Menu
▾
▴
[Devil-Linux-discuss] DL 1.2.10 (& 9): Slow Samba - LDAP problem?
|
From: Dom <dl...@ed...> - 2006-06-11 07:34:07
|
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> <title></title> </head> <body bgcolor="#ffffff" text="#000000"> [this stems from thread: 'DL 1.2.9 upgrade from 1.2.6 (SMP Server) - but slow?' The new subject title is hopefully more useful, as the problem relates to Samba and, I think, LDAP]<br> <br> With Devil-Linux 1.2.6 our very simple (perhaps too simple) Samba setup [see below] worked like a charm.<br> <br> Now using DL 1.2.10 (test) it is very slow for the first access by any machine, and again after a while (if the Samba share has not been accessed in a while) it is very slow again. A similar problem (though it seemed worse) occurred with DL 1.2.9.<br> <br> Looking at the log files (which I never did before, they weren't even saved previously), I find this stuff (for the log file for any machine that has accessed the Samba share):<br> <br> [2006/06/11 07:28:09, 0] passdb/secrets.c:fetch_ldap_pw(629)<br> fetch_ldap_pw: neither ldap secret retrieved!<br> [2006/06/11 07:28:09, 0] lib/smbldap.c:smbldap_connect_system(851)<br> ldap_connect_system: Failed to retrieve password from secrets.tdb<br> [2006/06/11 07:28:09, 1] lib/smbldap.c:another_ldap_try(1051)<br> Connection to LDAP server failed for the 1 try!<br> <br> ...(and repeating every second)...<br> <br> [2006/06/11 07:28:23, 0] passdb/secrets.c:fetch_ldap_pw(629)<br> fetch_ldap_pw: neither ldap secret retrieved!<br> [2006/06/11 07:28:23, 0] lib/smbldap.c:smbldap_connect_system(851)<br> ldap_connect_system: Failed to retrieve password from secrets.tdb<br> [2006/06/11 07:28:23, 1] lib/smbldap.c:another_ldap_try(1051)<br> Connection to LDAP server failed for the 15 try!<br> [2006/06/11 07:28:24, 0] passdb/secrets.c:fetch_ldap_pw(629)<br> fetch_ldap_pw: neither ldap secret retrieved!<br> [2006/06/11 07:28:24, 0] lib/smbldap.c:smbldap_connect_system(851)<br> ldap_connect_system: Failed to retrieve password from secrets.tdb<br> [2006/06/11 07:28:24, 0] lib/smbldap.c:smbldap_search_suffix(1346)<br> smbldap_search_suffix: Problem during the LDAP search: (unknown) (Time limit exceeded)<br> [2006/06/11 07:28:24, 1] smbd/service.c:make_connection_snum(693)<br> 192.168.101.90 (192.168.101.90) connect to service d initially as user someone (uid=1000, gid=100) (pid 2773)<br> <br> So it seems to me that when a machine accesses a Samba share, Samba tries repeatedly to use LDAP and fails, then after 16 tries (and 16 seconds) it gives up and provides access anyway.<br> <br> Either I need to get the Samba - LDAP bit working (which I guess was not a requirement with DL 1.2.6 / Samba 3.0.14a), or find a way to force Samba to work the old way. I see that DL 1.2.7 'added samba smbldap-tools (Heiko / Thomas Eder)' - I don't know whether this could be related, and Samba is now 3.0.22. I have tried starting slapd (/etc/init.d/slapd start) which I never used previously, it hasn't helped. I guess I would have to configure it - I found info about configuring Samba with LDAP here <a class="moz-txt-link-freetext" href="http://times.usefulinc.com/2005/09/25-ldap">http://times.usefulinc.com/2005/09/25-ldap</a> and here <a class="moz-txt-link-freetext" href="http://www.idealx.com/downloads/samba3-ldap-howto.pdf">http://www.idealx.com/downloads/samba3-ldap-howto.pdf</a> but they both look a bit scary. I just want it to be like it was before, really!<br> <br> Here is my smb.conf file, all of it:<br> <br> --------------<br> <p><strong>[global]<br> workgroup = MY_WORKGROUP<br> server string = Samba Server<br> security = SHARE<br> guest account = someone<br> log file = /home/z-shares/public/var/log.%m<br> max log size = 50<br> dns proxy = No<br> wins support = Yes</strong> </p> <strong> <p>[ourdocs]<br> path = /home/z-shares/public<br> read only = No<br> guest only = Yes<br> guest ok = Yes<br> </p> </strong>----------------<br> <strong></strong><strong></strong>Any help gratefully received!<br> <br> Dom<br> </body> </html> |
