Web lists-archives.com

Re: [Samba] performance problem on bridgehead DC




Ah, ok

You showed the problem. 
>         # Needed for FreeRadius PEAP MSCHAP
>         ntlm auth = yes
>         raw NTLMv2 auth = yes 

This is your "slowdown", i know an other use that uses the same and had the same problem. 
Googing for it now. 
Can you test with these commented out in the smb.conf

Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces@xxxxxxxxxxxxxxx] Namens 
> MORILLO Jordi via samba
> Verzonden: vrijdag 16 maart 2018 14:11
> Aan: samba@xxxxxxxxxxxxxxx
> Onderwerp: Re: [Samba] performance problem on bridgehead DC
> 
> Hi Louis,
> 
> Move up to 4.7 is planned soon but I'm little scared to 
> update bridgehead if it actually had performance problem.
> I would like to fix all problem before updating.
> 
> My smb.conf is really simple:
> 
> [global]
>         workgroup = PR
>         realm = pr.educationetformation.fr
>         netbios name = DC000
>         server role = active directory domain controller
> 
>         bind interfaces only = yes
>         interfaces = lo eth0
> 
>         printcap name = /dev/null
>         load printers = no
> 
>         dns forwarder = 10.1.5.1 10.1.1.12
> 
>         # Needed for FreeRadius PEAP MSCHAP
>         ntlm auth = yes
>         raw NTLMv2 auth = yes
> 
> [netlogon]
>         path = 
> /var/lib/samba/sysvol/pr.educationetformation.fr/scripts
>         read only = No
>         guest ok = yes
> 
> [sysvol]
>         path = /var/lib/samba/sysvol
>         read only = No
>         guest ok = yes
> 
> King regards
> -----Message d'origine-----
> De : samba <samba-bounces@xxxxxxxxxxxxxxx> De la part de 
> L.P.H. van Belle via samba
> Envoyé : vendredi 16 mars 2018 12:13
> À : samba@xxxxxxxxxxxxxxx
> Objet : Re: [Samba] performance problem on bridgehead DC
> 
> Jessie also has the problem, even before the meltdown patches. 
> The kernel 3.16.x had ksoftirqd probems, eating up cpu cicles. 
> Make sure you use kernel 4.9.0-6 
> 
> And i suggest move up to samba 4.7.x or 4.7.4 from 
> debian/buster, Or use my 4.6.12/4.7.6 packages for stretch, 
> or ask if Tranquil.it can make them. 
> The 4.6.14 is still in the make atm for stretch, 4.6.14 for 
> jessie is done. 
> 
> And last, without any info from smb.conf we cant help much..
> We need to see your settings also.. 
> 
> Greetz, 
> 
> Louis
> 
> 
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces@xxxxxxxxxxxxxxx] Namens 
> MORILLO Jordi 
> > via samba
> > Verzonden: vrijdag 16 maart 2018 11:52
> > Aan: samba@xxxxxxxxxxxxxxx
> > Onderwerp: [Samba] performance problem on bridgehead DC
> > 
> > Hi everybody !
> > 
> > I am encountering performance problem on my bridgehead DC.
> > I have 19 DC (Debian Stretch / Samba 4.6.7 from Tranquil.it
> > repo) and they all synchronized on a main bridgehead DC.
> > 
> > This performance problem first appears when the bridgehead 
> DC was on 
> > Debian Jessie and kernel was updated with meltdown/spectre 
> patch from 
> > Debian (3.16.51-3+deb8u1) I added "nopti" option to grub boot to 
> > resolve the performance problem.
> > Last night, I upgrade this Bridgehead DC from Jessie -> 
> Stretch (samba 
> > package 4.6.7 from Tranquil.it is the same for Jessie and 
> Stretch), I 
> > also keep "nopti" option but problem is back again.
> > 
> > There is 2 processes eating lots of CPU, samba-tool drs 
> showrepl takes 
> > minutes, system is slow, load average is at 2 constantly
> > 
> > dc000:~# htop
> >   PID USER      PRI  NI  VIRT   RES   SHR S CPU% MEM%   
> TIME+  Command
> > 28923 root       20   0  641M 42604 19064 S 39.6  2.1  
> > 1h26:53 /usr/sbin/samba
> > 28930 root       20   0  641M 36340 13136 R 54.4  1.8 
> > 45:00.58 /usr/sbin/samba
> > 
> > dc000:~# samba-tool processes | egrep "(28923|28930)"
> > rpc_server             28923
> > rpc_server             28923
> > rpc_server             28923
> > rpc_server             28923
> > rpc_server             28923
> > rpc_server             28923
> > rpc_server             28923
> > rpc_server             28923
> > rpc_server             28923
> > dreplsrv               28930
> > 
> > dc000:~# strace -p 28923 -f
> > strace: Process 28923 attached
> > strace: [ Process PID=28923 runs in x32 mode. ]
> > strace: [ Process PID=28923 runs in 64 bit mode. ] 
> fcntl(15, F_SETLKW, 
> > {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=332, l_len=1}) = 0 
> > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, 
> l_start=368, 
> > l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_RDLCK, 
> l_whence=SEEK_SET, 
> > l_start=5073496, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK, 
> > l_whence=SEEK_SET, l_start=368, l_len=1}) = 0 fcntl(15, F_SETLKW, 
> > {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=368, l_len=1}) = 0 
> > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, 
> > l_start=5073496, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK, 
> > l_whence=SEEK_SET, l_start=368, l_len=1}) = 0 fcntl(15, F_SETLKW, 
> > {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=376, l_len=1}) = 0 
> > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, 
> > l_start=5125448, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK, 
> > l_whence=SEEK_SET, l_start=376, l_len=1}) = 0 fcntl(15, F_SETLKW, 
> > {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=376, l_len=1}) = 0 
> > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, 
> > l_start=5125448, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK, 
> > l_whence=SEEK_SET, l_start=376, l_len=1}) = 0 fcntl(15, F_SETLKW, 
> > {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) = 0 
> > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, 
> > l_start=1545572, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_UNLCK, 
> > l_whence=SEEK_SET, l_start=380, l_len=1}) = 0 fcntl(15, F_SETLKW, 
> > {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) = 0 
> > fcntl(15, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, 
> > l_start=1545572, l_len=1}) = 0 fcntl(15, F_SETLKW, {l_type=F_RDLCK, 
> > l_whence=SEEK_SET, l_start=2265976, l_len=1}) = 0 fcntl(15, 
> F_SETLKW, 
> > {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=380, l_len=1}) = 0 
> > fcntl(15, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, 
> l_start=380, 
> > l_len=1}) = 0 .......
> > 
> > dc000:~# egrep "(28923|28930)" /proc/locks
> > 16: POSIX  ADVISORY  READ  28923 ca:01:132971 168 EOF
> > 17: POSIX  ADVISORY  WRITE 28923 ca:01:132971 8 8
> > 18: POSIX  ADVISORY  READ  28923 ca:01:132978 168 EOF
> > 19: POSIX  ADVISORY  WRITE 28923 ca:01:132978 8 8
> > 20: POSIX  ADVISORY  READ  28923 ca:01:132976 168 EOF
> > 21: POSIX  ADVISORY  WRITE 28923 ca:01:132976 8 8
> > 22: POSIX  ADVISORY  READ  28923 ca:01:132970 168 EOF
> > 23: POSIX  ADVISORY  WRITE 28923 ca:01:132970 8 8
> > 24: POSIX  ADVISORY  READ  28923 ca:01:132968 168 EOF
> > 25: POSIX  ADVISORY  WRITE 28923 ca:01:132968 8 8
> > 26: POSIX  ADVISORY  READ  28923 ca:01:132940 168 EOF
> > 27: POSIX  ADVISORY  WRITE 28923 ca:01:132940 8 8
> > 28: POSIX  ADVISORY  READ  28923 ca:01:132930 168 EOF
> > 29: POSIX  ADVISORY  WRITE 28923 ca:01:132930 8 8
> > 31: POSIX  ADVISORY  WRITE 28923 00:12:387271 0 EOF
> > 54: POSIX  ADVISORY  WRITE 28930 00:12:389224 0 EOF
> > 
> > dc000:~# ls -la /proc/28923/fd/15
> > lrwx------ 1 root root 64 mars  16 09:44 /proc/28923/fd/15 -> 
> > /var/lib/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=PR,DC=ED
> > UCATIONETFORMATION,DC=FR.ldb
> > 
> > I also have many access on :
> > dc000:~# ls -la /proc/28930/fd/14
> > lrwx------ 1 root root 64 mars  16 09:44 /proc/28930/fd/14 -> 
> > /var/lib/samba/private/sam.ldb.d/DC=PR,DC=EDUCATIONETFORMATION
> > ,DC=FR.ldb
> > dc000:~# ls -la /proc/28930/fd/15
> > lrwx------ 1 root root 64 mars  16 09:44 /proc/28930/fd/15 -> 
> > /var/lib/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=PR,DC=ED
> > UCATIONETFORMATION,DC=FR.ldb
> > dc000:~# ls -la /proc/28930/fd/16
> > lrwx------ 1 root root 64 mars  16 09:44 /proc/28930/fd/16 -> 
> > /var/lib/samba/private/sam.ldb.d/DC=FORESTDNSZONES,DC=PR,DC=ED
> > UCATIONETFORMATION,DC=FR.ldb
> > 
> > dbcheck is fine on all DC (10 000 objects) All dc are 
> synced from the 
> > bridgehead DC Bridgehead is running with 8 virtual CPU and 
> 2Go of Ram
> > 
> > 
> > If you have any idea, you are welcome :) Thanks
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> > 
> > 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
> 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba