Tranquil IT Forum

Hello,

I have some user profiles that take ten minutes to log in, displaying a long "please wait for user profile service" message. I can't find any useful information in the logs of my Samba4 server, nor on the Windows 10 machines.
Which logs should I look at on my Samba4 server running Debian? And on my Windows 10 clients to potentially find the problem? Or what should I check first?
Any ideas?

Sincerely,

Maelvon

There are many possible reasons, but it's probably not related to samba-ad itself...

Okay, so I should probably look in the logs of my Windows 10 clients. But the logs don't seem very detailed there; in any case, I can't find any conclusive logs... I'm also wondering if it's related to a lot of cache files, like in the Firefox browser profile, which contains many small files. Anyway, I'll continue my search.

The problems can be very varied. Recently, I had to resolve a login time issue on some workstations; the cause was an inter-VLAN firewall rule blocking TCP/88 (Kerberos)... This could cause the login process to lag for 6-7 minutes before switching to NTLM.

One common culprit is firewall rules in DROP mode (i.e., no ICMP-unreachable) on the network or VLAN firewall, and things that try to connect to the internet directly when they're not allowed (a proxy connection is required). This can cause timeouts, and the cumulative effect of these timeouts can be quite long.

Cleaning up unnecessary applications on Windows 10 can also help.

Denis

Okay, I finally found part of the problem.
Discord and Autodesk were storing small but very large quantities of JSON files.
I managed to remove them from the synchronization. My connection time is back to normal.
However, there are still some folders I can't seem to exclude, like the Firefox cache, which is in a randomly named folder in the Profile Roaming section. And I haven't found a way to exclude it.

Regards,

Maelvon