Slow profile loading on some client machines

Come here to share your tips and tricks for using Samba4
Locked
Maelvon
Messages: 15
Registration: February 7, 2018 - 10:14

July 7, 2020 - 10:21 PM

Hello,

I have some user profiles that take ten minutes to log in, displaying a long "please wait for user profile service" message. I can't find any useful information in the logs of my Samba4 server, nor on the Windows 10 machines.
Which logs should I look at on my Samba4 server running Debian? And on my Windows 10 clients to potentially find the problem? Or what should I check first?
Any ideas?

Sincerely,

Maelvon
User avatar
dcardon
WAPT Expert
Messages: 1929
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

July 8, 2020 - 1:55 PM

There are many possible reasons, but it's probably not related to samba-ad itself...
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Maelvon
Messages: 15
Registration: February 7, 2018 - 10:14

July 8, 2020 - 3:01 PM

Okay, so I should probably look in the logs of my Windows 10 clients. But the logs don't seem very detailed there; in any case, I can't find any conclusive logs... I'm also wondering if it's related to a lot of cache files, like in the Firefox browser profile, which contains many small files. Anyway, I'll continue my search.
User avatar
dcardon
WAPT Expert
Messages: 1929
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

July 8, 2020 - 6:44 PM

The problems can be very varied. Recently, I had to resolve a login time issue on some workstations; the cause was an inter-VLAN firewall rule blocking TCP/88 (Kerberos)... This could cause the login process to lag for 6-7 minutes before switching to NTLM.

One common culprit is firewall rules in DROP mode (i.e., no ICMP-unreachable) on the network or VLAN firewall, and things that try to connect to the internet directly when they're not allowed (a proxy connection is required). This can cause timeouts, and the cumulative effect of these timeouts can be quite long.

Cleaning up unnecessary applications on Windows 10 can also help.

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Maelvon
Messages: 15
Registration: February 7, 2018 - 10:14

November 10, 2020 - 2:41 PM

Okay, I finally found part of the problem.
Discord and Autodesk were storing small but very large quantities of JSON files.
I managed to remove them from the synchronization. My connection time is back to normal.
However, there are still some folders I can't seem to exclude, like the Firefox cache, which is in a randomly named folder in the Profile Roaming section. And I haven't found a way to exclude it.

Regards,

Maelvon
Locked