Topics

1

Directory and Authentication / Zentyal 4.2.2 samba high memory usage

« on: October 05, 2016, 12:17:08 pm »

Hi all,
we have a problem on one production server zentyal 4.2.2 running as PDC, VPN server and file server (no exchange) with high memory usage of one samba process (not smbd). Memory usage builds up and takes around 4-5 days till it eats all memory (2GB RAM and 2GB swap) and then the server freeezes. Before it has enough memory, #service zentyal samba restart helps sometimes and sometimes helps only kill -9.

it looks like this in top:
 

Code: [Select]

PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 2913 root      20   0 2305860 1,027g   3692 D   0,3 52,6 111:09.30 samba
..................

When I checked #lsof |grep 2913
I see many open pipes:

Code: [Select]

         ............
samba      2913                   root 1022w     FIFO                0,9       0t0    4045559 pipe
samba      2913                   root 1023w     FIFO                0,9       0t0    4045570 pipe
         ............

999 according to wc vs 8 in other samba process

I couldn't find any error in /var/log/samba/samba.log but these lines are occuring every minute:

Code: [Select]

[2016/10/05 11:56:31.676466,  2] ../lib/util/modules.c:196(do_smb_load_module)
  Module 'samba4' loaded
[2016/10/05 11:56:31.880586,  2] ../lib/util/modules.c:196(do_smb_load_module)
  Module 'acl_xattr' loaded
[2016/10/05 11:56:31.892361,  2] ../lib/util/modules.c:196(do_smb_load_module)
  Module 'dfs_samba4' loaded
[2016/10/05 11:56:31.892425,  2] ../source3/modules/vfs_acl_xattr.c:193(connect_acl_xattr)
  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service IPC$
I did ps tree to see the rest samba processes:

Code: [Select]

#ps auxf|less
root      2903  0.0  0.2 538740  4468 ?        Ss   okt02   0:00 samba -D
root      2905  0.0  0.1 538740  3464 ?        S    okt02   0:00  \_ samba -D
root      2908  0.0  0.1 523692  3372 ?        Ss   okt02   0:09  |   \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root      2921  0.0  0.0 507312  1344 ?        S    okt02   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root      2927  0.0  0.3 523728  6380 ?        S    okt02   0:02  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root      4886  0.0  0.1 546664  2840 ?        S    okt02   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root      6054  0.0  0.2 546768  4964 ?        S    okt02   0:01  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root      6327  0.0  0.3 551412  7988 ?        S    okt03   0:01  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root      3837  0.0  0.1 546808  3488 ?        S    03:59   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root     21028  0.0  0.2 551348  4936 ?        S    07:21   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root     26144  0.0  0.4 550960  8220 ?        S    08:31   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root     26599  0.0  0.3 551348  7948 ?        S    08:38   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
michael+ 26967  0.0  0.4 552408  8504 ?        S    08:44   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root     27697  0.0  0.4 552396  8752 ?        S    08:55   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root     27842  0.0  0.2 546808  5716 ?        S    08:55   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root     27947  0.0  0.2 551384  6108 ?        S    08:56   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root     27973  0.0  0.3 551348  6356 ?        S    08:57   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root     27986  0.0  0.4 551348  8536 ?        S    08:57   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root     28953  0.0  0.4 551360  8592 ?        S    09:10   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root     29401  0.0  0.4 552408  8992 ?        S    09:16   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
marek.c+  4371  0.0  0.6 552408 14108 ?        S    11:03   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root      7195  0.0  0.6 547196 12636 ?        S    11:44   0:00  |       \_ /usr/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root      2906  0.0  1.0 549600 21148 ?        S    okt02   1:22  \_ samba -D
root      2907  0.0  0.2 542892  5444 ?        S    okt02   0:09  \_ samba -D
root      2909  0.0  0.1 538740  3492 ?        S    okt02   0:00  \_ samba -D
root      2910  0.5  3.6 574872 74656 ?        S    okt02  21:29  \_ samba -D
root      2911  0.0  0.4 538732 10000 ?        S    okt02   0:13  \_ samba -D
root      2912  0.0  0.8 549160 17616 ?        S    okt02   0:54  \_ samba -D
root      2913  2.8 55.0 2311432 1128168 ?     D    okt02 111:17  \_ samba -D
root      2914  0.0  0.4 538732  9056 ?        S    okt02   0:00  \_ samba -D
root      2915  0.0  0.8 542884 16964 ?        S    okt02   0:46  \_ samba -D
root      2916  0.0  0.4 538740  9040 ?        S    okt02   0:07  \_ samba -D
root      2917  0.0  0.1 538740  3532 ?        S    okt02   0:00  \_ samba -D
root      2918  0.0  0.3 487780  6340 ?        Ss   okt02   0:08      \_ /usr/sbin/winbindd -D --option=server role check:inhibit=yes --foreground
root      2923  0.0  0.3 487224  7692 ?        S    okt02   0:04          \_ /usr/sbin/winbindd -D --option=server role check:inhibit=yes --foreground
root      2925  0.0  0.3 487764  6544 ?        S    okt02   0:04          \_ /usr/sbin/winbindd -D --option=server role check:inhibit=yes --foreground
root      2926  0.0  0.4 487780  9796 ?        S    okt02   0:09          \_ /usr/sbin/winbindd -D --option=server role check:inhibit=yes --foreground
And as you can see, problematic is just one process (pid 2913) rest of them are ok.

Zentyal is regularly updated and configuration is almost default, it is running zentyal 4.2.2 with samba --version: Version 4.3.4-Zentyal on Ubuntu 14.04.1 and kernel 3.19.0-65-generic

Code: [Select]

#cat /proc/version
Linux version 3.19.0-65-generic (buildd@lgw01-01) (gcc version 4.8.4 (Ubuntu 4.8.4-2ubuntu1~14.04.3) ) #73~14.04.1-Ubuntu SMP Wed Jun 29 21:05:22 UTC 2016
We have more zentyal servers on different sites, set up similarly (just the companies are different) and we have problem just with this one. Right now we have to restart service every 3-4 days. Do you have any other solution or experience?

2

Directory and Authentication / Samba shared folders unavaiable

« on: November 24, 2015, 03:55:56 pm »

We have a problem on one Zentyal server with samba authentication and mapping user's primary group. I found out Zentyal developers was trying change sssd to winbind, but they revert it before releasing. Probably revert wasn't complete and winbind is now staring with smb process.

User can not connect to all shared folders (except home folders and sysvol) on lastest Zentyal Devel server (Ubuntu and Zentyal completely updated)

Whole problem is in winbind user's primary group lookup. All users has primary group "users" (gid 100) and not "domain users". I can see in smbstatus all connected users with primary group "users".

So user doesn't have any permission to access to /home/samba, because is not in domain users group.

Temporary fix is here, but after few hours all problems come back:
http://serverfault.com/questions/476086/samba-winbind-user-resolution

In old version (4.1) is all fine.

Please help, it's URGENT.