samba - Dec 2024 - Winbind resiliency in AD environment

Hello

What is the expected behavior of winbind on a member server when the AD DC it is
communicating with becomes un-responsive?

Is this a configurable behavior?

Seems we have a 'hang' on authentication requests when we lose one of
our DCs and a restart of winbind is our only way out at present

Thanks,

Rob

----------------------------------------------------------------------
This is an e-mail from General Dynamics Land Systems. It is for the intended
recipient only and may contain confidential and privileged information.  No one
else may read, print, store, copy, forward or act in reliance on it or its
attachments.  If you are not the intended recipient, please return this message
to the sender and delete the message and any attachments from your computer.
Your cooperation is appreciated.

Hello,

Any thoughts on this?

Rob

-----Original Message-----
From: samba <samba-bounces at lists.samba.org> On Behalf Of Vaughan,
Robert J via samba
Sent: Thursday, December 12, 2024 4:03 PM
To: samba at lists.samba.org
Subject: [Samba] Winbind resiliency in AD environment

Hello

What is the expected behavior of winbind on a member server when the AD DC it is
communicating with becomes un-responsive?

Is this a configurable behavior?

Seems we have a 'hang' on authentication requests when we lose one of
our DCs and a restart of winbind is our only way out at present

Thanks,

Rob

----------------------------------------------------------------------
This is an e-mail from General Dynamics Land Systems. It is for the intended
recipient only and may contain confidential and privileged information.  No one
else may read, print, store, copy, forward or act in reliance on it or its
attachments.  If you are not the intended recipient, please return this message
to the sender and delete the message and any attachments from your computer.
Your cooperation is appreciated.
-- 
To unsubscribe from this list go to the following URL and read the
instructions: 
https://urldefense.us/v3/__https://lists.samba.org/mailman/options/samba__;!!LLC9-ftwI7ClqA!cHy_FyV1_Z8GBTjUFGuqn3Q4ogOp8C2DdnFWhEgSwBRJpTmlz8fuFfiZwMW7_d30U5w1K8P7iP1nZlzd$

----------------------------------------------------------------------
This is an e-mail from General Dynamics Land Systems. It is for the intended
recipient only and may contain confidential and privileged information.  No one
else may read, print, store, copy, forward or act in reliance on it or its
attachments.  If you are not the intended recipient, please return this message
to the sender and delete the message and any attachments from your computer.
Your cooperation is appreciated.

On Thu, 12 Dec 2024 21:03:16 +0000
"Vaughan, Robert J via samba" <samba at lists.samba.org> wrote:
> Hello
> 
> What is the expected behavior of winbind on a member server when the
> AD DC it is communicating with becomes un-responsive?
A Samba AD DC shouldn't become un-responsive and it is recommended to
run multiple DCs.
> 
> Is this a configurable behavior?
Do you have 'winbind offline logon = yes' set on the Unix domain
members smb.conf file ?
> 
> Seems we have a 'hang' on authentication requests when we lose one
of
> our DCs and a restart of winbind is our only way out at present
That shouldn't be required, perhaps a network trace when it happens
might help.

Rowland