samba - Dec 2015 - Authentication to Secondary Domain Controller initially fails when PDC is offline

Am 18.12.2015 um 12:30 schrieb Rowland penny:
> On 18/12/15 11:19, Ole Traupe wrote:
>> Hi Rowland,
>>
>> I am very thankful, that you take the time and test all this!
>
> No problem.
>
>>
>> Before I go and check if this is the same with my setup and possibly 
>> the problem, could you perhaps try a logon to a member server, while 
>> the 1st DC is unavailable?
>
> Ah, slight problem there, as I said, this is just a couple of test DCs 
> and there are no test domain members, you will have to bear with me 
> whilst I create one.
I would be very greatful, and I guess many others too.

I heard from many sides that you should really only use bind9 in case 
you plan a more complicated setup. Until now I thought that having 2 DCs 
wasn't considered as such.


>
> Rowland
>
>>
>> From my understanding of your post I take it, you will have the same 
>> problem. But then, my understanding is limited.
>>
>> However, if you DO have the same problem, and my understanding is 
>> correct, then the internal DNS of Samba is clearly *broken* and needs 
>> fixing!
>>
>> Also I would like to state then, that I am somewhat disappointed. I 
>> have spent weeks (if not months) to get my domain running as it is 
>> now, only to find out that I will have no good sleep with it. Sorry 
>> to be so blunt.
>>
>> Ole
>>
>>
>>
>
>

On 18/12/15 12:07, Ole Traupe wrote:
>
>
> Am 18.12.2015 um 12:30 schrieb Rowland penny:
>> On 18/12/15 11:19, Ole Traupe wrote:
>>> Hi Rowland,
>>>
>>> I am very thankful, that you take the time and test all this!
>>
>> No problem.
>>
>>>
>>> Before I go and check if this is the same with my setup and
possibly
>>> the problem, could you perhaps try a logon to a member server,
while
>>> the 1st DC is unavailable?
>>
>> Ah, slight problem there, as I said, this is just a couple of test 
>> DCs and there are no test domain members, you will have to bear with 
>> me whilst I create one.
>
> I would be very greatful, and I guess many others too.
>
> I heard from many sides that you should really only use bind9 in case 
> you plan a more complicated setup. Until now I thought that having 2 
> DCs wasn't considered as such.
>
>
Hi Ole, Would you like to know how to set up bind9 ? or to put it 
another way, you cannot login via ssh to a domain member if the the 
first DC goes down when you are using the internal dns server. If you 
use bind9, you can login, although there is a bit of a lag.

Rowland

Am 18.12.2015 um 14:56 schrieb Rowland penny:
> On 18/12/15 12:07, Ole Traupe wrote:
>>
>>
>> Am 18.12.2015 um 12:30 schrieb Rowland penny:
>>> On 18/12/15 11:19, Ole Traupe wrote:
>>>> Hi Rowland,
>>>>
>>>> I am very thankful, that you take the time and test all this!
>>>
>>> No problem.
>>>
>>>>
>>>> Before I go and check if this is the same with my setup and 
>>>> possibly the problem, could you perhaps try a logon to a member
>>>> server, while the 1st DC is unavailable?
>>>
>>> Ah, slight problem there, as I said, this is just a couple of test 
>>> DCs and there are no test domain members, you will have to bear
with
>>> me whilst I create one.
>>
>> I would be very greatful, and I guess many others too.
>>
>> I heard from many sides that you should really only use bind9 in case 
>> you plan a more complicated setup. Until now I thought that having 2 
>> DCs wasn't considered as such.
>>
>>
>
> Hi Ole, Would you like to know how to set up bind9 ? or to put it 
> another way, you cannot login via ssh to a domain member if the the 
> first DC goes down when you are using the internal dns server. If you 
> use bind9, you can login, although there is a bit of a lag.
>
> Rowland
>
Hi Rowland,

yes, I would like to know how to migrate. But before that: are you 100% 
sure that this is the problem? Before having tested it?

How much lag?

Ole

I can confirm this also. 

I do maintainance in work times, and yes, i to can login on the member with a DC
down server.

The lag is the "timeout" time for the dns responce. 
For me about 1.5 sec, just tested it. 


Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ole Traupe
> Verzonden: vrijdag 18 december 2015 15:24
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Authentication to Secondary Domain Controller
> initially fails when PDC is offline
> 
> 
> 
> Am 18.12.2015 um 14:56 schrieb Rowland penny:
> > On 18/12/15 12:07, Ole Traupe wrote:
> >>
> >>
> >> Am 18.12.2015 um 12:30 schrieb Rowland penny:
> >>> On 18/12/15 11:19, Ole Traupe wrote:
> >>>> Hi Rowland,
> >>>>
> >>>> I am very thankful, that you take the time and test all
this!
> >>>
> >>> No problem.
> >>>
> >>>>
> >>>> Before I go and check if this is the same with my setup
and
> >>>> possibly the problem, could you perhaps try a logon to a
member
> >>>> server, while the 1st DC is unavailable?
> >>>
> >>> Ah, slight problem there, as I said, this is just a couple of
test
> >>> DCs and there are no test domain members, you will have to
bear with
> >>> me whilst I create one.
> >>
> >> I would be very greatful, and I guess many others too.
> >>
> >> I heard from many sides that you should really only use bind9 in
case
> >> you plan a more complicated setup. Until now I thought that having
2
> >> DCs wasn't considered as such.
> >>
> >>
> >
> > Hi Ole, Would you like to know how to set up bind9 ? or to put it
> > another way, you cannot login via ssh to a domain member if the the
> > first DC goes down when you are using the internal dns server. If you
> > use bind9, you can login, although there is a bit of a lag.
> >
> > Rowland
> >
> 
> Hi Rowland,
> 
> yes, I would like to know how to migrate. But before that: are you 100%
> sure that this is the problem? Before having tested it?
> 
> How much lag?
> 
> Ole
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba