<div dir="ltr"><div><div><div><div><div><div><div>Couple of developments, after doing some research, I discovered that Samba 3.6.4 contains some changes in re how the system authenticates across domains. Since my codemonkeys and I are both in different domains from the server, it seemed like a viable option.<br>
<br></div><div>I couldn't figure out how to instruct it to trust specific domains, so<br></div><br>long story short, until I can figure that out, I have a workaround, and <br></div></div></div></div><br>[2013/09/18 20:12:05.195662, 2] auth/auth.c:319(check_ntlm_password)<br>
check_ntlm_password: Authentication for user [avahi] -> [avahi] FAILED with error NT_STATUS_NO_SUCH_USER<br><br></div>has turned into <br><br>NT_STATUS_OK<br><br></div>For the most part my codemonkeys are pretty OK with it, because they feel like we're getting traction into it, and at least, for the short term, it looks like I'm going to end up trying to figure out how to benchmark the share.<br>
<div><div class="gmail_extra"><br><br><br><br><div class="gmail_quote">On Wed, Sep 18, 2013 at 11:12 AM, Quentin Hartman <span dir="ltr"><<a href="mailto:qhartman@gmail.com" target="_blank">qhartman@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">does the admin user actually exist? Does it only sometimes fail, or always fail?</div>
<div class=""><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Sep 18, 2013 at 10:56 AM, Mike Bean <span dir="ltr"><<a href="mailto:beandaemon@gmail.com" target="_blank">beandaemon@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">This is getting interesting: the common thread is this in the samba log:<br><br>[2013/09/18 16:54:11.396694, 2] auth/auth.c:319(check_ntlm_password)<br>
check_ntlm_password: Authentication for user [admin] -> [admin] FAILED with error NT_STATUS_NO_SUCH_USER<br>
</div><div class="gmail_extra"><br><br><div class="gmail_quote"><div>On Wed, Sep 18, 2013 at 9:48 AM, Quentin Hartman <span dir="ltr"><<a href="mailto:qhartman@gmail.com" target="_blank">qhartman@gmail.com</a>></span> wrote:<br>
</div><div><div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Graphite++. I use it for a number of application-level metrics at work and it's suuuuuuper nice.</div>
<div><div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Sep 18, 2013 at 9:41 AM, Chris Fedde <span dir="ltr"><<a href="mailto:chris@fedde.us" target="_blank">chris@fedde.us</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Add interface bytes in/out and error counts to your monitoring so you can look back and see if there are any interesting issues there. Also if you have smart switches add monitoring there too. It's hard to know what changed when you don't have some kind of baseline.<div>
<br></div><div>I use nagios and nagios graph for monitoring right now but I'm starting to get more interested in using Graphite for the time series data.</div></div><div><div><div class="gmail_extra">
<br><br><div class="gmail_quote">
On Tue, Sep 17, 2013 at 8:57 PM, Mike Bean <span dir="ltr"><<a href="mailto:beandaemon@gmail.com" target="_blank">beandaemon@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">Don't believe it, I've been messing with it for a while, but I don't understand the appeal. GPFS just feels like another open source project IBM bought up so they could take credit for the work. (Used to be mmfs).</div>
<div><div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Sep 17, 2013 at 4:51 PM, Quentin Hartman <span dir="ltr"><<a href="mailto:qhartman@gmail.com" target="_blank">qhartman@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">I'd throw some instrumentation on the server hosting the samba share and see if you're simply saturating the links (users <-> samba <-> gpfs ) if nothing else has changed and the storage performance is generally within "ok" tolerances. I've not worked with gpfs before, sounds like a cool tech.<div>
<br></div><div>I like Ganglia for general system instrumentation like this. It can take some voodoo to make it work, but the graphs and trends it creates are usually worth it. If you need something quicker / lighter, collectd works well, but I haven't used it in a long time. As i recall it needs a plugin to do net stats.<span><font color="#888888"><br>
<div><br></div><div>QH</div></font></span></div></div><div><div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Sep 17, 2013 at 4:26 PM, Mike Bean <span dir="ltr"><<a href="mailto:beandaemon@gmail.com" target="_blank">beandaemon@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div><div><div><div>Samba version 3.6.5<br><br></div>"What is slow?"<br>
</div>A good, worthy question to ask. I don't have an answer yet because I'm still trying to get in touch with the users. When I pull up that share, it's not appreciably degraded to me. I consider it fine for use.<br>
<br></div>Others<br><br></div>That's the part that gets a little complicated. The host system itself is running on a gpfs cluster, but there's been exactly zero complaints about gpfs access. The cluster, for all intents and purposes, seems fine, the only issue they're having is the rate of access on this one share for the last few weeks or so, and there's not been any appreciable change that we were aware of that took place approximately two weeks ago. <br>
<br></div>(I did notice smbstatus didn't work until I softlinked our .conf file to user/local/samba/lib... flimsy, I admit it,.... a coincidence?)<br></div><div><div><div class="gmail_extra">
<br><br><div class="gmail_quote">On Tue, Sep 17, 2013 at 3:52 PM, Quentin Hartman <span dir="ltr"><<a href="mailto:qhartman@gmail.com" target="_blank">qhartman@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Nothing from your config snippet jumps out at me.<div><br></div><div>Some more info about the environment would be useful:<div>
<br></div><div>- What version of Samba?</div><div>- What's the hardware like?</div>
