[Samba] winbind loosing the ability to resolve hosts

[Schwiete, Ralf (AllianzGI)]

Hello,

we have an Samba-Server acting as Domain-Member in an Win2003 AD-Domain.

System: Solaris 9
Samba Version: 3.3.5

After a while winbind looses the ability to resolve the hostnames of the
DC's:
[2009/10/16 15:33:36,  3] libsmb/namequery.c:(1971)
  get_dc_list: preferred server list: ", DC-a DC-b DC-c DC-d ...."
[2009/10/16 15:33:36,  3] libsmb/namequery.c:(1306)
  resolve_hosts: Attempting host lookup for name DC-a<0x20>
[2009/10/16 15:33:36,  3] libsmb/namequery.c:(1325)
  resolve_hosts: getaddrinfo failed for name DC-a [host/servname not
known]
[2009/10/16 15:33:36,  3] libsmb/namequery.c:(1306)
  resolve_hosts: Attempting host lookup for name DC-b<0x20>
[2009/10/16 15:33:36,  3] libsmb/namequery.c:(1325)
  resolve_hosts: getaddrinfo failed for name DC-b[host/servname not
known]
[...]

Using "nslookup [DC-Name]" brings an IP-Adress back.

After restarting the winbind he finds the DC's. Does anibody else has
seen the behaviour before and knows how to solve this problem?

Samba-Config:

[global]

   workgroup = [Workgroup]
   server string = Samba Server 
   netbios name = [ServerName]

   security = ads
   realm = [realm]
   encrypt passwords = yes
   map to guest = never

   load printers = no
   interfaces = [IP]
   bind interfaces only = yes

   use spnego                      = yes
   encrypt passwords               = yes
   invalid users                   = root Administrator admin oracle
bgdft

   name resolve order = host

   log file = /usr/local/samba/var/log.%m
   max log size = 5000

   password server = DC-a DC-B DC-c DC-d

   passdb backend = tdbsam

   socket options = TCP_NODELAY SO_KEEPALIVE

   server schannel = auto

   template shell                  = /usr/bin/false

   lock directory = /usr/local/samba/var/locks
   private dir    = /usr/local/samba/private

   client schannel = no

   local master = no
   os level = 1
   ;os level = 0
   domain master = no
   preferred master = no
   domain logons = no
   wins support = no
   wins proxy = no
   dns proxy = no
   allow trusted domains = yes

   winbind separator = +
   idmap uid = 10000-30000
   idmap gid = 10000-30000
   winbind enum users = yes
   winbind enum groups = yes
   #winbind enable local accounts = yes
   winbind use default domain = no
   winbind cache time = 100
   winbind nested groups = yes
   template homedir = /home/%D/%U
   template shell = /usr/bin/false
   idmap config DEALIS:range = 40000-45000
   idmap config DE:range = 50000-55000

   log level = 3

   remote announce = DC-a DC-b DC-c DC-d

[Share_1]
(...)

nsswitch.conf:
passwd:     files winbind
group:      files winbind
# You must also set up the /etc/resolv.conf file for DNS name
# server lookup.  See resolv.conf(4).
hosts:      files dns winbind
(...)

Thankyou for your help and sorry again for the post before
Ralf