samba - Feb 2024 - Samba trying to connect to a non-existant DC for NTP?

At about every 4 seconds the following messages are being created in
/var/log/messages

Feb 14 14:05:25 smb4-2 samba[21026]: [2024/02/14 14:05:25.466141,  0]
../../source4/librpc/rpc/dcerpc_sock.c:63(continue_socket_connect)
Feb 14 14:05:25 smb4-2 samba[21026]:   Failed to connect host 192.168.18.161 on
port 135 - NT_STATUS_UNSUCCESSFUL
Feb 14 14:05:25 smb4-2 samba[21026]: [2024/02/14 14:05:25.466529,  0]
../../source4/librpc/rpc/dcerpc_sock.c:245(continue_ip_open_socket)
Feb 14 14:05:25 smb4-2 samba[21026]:   Failed to connect host 192.168.18.161
(aac648b2-aac8-411d-afe0-7cbd5455841c._msdcs.brockley.harte-lyne.ca) on port
135 - NT_STATUS_UNSUCCESSFUL.

The address 192.168.18.161 was/is assigned to a samba DC (smb4-1) which is not
online and has not been for quite some time.

What I need to do is to locate what is generating the connection requests which
are failing and reconfigure it to stop trying. Where do I look?  There does not
seem to be anything related to this in /usr/local/etc/smb4.conf and I do not
see anything in samba-tool that relates to this either.

Advice would be greatly appreciated.

PS.  This is on Samba-4.13 which is EOL. We are upgrading before the end of
March but not today.

Thanks,

-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
   Unencrypted messages have no legal claim to privacy
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3

On Wed, 14 Feb 2024 14:35:38 -0500
"James B. Byrne via samba" <samba at lists.samba.org> wrote:
> At about every 4 seconds the following messages are being created in
> /var/log/messages
> 
> Feb 14 14:05:25 smb4-2 samba[21026]: [2024/02/14 14:05:25.466141,  0]
> ../../source4/librpc/rpc/dcerpc_sock.c:63(continue_socket_connect)
> Feb 14 14:05:25 smb4-2 samba[21026]:   Failed to connect host
> 192.168.18.161 on port 135 - NT_STATUS_UNSUCCESSFUL
> Feb 14 14:05:25 smb4-2 samba[21026]: [2024/02/14 14:05:25.466529,  0]
> ../../source4/librpc/rpc/dcerpc_sock.c:245(continue_ip_open_socket)
> Feb 14 14:05:25 smb4-2 samba[21026]:   Failed to connect host
> 192.168.18.161
> (aac648b2-aac8-411d-afe0-7cbd5455841c._msdcs.brockley.harte-lyne.ca)
> on port 135 - NT_STATUS_UNSUCCESSFUL.
Port 135 is not NTP, it is the End Point Mapper port
> 
> The address 192.168.18.161 was/is assigned to a samba DC (smb4-1)
> which is not online and has not been for quite some time.
Is there anything left in AD that refers to your removed DC ? 
If the removed DC was the holder of the PDC_Emulator FSMO role, that is
one place I would check.

Rowland