[Samba] question on password server =

Rowland Penny
Thu, 15 Jun 2017 09:05:48 -0000

On Thu, 15 Jun 2017 10:14:45 +0200
mj via samba <samba at lists.samba.org> wrote:

> Nobody knows..?
>
> Or my question is unclear..?
>

OK, whilst it is recomended to use 'password server = *' you can use a
list of servers instead. I personally do not see the point of setting
it as you are proposing, surely it is just the same as using '*' ?

I am also struggling to understand how different Samba DCs can have the
same hostname, I can understand a DC having multiple interfaces and
therefore multiple IPs. Of course this could be down to sanitising the
output, but if this is the case, try and do this in a way that
identifies individual machines:

You posted:

> root at pf:~# host -t A samba4.company.com
> samba.merit.unu.edu has address 192.168.0.1
> samba.merit.unu.edu has address 192.168.0.2
> samba.merit.unu.edu has address 192.168.0.3
> root at pf~# host -t A  samba4.company.com
> samba.merit.unu.edu has address 192.168.0.2
> samba.merit.unu.edu has address 192.168.0.3
> samba.merit.unu.edu has address 192.168.0.1

Perhaps it should have been:

> root at pf:~# host -t A samba4.company.com
> dc1.merit.unu.edu has address 192.168.0.1
> dc2.merit.unu.edu has address 192.168.0.2
> dc3.merit.unu.edu has address 192.168.0.3
> root at pf~# host -t A  samba4.company.com
> dc2.merit.unu.edu has address 192.168.0.2
> dc3.merit.unu.edu has address 192.168.0.3
> dc1.merit.unu.edu has address 192.168.0.1

Also, I hope that the domain name 'samba4.domain.com' doesn't map to
'merit.uni.edu'

If my reading of this is wrong, then please explain yourself better.

If you really do want Samba to use a specific DC before all others, I
would do something like this:

password server = DC1, *

This way, it would try to use 'DC1' first and then, if this failed, it
would fall back to finding the nearest/best DC as normal.

Rowland