[Samba] Authentication to Secondary Domain Controller initially fails when PDC is offline

Rowland Penny rowlandpenny241155 at gmail.com
Fri Nov 20 12:08:45 UTC 2015

On 20/11/15 11:07, mathias dufresne wrote:
> I would not perform test unplugging DC ethernet cables but rather
> unplugging clients ethernet cables.

That is a totally different problem there, if there are no DCs 
available, can users still login?
'winbind offline logon = yes' will deal with this


> This because you seem to have already several DC 'at least 2 as one is
> called DC2) so normally, if you don't have a too bad karma, both servers
> should go down at same time.
> But your client can become unavailable to reach your working DCs. A user
> with a laptop can use his laptop outside of your LAN.
> And what seems to me important is that user can use his laptop when it
> can't discuss with DCs.
> On your enterprise LAN the whole AD should not become unavailable: you
> designed it for it is always available (several DC are meant for that
> purpose) so that seems to me a non-relevant test case. But of course I
> don't know your context and perhaps it is a valid test case for you ;)

More information about the samba mailing list