[Samba] 2nd samba DC: NT_STATUS_NO_LOGON_SERVERS

[Stefan G. Weichinger]

Am 2017-12-28 um 16:07 schrieb Stefan G. Weichinger via samba:
> Am 2017-12-28 um 15:55 schrieb L.P.H. van Belle via samba:
>> Hai Stephan, 
>>
>> You need also this in smb.conf
>>
>>     # enable offline logins
>>     winbind offline logon = yes
> 
> On which server(s)? The DCs? the DM?
> 
>> I did also test my logins with one DC turned off. 
>> And login on the DM is no problem or my pcs, no problem. 
>>
>> I did not test the AD logins thats because these have only linux logins for maintainance. 
>> And that always works. 
> 
> We have logins via ADC2 working for 15 mins now.
> 
> I have set up sysvol-rsync (works), but the ADC2 logs failing access to
> the ADC1. Seems as if the GPOs point to ADC1 somehow?

If ADC2 is down (service ad-dc stopped) we see lines like this on ADC2:

Dez 28 18:44:01 adc2 samba[1743]:   Failed to connect host 10.0.0.224
(b0ca200f-4015-48e5-aa9e-2d85768ce6c2._msdcs.arbeitsgruppe.hidden.at) on
port 135 - NT_STATUS_CONNECTION_REFUSED.

... but GPOs get delivered now correctly (from the rsynced $SYSVOL on ADC2).

So we may ignore that as a "warning" somehow.

For now I am happy with today's progress.
thanks.