissions = No
username =
guest account = nobody
invalid users =
valid users =
admin users =
read list =
write list =
printer admin =
force user =
force group =
read only = Yes
create mask = 0744
force create mode = 00
security mask = 0777
force security mode = 00
directory mask = 0755
force directory mode = 00
directory security mask = 0777
force directory security mode = 00
force unknown acl user = 00
inherit permissions = No
inherit acls = No
guest only = No
guest ok = No
only user = No
hosts allow =
hosts deny =
status = Yes
nt acl support = Yes
profile acls = No
block size = 1024
max connections = 0
min print space = 0
strict allocate = No
strict sync = No
sync always = No
use sendfile = No
write cache size = 0
max print jobs = 1000
printable = No
postscript = No
printing = bsd
print command = lpr -r -P%p %s
lpq command = lpq -P%p
lprm command = lprm -P%p %j
lppause command =
lpresume command =
queuepause command =
queueresume command =
printer name =
use client driver = No
default devmode = No
printer driver =
printer driver file = /etc/samba/printers.def
printer driver location =
default case = lower
mangling char = ~
hide dot files = Yes
hide unreadable = No
delete veto files = No
veto files =
hide files =
veto oplock files =
map system = No
map hidden = No
map archive = Yes
mangled names = Yes
mangled map =
browseable = Yes
blocking locks = Yes
csc policy = manual
fake oplocks = No
locking = Yes
oplocks = Yes
level2 oplocks = Yes
oplock contention limit = 2
posix locking = Yes
strict locking = No
share modes = Yes
strict locking = No
share modes = Yes
copy =
include =
exec =
preexec close = No
postexec =
root preexec =
root preexec close = No
root postexec =
available = Yes
volume =
fstype = NTFS
set directory = No
wide links = Yes
follow symlinks = Yes
dont descend =
magic script =
magic output =
delete readonly = No
dos filemode = No
dos filetimes = No
dos filetime resolution = No
fake directory create times = No
vfs object =
vfs options =
msdfs root = No
msdfs proxy =


und hier mal ein Beispiel für ein Share:


[daten]
comment = Daten
path = /daten
read only = No
create mask = 0770
directory mask = 0770



irgendwas auffälliges dabei ? Die netzwerk-Parameter hab ich aus dem Samba-Buch on O'reilly entnommen. Die zu verändern bringt aber nicht wirklich viel. Auf der Kiste ist ein MTU Wert von 1500 eingestellt, vielliecht sollte man den mal auf 1404 setzen ?



*ratlos*

*sorry for monster-post*

emba
28.07.05, 08:11
ich glaub du solltest mal den log level höher setzen und für jede maschine ein eigenes log anlegen lassen

dann meldest du dich in der domäne an, löschst das logfile (echo "" >>logfile), mapst ein drive und schaust, wo der timeout entsteht

desweiteren könntest du noch einen packetsniffer wie ethereal einsetzen

als "außenstehender" ist es immer schwer zu sagen, an was solche timeouts liegen können
das kann von defekter hardware bis hin zu ACLs sein

greez