Re: smb.conf for around 2500 users

steve <steve@xxxxxxxxxxxx> · Wed, 04 Jul 2012 17:11:26 +0200

On 03/07/12 10:18, Jonathan Buzzard wrote:

On Mon, 2012-07-02 at 18:20 +0200, steve wrote:

[SNIP]

I think I must be missing something here because as far as I can see,
winbindd puts all users into the directory specified in template
homedir. [homes] then picks out the user from there.

Yes you are stop using template homedir and configure winbind correctly.

OK. template homedir is now removed. Although we are using winbind we 

are not running winbindd. All our mapping is done using nss-pam-ldapd.

# deal with NSS and the whole UID/SID id mapping stuff
	idmap backend = tdb
	idmap uid = 2000000 - 2999999
	idmap gid = 2000000 - 2999999
	idmap config MYDOMAIN : backend = nss
	idmap config MYDOMAIN : readonly = yes
	idmap config MYDOMAIN : range = 500 - 1999999
	idmap cache time = 604800
	idmap negative cache time = 20
	winbind cache time = 600
	winbind nss info = rfc2307
	winbind expand groups = 2
	winbind nested groups = yes
	winbind use default domain = yes
	winbind enum users = yes
	winbind enum groups = yes
	winbind refresh tickets = yes
	winbind offline logon = false

No, we have none of that. Our global is simply:
[global]
	server role = domain controller
	workgroup = MARINA
	realm = hh3.site
	netbios name = HH1
	passdb backend = samba4
	wide links = Yes	
	unix extensions = No

You need to edit /etc/nsswitch of course. This is the "samba" way of
doing things.

We have
passwd: compat ldap
group:  compat ldap
hosts:	files mdns4_minimal [NOTFOUND=return] dns

As to suggestions to use autofs on 2500 users, my advice is don't. Works
well at ~50 users but gets flacky at couple hundred users with random
things not working 100% of the time that will take you for ever to track
down to autofs if you do.

That's interesting/worrying. Although we have 2500 users, we only have 

around 150 computers in the domain, spread over 4 teaching labs. Those 

are split about 50:50 Linux:windows so I'd put the maximum number of NFS 

autofs mounts to be 80 at most. What do you recon?

Cheers and thanks for your comments,
Steve
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba