PDC: random problems, especially NETLOGON script not always loading

Debian Latest stable.
Linux newton 2.6.18-4-686
Samba 3.0.24
PDC

3Com 3812 Gigabit switch (connection between WinXP client & server)
Others connect through 3Com 3225 100 Mbit -> 3Com 3812 -> Server

Windows XP SP2 fully updated.
F-Secure client security (look down for firewall settings)

In advance, thanks for reading this. Any suggestions are welcome!

I'm having a hard time here. I read a whole lot, browses, searched. I try  
to provide as much info as possible but if you need more, Let me know.
The main problem is the "randomness". Or atleast it looks random for me.

People with mapped shares working for +1 year don't have connection  
problems. So most of the time it seems to work fine.
But i really want to troubleshoot & get all errors out.

I guess the problem i describe next also is the cause of random Roaming  
profile problems, but lets not focus on that part, too many random factors  
in my opinion. And they were only a part of the test. It might work if i  
get this problem solved.

I got a script in the netlogon mapping drives dynamically depending on  
groups.
I don't want them permanent. I don't want a workaround!

Aplication slow after migration

    Hi, everybody!

I have been using samab on Debian for years and I have recently migrated 
my file server from version 3.0.14a-3sarge2 to 3.0.24-6etch4.
One or our applications stores its data in a shared folder. This data is 
distributed in over 29000 files of about 1k-40k and is so much slower 
when it runs on the new server.

I have thoroughly revised both smb.conf files, but can't see significant 
differences. I have read them so much that probably I'm already obfuscated.

I have tuned socket options, but can't see any improvement.
Any ideas?

Thanks in advance

--

-- 
==============================
Felipe Martínez Hermo
felipe <at> galicia.ugt.org
fmartinez <at> galicia.ugt.org
==============================
Servicios Informáticos
UGT Galicia
informatica <at> galicia.ugt.org
ugtgalicia <at> gmail.com
============================== 

New server max. Version 3.0.24-6etch4. 	Old server clarence. Version 

Re: Aplication slow after migration

Felipe Martinez Hermo wrote:
>
>
>
>    Hi, everybody!
>
> I have been using samab on Debian for years and I have recently 
> migrated my file server from version 3.0.14a-3sarge2 to 3.0.24-6etch4.
> One or our applications stores its data in a shared folder. This data 
> is distributed in over 29000 files of about 1k-40k and is so much 
> slower when it runs on the new server.
>
> I have thoroughly revised both smb.conf files, but can't see 
> significant differences. I have read them so much that probably I'm 
> already obfuscated.
>
> I have tuned socket options, but can't see any improvement.
> Any ideas?
>
> Thanks in advance
>
how are your settings in /proc/sys/vm/*?  If you've got the RAM, turn 
down the vfs_cache_pressure - you should get more hits.  Also, what file 
system are you using?

--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Is my kerberos ok with AD?

Hi all,

I can get a kerberos ticket sucessfully from my AD server, and i can check it 
with klist. ( with "# kinit Administrator <at> domain.LOCAL" )

But when i try to login to AD with "# net ads join -U administrator" system 
ask for administrator password again. I think this isn't normal behavior.

Is my kerberos system ok ? Or asking password again points a problem in 
configuration.

Best Regards
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: Is my kerberos ok with AD?

Le vendredi 01 février 2008, Serbülent ÜNSAL a écrit :
> Hi all,
> 
> I can get a kerberos ticket sucessfully from my AD server, and i can check 
it 
> with klist. ( with "# kinit Administrator <at> domain.LOCAL" )
> 
> But when i try to login to AD with "# net ads join -U administrator" system 
> ask for administrator password again. I think this isn't normal behavior.
> 
> Is my kerberos system ok ? Or asking password again points a problem in 
> configuration.
> 

Uhm, OK, I've only ever had to connect a Samba server to an ADS domain once, 
but all I had to type was "net ads join". The ticket was the authentication 
credentials all by itself (also obtained with kinit), I didn't have to 
specify -U theuser.

What if you skip the -U option?

-- 
Francis Galiegue, One2team - fg <at> one2team.com
[ATTENTION : CHANGEMENT DE COORDONNÉES !]
+33178945552, +33683877875, http://www.one2team.com
40 avenue Raymond Poincaré - 75116 PARIS
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: Is my kerberos ok with AD?

On Fri, 1 Feb 2008, Francis Galiegue wrote:

> Le vendredi 01 février 2008, Serbülent ÜNSAL a écrit :
>> Hi all,
>>
>> I can get a kerberos ticket sucessfully from my AD server, and i can check
> it
>> with klist. ( with "# kinit Administrator <at> domain.LOCAL" )
>>
>> But when i try to login to AD with "# net ads join -U administrator" system
>> ask for administrator password again. I think this isn't normal behavior.
>>
>> Is my kerberos system ok ? Or asking password again points a problem in
>> configuration.
>>
>
> Uhm, OK, I've only ever had to connect a Samba server to an ADS domain once,
> but all I had to type was "net ads join". The ticket was the authentication
> credentials all by itself (also obtained with kinit), I didn't have to
> specify -U theuser.
>
> What if you skip the -U option?

