[Samba] kvno problem when accessing "bdc" as \\domain.com

[Andrew Bartlett]

On Tue, 2012-10-09 at 14:38 +0300, Hannu Tikka wrote:
> Hi!
> 
> I have a samba4 domain with two r/w directory controllers. DNS is set up
> so that domain.com name adresses both servers for redundancy. But
> workstaions can't contact second server with address \\domain.com  becuse
> the kvno is different that first servers kvno and when using \\domain.com
> address the kvno seems to be always first servers kvno.
> Can I somehow increase the second servers kvno or is there other solutions

You have to access each server by name.  Even if the kvno was identical, the kerberos key would be different.

There is a special case used for sysvol shares, but all it does is
redirect the user to the right server. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org