Hi Marcel -- thanks for the info. What about the krb.conf file? Is it possible to specify additional domain controllers in there too?
-- Eric Robinson Director of Information Technology Physician Select Management, LLC 775-885-2211 x 111 > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Robinson, Eric > Sent: Wednesday, November 02, 2011 6:54 AM > To: Marcel de Reuver; [email protected] > Subject: Re: [Samba] How to Configure Samba to Use Multiple > AD Logon Serversfor Redundancy > > > > Our samba boxes are integrated with our Windows 2003 AD > > domain, with > > > Windows servers acting as AD domain controllers. Everything > > is working > > > fine, but in my krb.conf and krb5.conf files on my Linux boxes, I > > > currently only have one Windows server specified as the AD > > logon server. > > > If that server is down, I suspect that Linux users could > not login. > > > How to I specify more than one AD domain controller in my > > > Kerberos/samba config files? > > > > > > > > > > > > > > You can point to more DC's: > > > > [realms] > > YOURDOMAIN.COM = { > > kdc = pdc.yourdomain.com > > kdc = dc-01.yourdomain.com > > kdc = dc-02.yourdomain.com > > admin_server = pdc.yourdomain.com > > master_kdc = pdc.yourdomain.com > > } > > > > -- > > BR, Marcel de Reuver > > -- > > That is good information, Marcel! What about my krb.conf > file? It currently looks like this: > > MYDOMAIN.COM dc01.mydomain.com:88 > MYDOMAIN.COM dc01.mydomain.com:749 admin server > > Should I specify additional AD domain controllers here as > well, and if so, what is the syntax? > > --Eric > > > > Disclaimer - November 2, 2011 > This email and any files transmitted with it are confidential > and intended solely for Marcel de > Reuver,[email protected]. If you are not the named > addressee you should not disseminate, distribute, copy or > alter this email. Any views or opinions presented in this > email are solely those of the author and might not represent > those of Physicians' Managed Care or Physician Select > Management. Warning: Although Physicians' Managed Care or > Physician Select Management has taken reasonable precautions > to ensure no viruses are present in this email, the company > cannot accept responsibility for any loss or damage arising > from the use of this email or attachments. > This disclaimer was added by Policy Patrol: > http://www.policypatrol.com/ > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
