Is it possible to fork multiple child Winbindd processes and setup multiple connections to the primary DC?

[Stefan (metze) Metzmacher]

Hi Kevin,

> If only one DCERPC connection can be setup at a time, then it's really sad. Is there any document that specify this DCERPC behavior? I read through MS document "Netlogon Remote Protocol Specification (MS-NRPC.pdf)", but didn't find any description about it.

Section 3.3.1 Netlogon as a Security Support Provider - Abstract Data
Model is a bit
confusing, as it talks about ClientSequenceNumber and ServerSequenceNumber.
But each peer just have one Sequence_Number counter, which is
incremented with
each outgoing and incoming message, this sadly implies that client and
server
have to do the message processing sequentially.

Multiple DCERPC connections are supported, but not multiple outstanding
requests on one DCERPC connection.

This multiple DCERPC connection can run over just one single SMB connection.

Andrew: it's a bug in the source4/winbind code that it sends multiple
outstanding requests.
Which could lead to a deadlock, when we're talking to ourself.
See https://bugzilla.samba.org/show_bug.cgi?id=9097

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20120815/aee7859a/attachment.pgp>