That would, I assume, also require your krb5.conf to be correct.  If it
thought that the KDC was not in the right domain it'd prompt for password.

jh

--

-- 
"It is the final proof of God's omnipotence that he need not exist in order to

Re: Aplication slow after migration

I've got vfs_cache_pressure = 100 on both servers and ext3 filesystems 
on both.
These are the files on /proc/sys/vm:

slow server:
========
file
	value
-rw-r--r-- 1 root root 0 2008-02-01 13:31 block_dump
-rw-r--r-- 1 root root 0 2008-02-01 13:31 dirty_background_ratio
-rw-r--r-- 1 root root 0 2008-02-01 13:31 dirty_expire_centisecs
-rw-r--r-- 1 root root 0 2008-02-01 13:31 dirty_ratio
-rw-r--r-- 1 root root 0 2008-02-01 13:31 dirty_writeback_centisecs
-rw-r--r-- 1 root root 0 2008-02-01 13:31 drop_caches
-rw-r--r-- 1 root root 0 2008-02-01 13:31 laptop_mode
-rw-r--r-- 1 root root 0 2008-02-01 13:31 legacy_va_layout
-rw-r--r-- 1 root root 0 2008-02-01 13:31 lowmem_reserve_ratio
-rw-r--r-- 1 root root 0 2008-02-01 13:31 max_map_count
-rw-r--r-- 1 root root 0 2008-02-01 13:31 min_free_kbytes
-r--r--r-- 1 root root 0 2008-02-01 13:31 nr_pdflush_threads
-rw-r--r-- 1 root root 0 2008-02-01 13:31 overcommit_memory
-rw-r--r-- 1 root root 0 2008-02-01 13:31 overcommit_ratio
-rw-r--r-- 1 root root 0 2008-02-01 13:31 page-cluster
-rw-r--r-- 1 root root 0 2008-02-01 13:31 panic_on_oom
-rw-r--r-- 1 root root 0 2008-02-01 13:31 percpu_pagelist_fraction
-rw-r--r-- 1 root root 0 2008-02-01 13:31 swappiness
-rw-r--r-- 1 root root 0 2008-02-01 13:31 swap_token_timeout
-rw-r--r-- 1 root root 0 2008-02-01 13:31 vdso_enabled
-rw-r--r-- 1 root root 0 2008-02-01 13:31 vfs_cache_pressure 	0
10

Re: Is my kerberos ok with AD?

Le vendredi 01 février 2008, John Hodrien a écrit :
[...]
> >
> > Uhm, OK, I've only ever had to connect a Samba server to an ADS domain 
once,
> > but all I had to type was "net ads join". The ticket was the 
authentication
> > credentials all by itself (also obtained with kinit), I didn't have to
> > specify -U theuser.
> >
> > What if you skip the -U option?
> 
> That would, I assume, also require your krb5.conf to be correct.  If it
> thought that the KDC was not in the right domain it'd prompt for password.
> 

It was indeed, but then all documentation I refered to at the time required it 
to be set up correctly, so...

(oh, and that was MIT Kerberos, not Heimdal, if that makes any difference)

-- 
Francis Galiegue, One2team - fg <at> one2team.com
[ATTENTION : CHANGEMENT DE COORDONNÉES !]
+33178945552, +33683877875, http://www.one2team.com
40 avenue Raymond Poincaré - 75116 PARIS
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: PANIC on 6 of my client servers .Please Help

Res wrote:
> Hi Brad,
>
> On Thu, 31 Jan 2008, Scott Lovenberg wrote:
>
>>> I'm using FC6 and the servers have all been upgraded from FC2 and 
>>> FC4. The upgrade was completed before I took them over so I don't 
>>> know what samba version
>>>  was in use with those versions of Fedora.
>
> Using Fedora as a server is dangerous at the best of times, even now 
> Fedora dont support FC6, and will soon enough not even support FC7, I 
> suggest,
> if you can, upgrade the entire OS, to, I'd recommend Slackware 12, 
> security updates are available for more than 5 years, and as Slackware 
> is well known for not modifying packages it has far far far less 
> problems then the stuff that RH/Debian and so on release.
>
> But, if upgrading OS is not an option (it really needs to be) I'd 
> really not use any RPM for it either, what you can do, is grab the 
> 3.0.28 source and compile it, if you use the following in your 
> 'configure' its close to what RH use (extracted from a source.rpm)
>
> ./configure --prefix=/usr --localstatedir=/var 
> --with-configdir=/etc/samba --with-privatedir=/etc/samba --with-fhs 
> --with-quotas --with-smbmount --with-pam --with-pam_smbpass 
> --with-syslog --with-utmp --with-swatdir=/usr/share/swat 
> --with-shared-modules=idmap_rid --with-libsmbclient 
> --with-sendfile-support --with-acl-support --with-winbind
>

Re: Aplication slow after migration

On Feb 1, 2008 7:38 AM, Felipe Martinez Hermo <felipe <at> galicia.ugt.org>
wrote:

> I've got vfs_cache_pressure = 100 on both servers and ext3 filesystems
> on both.
> These are the files on /proc/sys/vm:
>
> slow server:
> ========
> file
>        value
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 block_dump
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 dirty_background_ratio
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 dirty_expire_centisecs
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 dirty_ratio
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 dirty_writeback_centisecs
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 drop_caches
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 laptop_mode
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 legacy_va_layout
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 lowmem_reserve_ratio
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 max_map_count
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 min_free_kbytes
> -r--r--r-- 1 root root 0 2008-02-01 13:31 nr_pdflush_threads
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 overcommit_memory
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 overcommit_ratio
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 page-cluster
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 panic_on_oom
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 percpu_pagelist_fraction
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 swappiness
> -rw-r--r-- 1 root root 0 2008-02-01 13:31 swap_token_timeout