[Samba] Authentication to Secondary Domain Controller initially fails when PDC is offline

[James]

On 12/10/2015 8:11 AM, Rowland penny wrote:
>
>
> Hmm, still using bind on dc1, back to dc1 and stopped bind9:
>
> root at dc2:~# dig SOA +multiline samdom.example.com
>
> ; <<>> DiG 9.9.5-9+deb8u2-Debian <<>> SOA +multiline samdom.example.com
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60862
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;samdom.example.com.    IN SOA
>
> ;; ANSWER SECTION:
> samdom.example.com.    3600 IN    SOA dc2.samdom.example.com. 
> hostmaster.samdom.example.com. (
>                 101        ; serial
>                 900        ; refresh (15 minutes)
>                 600        ; retry (10 minutes)
>                 86400      ; expire (1 day)
>                 3600       ; minimum (1 hour)
>                 )
>
> ;; AUTHORITY SECTION:
> samdom.example.com.    900 IN NS dc2.samdom.example.com.
> samdom.example.com.    900 IN NS dc1.samdom.example.com.
>
> ;; ADDITIONAL SECTION:
> dc1.samdom.example.com.    900 IN A 192.168.0.5
> dc2.samdom.example.com.    900 IN A 192.168.0.6
>
> ;; Query time: 7 msec
> ;; SERVER: 192.168.0.6#53(192.168.0.6)
> ;; WHEN: Thu Dec 10 13:06:24 GMT 2015
> ;; MSG SIZE  rcvd: 162
>
> It is now using itself as the NS
>
> Rowland
>

This is the behavior I would expect to see.

-- 
-James