samba - May 2003 - Inefficient Winbind behavior? Not sure if it posted 1st time.

Hello all,
 
I'm having an issue with Winbind and I'm not sure if it's occurring
by
design or not.
 
My Samba server resides in a Windows NT domain and uses winbindd to
authenticate to a mixed-mode 2003 domain over a trust relationship.
Everything works the way it ought to.  However, every so often my users
experience delays of anywhere from 30 to 60 seconds when connecting to a
share, instead of the share being instantaneously available, as is normally
the case.  
 
I've done some investigating and have found that winbindd queries WINS for a
domain controller for the 2003 domain, which it finds just fine and is able
to authenticate users against.  However, the problem is that the server it's
finding is on a different subnet, connected via a T1 WAN link.  So it uses
the remote server instead of a local 2003 DC, which is acting as a BDC, that
resides on the same LAN as the Samba server.  
 
Shouldn't winbindd use the local DC?  Can I configure it to do so?  I'm
fairly convinced that authenticating over the WAN link is causing the delays
I'm experiencing.  Any ideas are welcome.
 
Thank you.
 
Please include my e-mail address in all replies.
 
Sven Ruth

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 14 May 2003 SRuth@LANDAM.com wrote:
> Shouldn't winbindd use the local DC?  Can I configure it to do so? 
I'm
> fairly convinced that authenticating over the WAN link is causing the
> delays I'm experiencing.  Any ideas are welcome.
Is should match one on the local subnet, but it binds to the 
PDC for a period of time after it has first joined the domain.
15 minutes or so IIRC.



cheers, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop
there."
                            --John Cusack - "Grosse Point Blank"
(1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+zZMrIR7qMdg1EfYRAp+xAKC7x/JcfNJ0w+BR4iuAt4rj054IsgCg39Q+
EVyNPtttm64GMdLaQe/WTMM=YE/9
-----END PGP SIGNATURE-----