<div>- Is it a local FS, or is it an NFS export or something like that?</div><div>- What is "slow"?</div><div>- Are only transfers slow, or is it directory browsing? Both?</div><div>- Is the network getting saturated?</div>
<div>- Is there anything else going on that might be competing for IO?</div><div><br></div><div><br></div><div>The few times I've had complaints about Samba performance, it's been either an IO problem (backup running while people were hitting the server), DNS problems (server trying to do lookups and waiting for timeouts), poorly configured NFS export from another machine (wsize, rsize anyone?), or the network has simply been saturated (adding a second bonded interface solved that one). You may be noticing a theme in that the "samba problems" I've faced haven't been samba problems at all....</div>
<div><br></div><div>Hope this helps.</div><div><br></div><div>QH</div></div></div><div class="gmail_extra"><br><br><div class="gmail_quote"><div><div>On Tue, Sep 17, 2013 at 3:26 PM, Mike Bean <span dir="ltr"><<a href="mailto:beandaemon@gmail.com" target="_blank">beandaemon@gmail.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div><div dir="ltr"><div><div><div><div><br></div>At the risk of being really blunt, CLUE has always given me good advice in the past, so I thought I'd ask for some pointers. We have a situation at work where some of our code monkeys are complaining about the performance on a samba share mounted on a RHEL6.1 server; I'm trying to get a path out of them (the monkeys) so I can reproduce the issue, but in the meantime we're not seeing an appreciable performance problem or evidence of any large errors. We're thinking it's going to come down to Samba performance tuning, and wouldn't you know, I know exactly spit and nothing about Samba performance tuning.<br>
<br>Prayed at the google altar, as usual, and unless my questing has served me poorly, the biggest gains are to be had in TCP_NODELAY, which was already in our conf.<br><br></div>Here's our smb.conf:<br><br># Global parameters<br>
[global]<br> socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=65536 SO_SNDBUF=65535<br> encrypt passwords = Yes<br> log level = 2<br> log file = /var/log/samba.log.%m<br> guest account = admin<br>
security = share<br> kernel oplocks = no<br> dead time = 15 # Default is 0<br> getwd cache = yes<br> lpq cache = 30<br><br>[dqm_share]<br> comment = Some Share<br>
path = /xxxx/yyyyyyyyyyyy<br> public = yes<br> writable = yes<br> printable = no<br> create mask = 0664<br> directory mask = 0775<br># strict locking = no #commented out to test its effects<br>
<br></div>As I see it, there's not much tuning I can do without benchmarking the share and that's a whole new can of worms; so I thought I'd solicit suggestions/advice from CLUE members willing to give it.<br>
<br></div>thanks,<br><br>Mike Bean<br><div><div><br></div></div></div>
<br></div></div>_______________________________________________<br>
clue mailing list: <a href="mailto:clue@cluedenver.org" target="_blank">clue@cluedenver.org</a><br>
For information, account preferences, or to unsubscribe see:<br>
<a href="http://cluedenver.org/mailman/listinfo/clue" target="_blank">http://cluedenver.org/mailman/listinfo/clue</a><br></blockquote></div><br></div>
<br>_______________________________________________<br>
clue mailing list: <a href="mailto:clue@cluedenver.org" target="_blank">clue@cluedenver.org</a><br>
For information, account preferences, or to unsubscribe see:<br>
<a href="http://cluedenver.org/mailman/listinfo/clue" target="_blank">http://cluedenver.org/mailman/listinfo/clue</a><br></blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
clue mailing list: <a href="mailto:clue@cluedenver.org" target="_blank">clue@cluedenver.org</a><br>
For information, account preferences, or to unsubscribe see:<br>
<a href="http://cluedenver.org/mailman/listinfo/clue" target="_blank">http://cluedenver.org/mailman/listinfo/clue</a><br></blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
clue mailing list: <a href="mailto:clue@cluedenver.org" target="_blank">clue@cluedenver.org</a><br>
For information, account preferences, or to unsubscribe see:<br>
<a href="http://cluedenver.org/mailman/listinfo/clue" target="_blank">http://cluedenver.org/mailman/listinfo/clue</a><br></blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
clue mailing list: <a href="mailto:clue@cluedenver.org" target="_blank">clue@cluedenver.org</a><br>
For information, account preferences, or to unsubscribe see:<br>
<a href="http://cluedenver.org/mailman/listinfo/clue" target="_blank">http://cluedenver.org/mailman/listinfo/clue</a><br></blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
clue mailing list: <a href="mailto:clue@cluedenver.org" target="_blank">clue@cluedenver.org</a><br>
For information, account preferences, or to unsubscribe see:<br>
<a href="http://cluedenver.org/mailman/listinfo/clue" target="_blank">http://cluedenver.org/mailman/listinfo/clue</a><br></blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
clue mailing list: <a href="mailto:clue@cluedenver.org" target="_blank">clue@cluedenver.org</a><br>
For information, account preferences, or to unsubscribe see:<br>
<a href="http://cluedenver.org/mailman/listinfo/clue" target="_blank">http://cluedenver.org/mailman/listinfo/clue</a><br></blockquote></div></div></div><br></div>
<br>_______________________________________________<br>
clue mailing list: <a href="mailto:clue@cluedenver.org" target="_blank">clue@cluedenver.org</a><br>
For information, account preferences, or to unsubscribe see:<br>
<a href="http://cluedenver.org/mailman/listinfo/clue" target="_blank">http://cluedenver.org/mailman/listinfo/clue</a><br></blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
clue mailing list: <a href="mailto:clue@cluedenver.org">clue@cluedenver.org</a><br>
For information, account preferences, or to unsubscribe see:<br>
<a href="http://cluedenver.org/mailman/listinfo/clue" target="_blank">http://cluedenver.org/mailman/listinfo/clue</a><br></blockquote></div><br></div></div></div>