[PATCH] Save some DNS and NBT name queries while joining a domain

Uri Simchoni urisimchoni at gmail.com
Wed Jul 8 19:31:59 UTC 2015


I think in principle you could join by finding a DC using NetBIOS,
find the domain FQDN via CLDAP, and continue from there. So "net ads
join <flat-name>" is a supported option. Given that, if a domain name
is given in the command line, I didn't want to presume what type of
name it is, except if it cannot be a flat name.

Thanks,
Uri.


On Tue, Jul 7, 2015 at 9:49 PM, Volker Lendecke
<Volker.Lendecke at sernet.de> wrote:
> On Tue, Jul 07, 2015 at 09:23:00PM +0300, Uri Simchoni wrote:
>> On Tue, Jul 7, 2015 at 2:50 PM, Volker Lendecke
>> <Volker.Lendecke at sernet.de> wrote:
>> > On Sun, Jul 05, 2015 at 12:24:14PM +0300, Uri Simchoni wrote:
>> <snip>
>> >>
>> >> [1/2] is a re-submission of something I sent about a week ago -
>> >> letting dsgetdcname() know whether the given domain name is the FQDN
>> >> or the flat name. This saves rather pointless queries (use NBT to
>> >> lookup FQDN, use DNS to look for flat names), and also fixes one case
>> >> in which the on-site DC is an RODC and netbios is disabled.
>> >
>> > This looks good to me.
>> >
>> > One question: Why do you only apply it for an explicitly
>> > given domain name? Doesn't the same also apply to the
>> > default value of "domain", which is lp_realm()?
>> >
>>
>> domain_name_type is initialized with JoinDomNameTypeDNS, so if no
>> explicit domain name is given, the lookup is DNS only.
>
> I've seen that. I just wonder then why the explicit command
> line entry needs so different handling. I'll shut up and let
> people with more Kerberos knowledge comment here :-)
>
> Volker
>
> --
> SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
> phone: +49-551-370000-0, fax: +49-551-370000-9
> AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
> http://www.sernet.de, mailto:kontakt at sernet.de



More information about the samba-technical mailing list