[Samba] Erratic behavior when Windows XP clients attempt to login to PDC

[Travis L. Bean]

I have noticed while testing my Samba 3.0.2a primary and backup domain
controllers with Windows XP clients, that when I attempt to login to the
Samba PDC, the XP client will sometimes randomly choose the backup
domain controller.  I only want the client to join the backup domain
controller when the PDC is offline.  I am not experiencing any random
network outages or DNS failures so I am bewildered as to why I am
experiencing this erratic bahavior.  The following is my global config.
from my smb.conf on my bdc and pdc. Any help and advice would be greatly
appreciated:


[global]
        workgroup = BIOLOGICAQUA
        server string = PDC-SRV
        passdb backend = 'ldapsam:ldaps://pdc-srv.biologicaqua.org
ldaps://bdc-srv.biologicaqua.org'
        passwd program = /usr/local/sbin/smbldap-passwd -o %u
        passwd chat = *new*password* %n\n *new*password:* %n\
*successfully*
        passwd chat debug = Yes
        log file = /var/log/samba/log.%m
        max log size = 50
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        add user script = /usr/local/sbin/smbldap-useradd -m "%u"
        add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
        add user to group script = /usr/local/sbin/smbldap-groupmod -m
"%u" "%g"
        delete user from group script = /usr/local/sbin/smbldap-groupmod
-x "%u" "%g"
        set primary group script = /usr/local/sbin/smbldap-usermod -g
"%g" "%u"
        add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
        logon script = netlogon.bat
        logon path = \\pdc-srv.biologicaqua.org\profiles\%U
        logon drive = H:
        logon home = \\pdc-srv.biologicaqua.org\%U\.profile
        domain logons = Yes
        os level = 64
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        ldap suffix = dc=biologicaqua,dc=org
        ldap machine suffix = ou=Computers
        ldap user suffix = ou=Users
        ldap group suffix = ou=Groups
        ldap admin dn = "cn=Manager,dc=biologicaqua,dc=org"
        ldap passwd sync = Yes
        ldap delete dn = Yes
        admin users = Admin-Access
        hosts allow = 10.0.0., 127.
        hosts deny = all


[global]
        workgroup = BIOLOGICAQUA
        server string = BDC-SRV
        passdb backend = 'ldapsam:ldaps://pdc-srv.biologicaqua.org
ldaps://bdc-srv.biologicaqua.org'
        passwd program = /usr/local/sbin/smbldap-passwd -o %u
        passwd chat = *new*password* %n\n *new*password:* %n\
*successfully*
        passwd chat debug = Yes
        log file = /var/log/samba/log.%m
        max log size = 50
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        add user script = /usr/local/sbin/smbldap-useradd -m "%u"
        add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
        add user to group script = /usr/local/sbin/smbldap-groupmod -m
"%u" "%g"
        delete user from group script = /usr/local/sbin/smbldap-groupmod
-x "%u" "%g"
        set primary group script = /usr/local/sbin/smbldap-usermod -g
"%g" "%u"
        add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
        logon script = netlogon.bat
        logon path = \\bdc-srv.biologicaqua.org\profiles\%U
        logon drive = H:
        logon home = \\bdc-srv.biologicaqua.org\%U\.profile
        domain logons = Yes
        os level = 32
        preferred master = Yes
        domain master = No
        wins support = Yes
        ldap suffix = dc=biologicaqua,dc=org
        ldap machine suffix = ou=Computers
        ldap user suffix = ou=Users
        ldap group suffix = ou=Groups
        ldap admin dn = "cn=Manager,dc=biologicaqua,dc=org"
        ldap passwd sync = Yes
        ldap delete dn = Yes
        admin users = Admin-Access
        hosts allow = 10.0.0., 127.
        hosts deny = all
        browseable = No