[Samba] Samba domain member DC preferred list

[Andrea Cucciarre']

Hello Rowland,

One of my customer is reporting that sometime intermittently they can't 
access the share.
When the issue appear the "wbinfo ping-dc"  and "net ads info" show the 
following:

# /opt/samba/bin/wbinfo --ping-dc
checking the NETLOGON for domain[FLEET] dc connection to "" failed
failed to call wbcPingDc: WBC_ERR_DOMAIN_NOT_FOUND

# /opt/samba/bin/net ads info
LDAP server: 10.5.20.13
LDAP server name: VSPWADRO01M.FLEET.AD
Realm: FLEET.AD
Bind Path: dc=FLEET,dc=AD
LDAP port: 389
Server time: Mon, 20 Apr 2020 01:08:45 EDT
KDC server: 10.5.20.13
Server time offset: 0
Last machine account password change: Tue, 03 Mar 2020 11:48:12 EST

It seems the issue started when they added a read only domain 
controller, which is just VSPWADRO01M.FLEET.AD
When the issue is recovered the "wbinfo ping-dc"  and "net ads info" 
show the following, so the DC selected is not VSPWADRO01M.FLEET.AD

# /opt/samba/bin/net ads info
LDAP server: 10.5.2.11
LDAP server name: PSPWAD01P.FLEET.AD
Realm: FLEET.AD
Bind Path: dc=FLEET,dc=AD
LDAP port: 389
Server time: Mon, 20 Apr 2020 03:59:19 EDT
KDC server: 10.5.2.11
Server time offset: 0
Last machine account password change: Tue, 03 Mar 2020 11:48:12 EST

# /opt/samba/bin/wbinfo --ping-dc
checking the NETLOGON for domain[FLEET] dc connection to 
"vspwad01p.FLEET.AD" succeeded

Regards
Andrea






Regards
Andrea Cucciarre'


On 4/20/2020 7:01 PM, Rowland penny via samba wrote:
> On 20/04/2020 17:49, Andrea Cucciarre' via samba wrote:
>> Does the "password server" setting in the smb.conf achieve it?
> No, you shouldn't use this, you should allow Samba to choose the best 
> DC to use.
>>
>> On 4/20/2020 6:40 PM, Andrea Cucciarre' wrote:
>>> Hello,
>>>
>>> Is there a way to provide a list of DC that Samba should try to join?
>>> I know that in command "net ads join" I can use "-S" to select with 
>>> DC to use, but it seems it doesn't accept list, only one single server.
>
> Why do you feel you need to do this ?
>
> If you do not specify a DC to use during the join, Samba will search 
> for the best DC to use.
>
> It might help if you can tell us why you need to specify a particular 
> DC or list of DC's.
>
> Rowland
>
>
>
>