samba - Apr 2004 - winbind talking to backup ADS server

Hi-

I've set up samba 3.02a and have it successfully authenticating against a
Windows 2000 ADS Server.  Everything is working great, except that samba
(winbind?) won't talk to the backup ADS server when the primary ADS server
goes down.  I'm shutting off the primary ADS server to test this, and when I
do I get the following:

[root@iceberg /etc]# /usr/local/samba/bin/wbinfo -u
Error looking up domain users

"getent passwd" also doesn't work.  When the primary ADS server is
online,
everything works.

This seems to be a winbind problem ... when the primary is offline, all
windows users can log into the domain from their PCs, and I can successfully
get a kerberos ticket on my samba server machine from the secondary ADS
server (/etc/krb5.conf uses DNS to lookup the kerberos server), but winbind
doesn't seem to find it.

I tried three different settings for "password server" in smb.conf:

password server = PRIMARY_ADS_IP
password server = PRIMARY_ADS_IP, SECONDARY_ADS_IP

... and the third was just not specifying a "password server".  All
three
give the same result: I can authenticate when the primary is up, but not
when it's offline.

Looking at tcpdump (though I'm not an expert), it seems like winbind is
continually trying to contact the primary ADS server even after is goes away
.... Any ideas?  Where does winbind get the information about what ADS
server to talk to?

Thanks,
Steve

Possibly bounce the winbind service after failover?

-C

-----Original Message-----
From: news.gmane.org [mailto:looper_man@yahoo.com] 
Sent: Thursday, April 22, 2004 11:14 AM
To: samba@lists.samba.org
Subject: [Samba] winbind talking to backup ADS server

Hi-

I've set up samba 3.02a and have it successfully authenticating against
a Windows 2000 ADS Server.  Everything is working great, except that
samba
(winbind?) won't talk to the backup ADS server when the primary ADS
server goes down.  I'm shutting off the primary ADS server to test this,
and when I do I get the following:

[root@iceberg /etc]# /usr/local/samba/bin/wbinfo -u Error looking up
domain users

"getent passwd" also doesn't work.  When the primary ADS server is
online, everything works.

This seems to be a winbind problem ... when the primary is offline, all
windows users can log into the domain from their PCs, and I can
successfully get a kerberos ticket on my samba server machine from the
secondary ADS server (/etc/krb5.conf uses DNS to lookup the kerberos
server), but winbind doesn't seem to find it.

I tried three different settings for "password server" in smb.conf:

password server = PRIMARY_ADS_IP
password server = PRIMARY_ADS_IP, SECONDARY_ADS_IP

... and the third was just not specifying a "password server".  All
three give the same result: I can authenticate when the primary is up,
but not when it's offline.

Looking at tcpdump (though I'm not an expert), it seems like winbind is
continually trying to contact the primary ADS server even after is goes
away .... Any ideas?  Where does winbind get the information about what
ADS server to talk to?

Thanks,
Steve




--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

tried that (several times) ... no dice.

"Barry, Christopher" <cbarry@infiniconsys.com> wrote in message
news:08628CA53C6CBA4ABAFB9E808A5214CB0201081D@mercury.infiniconsys.com...

Possibly bounce the winbind service after failover?

-C