[Samba] PDC-BDC fallback no netlogon

[Peter Eser]

I have a Samba 3.025a PDC and BDC with LDAP running.
If I simulate a BDC crash the Client connects the PDC, but the
netlogon share is not accessed. This happens only at the first login
at the PDC. The second login is ok.
It seems that the client does not even try to access the netlogon share.

Log (level 2) for the first login on the PDC:
[2007/06/26 11:11:49, 2] lib/smbldap.c:smbldap_open_connection(785)
  smbldap_open_connection: connection opened
[2007/06/26 11:11:51, 2] passdb/pdb_ldap.c:init_sam_from_ldap(545)
  init_sam_from_ldap: Entry found for user: pes
[2007/06/26 11:11:51, 2] passdb/pdb_ldap.c:init_group_from_ldap(2158)
  init_group_from_ldap: Entry found for group: 1060
[2007/06/26 11:11:51, 2] auth/auth.c:check_ntlm_password(309)
  check_ntlm_password:  authentication for user [pes] -> [pes] -> [pes]
succeeded
[2007/06/26 11:11:51, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2916)
  Returning domain sid for domain HS ->
S-1-5-21-2466667265-2382055081-4215993616
[2007/06/26 11:11:51, 2] passdb/pdb_ldap.c:init_sam_from_ldap(545)
  init_sam_from_ldap: Entry found for user: pes
[2007/06/26 11:11:51, 2] passdb/pdb_ldap.c:init_group_from_ldap(2158)
  init_group_from_ldap: Entry found for group: 1060
[2007/06/26 11:11:51, 2] passdb/pdb_ldap.c:init_group_from_ldap(2158)
  init_group_from_ldap: Entry found for group: 1060


Log for the second login:
[2007/06/26 11:14:22, 2] passdb/pdb_ldap.c:init_sam_from_ldap(545)
  init_sam_from_ldap: Entry found for user: pes
[2007/06/26 11:14:22, 2] passdb/pdb_ldap.c:init_group_from_ldap(2158)
  init_group_from_ldap: Entry found for group: 1060
[2007/06/26 11:14:22, 2] auth/auth.c:check_ntlm_password(309)
  check_ntlm_password:  authentication for user [pes] -> [pes] -> [pes]
succeeded
[2007/06/26 11:14:22, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2916)
  Returning domain sid for domain HS ->
S-1-5-21-2466667265-2382055081-4215993616
[2007/06/26 11:14:22, 2] passdb/pdb_ldap.c:init_sam_from_ldap(545)
  init_sam_from_ldap: Entry found for user: pes
[2007/06/26 11:14:22, 2] passdb/pdb_ldap.c:init_group_from_ldap(2158)
  init_group_from_ldap: Entry found for group: 1060
[2007/06/26 11:14:22, 2] auth/auth.c:check_ntlm_password(309)
  check_ntlm_password:  authentication for user [pes] -> [pes] -> [pes]
succeeded
[2007/06/26 11:14:22, 2] passdb/pdb_ldap.c:init_sam_from_ldap(545)
  init_sam_from_ldap: Entry found for user: pes
[2007/06/26 11:14:22, 2] passdb/pdb_ldap.c:init_group_from_ldap(2158)
  init_group_from_ldap: Entry found for group: 1060
[2007/06/26 11:14:22, 1] smbd/service.c:make_connection_snum(1033)
  tdn-n07 (172.17.17.65) connect to service netlogon initially as user pes
(uid=1290, gid=1060) (pid 11984)
[2007/06/26 11:14:22, 2] passdb/pdb_ldap.c:init_group_from_ldap(2158)
  init_group_from_ldap: Entry found for group: 1060
[2007/06/26 11:14:24, 2] smbd/open.c:open_file(391)
  pes opened file pes.vbs read=Yes write=No (numopen=1)
[2007/06/26 11:14:24, 2] smbd/open.c:open_file(391)
  pes opened file pes.vbs read=Yes write=No (numopen=2)
[2007/06/26 11:14:24, 2] smbd/close.c:close_normal_file(399)
  pes closed file pes.vbs (numopen=1) NT_STATUS_OK
[2007/06/26 11:14:24, 2] smbd/close.c:close_normal_file(399)
  pes closed file pes.vbs (numopen=0) NT_STATUS_OK
[2007/06/26 11:14:34, 1] smbd/service.c:close_cnum(1230)
  tdn-n07 (172.17.17.65) closed connection to service netlogon

The Domain controllers are on different networks, both run as wins server.
The client has 2 wins server entries.
Client is Windows XP.

Also the environment variable LOGONSERVER is on the old (BDC) value. Seems
that XP does some caching?

Any hints welcome...