samba - Jan 2016 - Authentication to Secondary Domain Controller initially fails when PDC is offline

Am 07.01.2016 um 11:58 schrieb Rowland penny:
> On 07/01/16 10:48, Ole Traupe wrote:
>> Please don't post any sensitive information - even if I forget 
>> sanitizing it.
>>
>> This is probably the reason behind it: Our corporate DNS servers hold 
>> info about our machines. This works together with DHCP. By 
>> registering the machines I simply prevent any IP conflicts. My domain 
>> DNS has nothing to do with it. In my domain members (Win clients and 
>> Linux servers) only my DCs are set as DNS servers and these members 
>> don't use DHCP.
>>
>> Within my subnet, I get exactly the same as Rowland reported below.
>>
>> Ole
>>
>>
>
> This is one of the reasons that you shouldn't use your corporate 
> domain name for your AD domain name, if you do, your domain members 
> are locatable from the internet.
In theory. Actually, most of them aren't.
> The domain name in question is *not* sensitive info, if it was, you 
> wouldn't get any email :-)
My mail address is *not* ole.traupe@*bpn*.tu-berlin.de.
>
> Rowland
>

On 07/01/16 11:19, Ole Traupe wrote:
>
>
> Am 07.01.2016 um 11:58 schrieb Rowland penny:
>> On 07/01/16 10:48, Ole Traupe wrote:
>>> Please don't post any sensitive information - even if I forget 
>>> sanitizing it.
>>>
>>> This is probably the reason behind it: Our corporate DNS servers 
>>> hold info about our machines. This works together with DHCP. By 
>>> registering the machines I simply prevent any IP conflicts. My 
>>> domain DNS has nothing to do with it. In my domain members (Win 
>>> clients and Linux servers) only my DCs are set as DNS servers and 
>>> these members don't use DHCP.
>>>
>>> Within my subnet, I get exactly the same as Rowland reported below.
>>>
>>> Ole
>>>
>>>
>>
>> This is one of the reasons that you shouldn't use your corporate 
>> domain name for your AD domain name, if you do, your domain members 
>> are locatable from the internet.
>
> In theory. Actually, most of them aren't.
>
>> The domain name in question is *not* sensitive info, if it was, you 
>> wouldn't get any email :-)
>
> My mail address is *not* ole.traupe@*bpn*.tu-berlin.de.
You know something, you are quite correct, it isn't :-D
This doesn't explain why host is returning the result it is, something 
out there thinks that bpn.tu-berlin.de has a mail server.

Rowland
>
>>
>> Rowland
>>
>
>

Am 07.01.2016 um 12:28 schrieb Rowland penny:
> On 07/01/16 11:19, Ole Traupe wrote:
>>
>>
>> Am 07.01.2016 um 11:58 schrieb Rowland penny:
>>> On 07/01/16 10:48, Ole Traupe wrote:
>>>> Please don't post any sensitive information - even if I
forget
>>>> sanitizing it.
>>>>
>>>> This is probably the reason behind it: Our corporate DNS
servers
>>>> hold info about our machines. This works together with DHCP. By
>>>> registering the machines I simply prevent any IP conflicts. My 
>>>> domain DNS has nothing to do with it. In my domain members (Win
>>>> clients and Linux servers) only my DCs are set as DNS servers
and
>>>> these members don't use DHCP.
>>>>
>>>> Within my subnet, I get exactly the same as Rowland reported
below.
>>>>
>>>> Ole
>>>>
>>>>
>>>
>>> This is one of the reasons that you shouldn't use your
corporate
>>> domain name for your AD domain name, if you do, your domain members
>>> are locatable from the internet.
>>
>> In theory. Actually, most of them aren't.
>>
>>> The domain name in question is *not* sensitive info, if it was, you
>>> wouldn't get any email :-)
>>
>> My mail address is *not* ole.traupe@*bpn*.tu-berlin.de.
>
> You know something, you are quite correct, it isn't :-D
> This doesn't explain why host is returning the result it is, something 
> out there thinks that bpn.tu-berlin.de has a mail server.
As I replied privately to you, it seems to me that this is some default 
corporate placeholder. My university is hosting a lot of different 
services for the departments, often with several alternatives in place 
for one and the same need. Often this comes in quite handy, sometimes it 
might produce strange results. I don't really know.
>
> Rowland
>
>>
>>>
>>> Rowland
>>>
>>
>>
>
>