[Samba] [found something] Problems making use of 2K PDC

[Andreas Hasenack]

Em Fri, Jan 31, 2003 at 03:01:30PM +0000, John H Terpstra escreveu:
> > And, since the w2k server is on a different subnet, I don't think I can make it
> > the logon server for my clients, or can I? I mean, broadcasts mean a lot in a
> > MS network...
> 
> You must use WINS to avoid broadcast traffic. With WINS the important UDP
> traffic will be unicast. WINS can reduce UDP broadcast traffic by up to
> 95%. Using WINS, you clients will readilly locate the logon server. I
> would recommend not using file and print shares over the WAN link though.

But how does the windows client find out who the domain controller is for
a specific domain? Does WINS advertise that info too?
When I make a windows client join a domain, it never asks me for the name
of the domain controller... Just the name of the domain.

> > Should I then just make the clients authenticate against the remote w2k machine
> > anyway? I know, in both scenarios, the w2k server will be contacted anyway, either
> > by the samba server or by the linux client.
> 
> Correct. That's my recommendation.

What about using security = server, point the password server at the w2k
machine and set domain logons = yes? Should this work?