[Samba] Winbind resiliency in AD environment

[Rowland Penny]

On Thu, 12 Dec 2024 21:03:16 +0000
"Vaughan, Robert J via samba" <samba at lists.samba.org> wrote:

> Hello
> 
> What is the expected behavior of winbind on a member server when the
> AD DC it is communicating with becomes un-responsive?

A Samba AD DC shouldn't become un-responsive and it is recommended to
run multiple DCs.

> 
> Is this a configurable behavior?

Do you have 'winbind offline logon = yes' set on the Unix domain
members smb.conf file ?

> 
> Seems we have a 'hang' on authentication requests when we lose one of
> our DCs and a restart of winbind is our only way out at present

That shouldn't be required, perhaps a network trace when it happens
might help.

Rowland