[Samba] winbind seems to hang when the DC goes down instead of switching to the other available DC

Marco Gaiarin gaio at sv.lnf.it
Fri Aug 2 13:27:35 UTC 2019

Mandi! L.P.H. van Belle via samba
  In chel di` si favelave...

> Yes, best is to use the "localhost" dns setup as caching/forwarder only. 


> All you need is for the forwarding is :  

But, sorry me, whan advantage i have to use 'forward zone' instead of
using 'normal' dns zone handling (eg, supposing as suggested the AD
zone is in a subzone, using correctly glue records in the main zone)?

If i use normal dns zone handling, i set the NS glue record only in one
place (the parent zone file), and at least until i do 'the right thing'
(eg, i can resolv the parent zone), i'm OK.

While, if i set forward zone like:

> zone "your.dnsdomain.tld" {
>     type forward;
>     forwarders { IP_DC1; IP_DC2; };
> };

i can limit access to, eg, the local site NS/DC and not use the round
robin algorithm.
Also effectively, if i set as above, local bind *TRY* the listed
forwarders and then fallback to normal resolution, while if i set

	zone "your.dnsdomain.tld" {
		type forward;
		forwarders { IP_DC1; IP_DC2; };
		forward only;

i limit effectively the forward only to listed forwarders.

So, seems to me that adding a forward zone pointing to the site-local
NS/DC servers *WITHOUT* 'forward only' simulate more closely Windows
behaviour (eg, try NS in the local site, the try other/outer).


Just i'm here, there's some way to tackle 'roundrobin/handoff'
parameters between forwarders {} listed server, more or less like what
you suggest for /etc/resolv.conf?


dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

More information about the samba mailing list