Created attachment 7072 [details] Top command result(on that time) to show processess Hello Support, We are facing strange issue samba3.5.6 server( act as Domain Controller) 2-3 times a month server space start filling automatically and when we stop or restart smb service Disk space come to it's actual size.Please help. Please Find below smb.conf file and attached top command result(on that time). [global] workgroup = FORTE.COM netbios name = uk-forte-fs server string = uk-forte-fs interfaces = 127.0.0.1 eth0 encrypt passwords = yes security = user os level = 33 domain logons = yes prefered master = yes domain master = yes local master = yes username map = /etc/samba/smbusers logon drive = U: passdb backend = smbpasswd hosts allow = 127. 192.168.5. 192.168.3. 192.168.51. logon home = \\uk-forte-fs\%U logon path = \\uk-forte-fs\profiles\%U log level = 3 add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupdel %g add user to group script = /usr/sbin/usermod -G %g %u add machine script = /usr/sbin/useradd -n -c "Workstation (%u)" -M -d /nohome -s /bin/false "%u" admin users = administrator pankaj.kumar logon script = netlogon.bat [netlogon] comment = Network Logon directory path = /smb/samba/netlogon/netlogon.bat browseable = yes guest ok = yes #valid users = %u ; home configuration [homes] # path = /smb/home/%S comment = Home valid users = %S ; read only = No browseable = No writeable = yes ;writeable = yes ; profile configuration [profiles] path = /smb/samba/profiles # valid users = %u ; create mode = 0600 ; directory mode = 0700 writeable = yes # write list = @forte browseable = no
Please Reply, Waiting for your valuable resolution.
I think an smbd process has a problem and cannot close its log file(s), and another smbd process rotates the log file and remove old one. Run `lsof -n |grep 'smbd.*deleted'` to check if an smbd opens the removed log file or not, run `strace -ttTfx -s 9999 -o smbd.strace -p <smbd's PID>` to check what is the smbd doing, and run `cat /proc/<smbd's PID>/fd/<logfile's FD> >smbd.log` to see the contents of the removed log file.
(In reply to comment #2) > I think an smbd process has a problem and cannot close its log file(s), > and another smbd process rotates the log file and remove old one. > > Run `lsof -n |grep 'smbd.*deleted'` to check if an smbd opens the removed > log file or not, run `strace -ttTfx -s 9999 -o smbd.strace -p <smbd's PID>` > to check what is the smbd doing, and run > `cat /proc/<smbd's PID>/fd/<logfile's FD> >smbd.log` to see the > contents of the removed log file. Thanks for reply SATOH Fumiyasu We check your steps when this issue occur agian. Regards, Ravi
Is this still an issue?