[Samba] terrible browsing performance by connection failure to an nonrelevant pdc at ads configuration

[Pierre Bernhardt]

Hi,

the situation:

Config ADS with more than on tree but trusted between them.

It looks like this:

Root_A -- Trunk_C---Samba_WeAre
   |------Trunk_D---PDC_Not_Available_E
   |         |------PDC_Available_F
   |
trusted
   |
   |
Root_B--Other_Unknow

We trust A, C and D.
Normally E and F are available and users from
F can connect also Users from PDC at C.

Now the connection between D and E is broken so PDC
at E is not further available.

At every request winbind is doing, it needs
a lot of minutes before it ends the request.
For this time all is waiting.

1st: Is there a value vor these timeout so winbind will
finish the request faster?

Our workaround is at the moment to delete all
IP Entries to the failed domain because if winbind
cannot find the ip it will not try to connect.

In --sequence is E still readable but disconnected.

2nd: Normally we have no user from E. Is there a way
to forbid the resolve of E? (the machine accounts
from this domain is engaging our free samba uid
mappings if the pdc is available)

I hope any can help me to fix this both problems.

Samba is 3.0.2 and/or 3.0.7.

Thx...
Pierre Bernhardt

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 290 bytes
Desc: OpenPGP digital signature
Url : http://lists.samba.org/archive/samba/attachments/20060308/f1cf0247/signature.bin