-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Gautier, B (Bob) wrote:
>> The recommendation in the smb.conf manpage is >> 'name resolve order = wins bcast' when >> you are in security=ads mode, with a remark that in that >> case ADS-style DNS lookups are done anyway, first. Is >> my reading right? If the man page says that, it's wrong. DNS lookups are only performed if you have host in the 'name resolve order' list. I can double check, but I'm pretty sure this is how we coded it up. > Samba 3.0.23 will query the correct > _ldap._tcp.dc._msdcs.<domain> name and includes affinity for > a server once connected so that for example winbindd will > reconnect to the server used during the domain join to avoid > lags in replication delays between DCs. > >> Is that in pre1, or still to come? The server affinity patches are in 3.0.23pre1. The new DNS lookup routines are still in development. >> So as I understand it there is no plan to do any >> 'nearest DC' guessing (which is what Windows appears >> to do, based on IP address comparisons) but we can >> influence choice of DC by what we put in the DNS >> in the first place, and by firewalling to prevent access >> to inappropriate (e.g. offsite) DCs? You mean the Site name stuff ? I'm working on integrating the CLDAP queries but I haven't looked at the Site stuff much. We used to pick DC's based on network address and that was horrible. Note that for you own domain you can specify 'password server = foo.dom.ain *' to give preference to a specific DC. This doesn't work for trusted domains though. cheers, jerry ===================================================================== Samba ------- http://www.samba.org Centeris ----------- http://www.centeris.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFEW1R7IR7qMdg1EfYRAu1/AJ9yviYUXyTJfec9AqD0y9AwiRgQlwCgjXFE j1uOsqTvunWvn+rHsKzxLfA= =LDK3 -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
