samba - May 2013 - Linux Servers in an AD Domain with Multiple Windows Domain Controllers

We have three Windows domain controllers in our AD domain. They are DC01, DC02,
and DC03. We have Linux (RHEL5 and 6) servers in the domain as well. The Linux
servers are working fine with AD. However, they are currently configured in
krb.conf and krb5.conf to use only DC01 for AD domain controller. if DC01 is
down, Linux servers cannot authenticate. How do we configure the Linux servers
to use multiple domain controllers for AD, so if DC01 is down everything
continues to work on the Linux side?

--
Eric Robinson

















Disclaimer - May 25, 2013 
This email and any files transmitted with it are confidential and intended
solely for 'samba at lists.samba.org'. If you are not the named
addressee you should not disseminate, distribute, copy or alter this email. Any
views or opinions presented in this email are solely those of the author and
might not represent those of Physicians' Managed Care or Physician Select
Management. Warning: Although Physicians' Managed Care or Physician Select
Management has taken reasonable precautions to ensure no viruses are present in
this email, the company cannot accept responsibility for any loss or damage
arising from the use of this email or attachments.
This disclaimer was added by Policy Patrol: http://www.policypatrol.com/

Hello Eric,

Am 25.05.2013 18:29, schrieb Robinson, Eric:
> We have three Windows domain controllers in our AD domain. They are
 > DC01, DC02, and DC03. We have Linux (RHEL5 and 6) servers in the
 > domain as well. The Linux servers are working fine with AD. However,
 > they are currently configured in krb.conf and krb5.conf to use only
 > DC01 for AD domain controller. if DC01 is down, Linux servers cannot
 > authenticate. How do we configure the Linux servers to use multiple
 > domain controllers for AD, so if DC01 is down everything continues
 > to work on the Linux side?

I saw, that you asked that question already 1.5 years ago on this list:
http://markmail.org/message/slugpbka33ap4ima

Didn't the two suggestions from Marcel and Andrew work? If not, what 
were the problems with them? Then maybe we find a way to get it work.

Regards,
Marc