Prev: [Samba] New Domain Controler (PDC) and Windows Profiles
Next: [Samba] Backup files from Windows application
From: John Drescher on 10 Mar 2010 08:30
> I stopped the nscd service and now I can join the machine's from the first
> time!
> Wasn't the cache cleared by adding "nscd -i passwd" to the scripts? Is it a
> good
> idea to disable this service?

In a lot of cases the answer is no. If your ldap server is not on the
same box the answer is definitely no because you will take a huge
performance hit when accessing files.

John
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: toonverdonck on 10 Mar 2010 10:50
Ok, so it's better to clear the cache after adding a machine into the LDAP
directory so SAMBA can add the right attributes instead of disabling the nscd
service?
I already tried an nscd -i passwd after adding a machine but that didn't work
out
Quoting John Drescher <drescherjm(a)gmail.com>:

>> I stopped the nscd service and now I can join the machine's from the first
>> time!
>> Wasn't the cache cleared by adding "nscd -i passwd" to the scripts? Is it a
>> good
>> idea to disable this service?
>
> In a lot of cases the answer is no. If your ldap server is not on the
> same box the answer is definitely no because you will take a huge
> performance hit when accessing files.
>
> John
>



--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: John Drescher on 10 Mar 2010 11:10
On Wed, Mar 10, 2010 at 10:46 AM, <toonverdonck(a)dommel.be> wrote:
> Ok, so it's better to clear the cache after adding a machine into the LDAP
> directory so SAMBA can add the right attributes instead of disabling the
> nscd
> service?

I just create the machine accounts via LAM before adding a machine to
the domain in windows.

http://www.ldap-account-manager.org/


There was a thread last year about this. Google search for samba
"Unable to add machine accounts"

John
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Chris Smith on 10 Mar 2010 11:10
On Wed, Mar 10, 2010 at 10:48 AM, <toonverdonck(a)dommel.be> wrote:
> Ok, so it's better to clear the cache after adding a machine into the LDAP
> directory so SAMBA can add the right attributes instead of disabling the
> nscd service?

At one time the Samba docs strongly recommended against running nscd
on a Samba server. I don't remember seeing a change - but then I don't
remember everything :)

Chris
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: John Drescher on 10 Mar 2010 11:20
On Wed, Mar 10, 2010 at 11:03 AM, Chris Smith <smb_77(a)chrissmith.org> wrote:
> On Wed, Mar 10, 2010 at 10:48 AM,  <toonverdonck(a)dommel.be> wrote:
>> Ok, so it's better to clear the cache after adding a machine into the LDAP
>> directory so SAMBA can add the right attributes instead of disabling the
>> nscd service?
>
> At one time the Samba docs strongly recommended against running nscd
> on a Samba server. I don't remember seeing a change - but then I don't
> remember everything :)
>

They still do so if you run winbind. However not running nscd or
winbind causes a serious slowdown if your ldap server is not on the
same server as the samba machine. The reason for the slowdown is
without the cache every single file access has to connect to the ldap
server to authenticate.

John
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
First  |  Prev  |  Next  |  Last
Pages: 1 2 3
Prev: [Samba] New Domain Controler (PDC) and Windows Profiles
Next: [Samba] Backup files from Windows application