[PATCH] Save some DNS and NBT name queries while joining a domain

Uri Simchoni urisimchoni at gmail.com
Sun Jul 5 11:24:14 CEST 2015


Hi,
The attached patch set removes some name resolving queries while
running "net ads join". Those queries may lead to prolonged execution
of "net ads join" beyond what's necessary, or even to failure to join
in some cases.

[1/2] is a re-submission of something I sent about a week ago -
letting dsgetdcname() know whether the given domain name is the FQDN
or the flat name. This saves rather pointless queries (use NBT to
lookup FQDN, use DNS to look for flat names), and also fixes one case
in which the on-site DC is an RODC and netbios is disabled.
[2/2] adds "dns_lookup_realm=false" to samba-generated krb5.conf. This
saves on some TXT queries that are done by kerberos libs while
verifying the join. An alternative to this would be to let
cli_full_connection() know the FQDN of the domain, not just the server
it's connecting to.

Review appreciated,
Uri.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: net-ads-join.patch
Type: application/octet-stream
Size: 6860 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20150705/4169328c/attachment.obj>


More information about the samba-technical mailing list