On Fri, Jun 12, 2009 at 1:23 PM, David Lum<[email protected]> wrote: > Should this key value be set to TRUE for ALL domain controllers, or just > one?
I'm not exactly sure of the semantics of IsDomainMaster, but generally speaking, you want only one computer that wants to be the domain master browser. If you have more than one, they'll "fight" over it. This is the other kind of "browser war". :) On Fri, Jun 12, 2009 at 4:45 PM, David Lum<[email protected]> wrote: > I agree – I am finding that from some SUSE machine still forcing an election > even after the change. Right. Your SuSE box is apparently still configured to want to be the domain master browser. Telling Windows it also wants to be the DMB isn't going to make things better. :) To prevent your SuSE box from trying to be a master browser of any kind, configure the following in the </etc/samba/smb.conf> file: local master = no domain master = no That tells Samba not to try and become a local or domain master browser, respectively. An LMB maintains the browse list for the local broadcast domain/IP subnet. The DMB maintains the browse list for the entire NetBIOS workgroup/domain. LMBs sync with the DMB so that LMB browse list entries propagate to/from the DMB. You need an LMB on each subnet for cross-subnet browsing to work, since only LMBs exchange browse list entries with the DMB. If your SuSE box is the only server on its subnet, you prolly want "local master = yes" for it. For completeness, there are two more settings which influence browser behavior in Samba: preferred master = <yes|no> os level = <0-255> The first sets a bit in browser announcements. In a browser election, a computer with that bit set will win over a computer without that bit. IIRC, in Microsoft land, "server" flavors of Windows always set that bit, and "client" flavors never set it. The OS level is also reported in browser announcements. Higher levels win over lower levels. In Microsoft land, newer releases of Windows have higher OS levels, and IIRC, domain controllers get some high number added in as well. This is all magic in Microsoft land. In Samba, it's just a set of documented config options. :) -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
