[Samba] how to manually specify domain controllers

[L.P.H. van Belle]

If you would share your setup, that would be very nice. 
Im planning the same, i'll learn from any example. 

You can use a "round-robin" dns entry for the radius if freeradius dont give the option to use multiple hostname in "uri" and not "host" 


Best regards, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Dennis Xu
> Verzonden: maandag 11 april 2016 14:55
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] how to manually specify domain controllers
> 
> Hi Jonathan,
> 
> Thank you for your reply. I have FreeRadius installed on both Samba
> servers and authenticate to Active Directory domain controllers(not the
> local Samba server). In this scenario, there is possibility that both
> Samba servers pick up the same domain controller(using DNS resolution) to
> authenticate which could cause uneven load problem.
> 
> Dennis
> 
> 
> 
> Dennis Xu, MASc, CCIE #13056
> Analyst 3, Network Infrastructure
> Computing and Communications Services(CCS)
> University of Guelph
> 
> 519-824-4120 Ext 56217
> dxu at uoguelph.ca
> www.uoguelph.ca/ccs
> 
> ----- Original Message -----
> 
> From: "Jonathan Hunter" <jmhunter1 at gmail.com>
> To: "samba" <samba at lists.samba.org>
> Sent: Sunday, April 10, 2016 8:56:05 PM
> Subject: Re: [Samba] how to manually specify domain controllers
> 
> Hi,
> 
> I see you have had no replies as of yet.. Can you clarify the scenario -
> is
> freeradius installed on both of your samba servers, and configured to
> authenticate against the local samba server for active directory
> integration? Or is the scenario something different?
> 
> I use freeradius here; each of my DCs has freeradius installed and
> configured to use the local samba server. But it's down to my radius
> clients to pick the correct DC / radius server to authenticate against, if
> I want to spread the load..
> 
> J
> 
> On 8 April 2016 at 21:19, Dennis Xu <dxu at uoguelph.ca> wrote:
> 
> > We have two Samba 4.2.3 servers with FreeRadius to authenticate wireless
> > users against active directory. Using DNS, sometimes both servers end up
> > using the same domain controller to authenticate users. I would like to
> > distribute the load to different DCs. Is there a way to manually point
> > Samba to certain DCs?
> >
> > I tried the following configuration:
> > security = ads
> > password server = dc05.cfs.uoguelph.ca
> > realm = cfs.uoguelph.ca
> >
> > But after restarted the smb, nmb and winbind servers, the server is
> still
> > using the old DC for authentication(not switching to
> dc05.cfs.uoguelph.ca).
> > Any ideas?
> >
> > Thanks!
> >
> >
> > Dennis Xu
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
> >
> 
> 
> 
> --
> "If we knew what it was we were doing, it would not be called research,
> would it?"
> - Albert Einstein
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba