Samba - What if My Windows Domain Controller is Down?

forbin · 02-28-2011, 12:27 AM

My Windows 2003 domain has three domain controllers. All of them are configured as global catalog servers, but my krb.conf and krb5.conf only contain a reference to one of them.

What if the DC referenced is down? Should my files reference the other DCs?

The contents of my files follow...

krb.conf
--------
MYDOMAIN.COM dc01.MYDOMAIN.COM:88
MYDOMAIN.COM dc01.MYDOMAIN.COM:749 admin server

krb5.conf
---------
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
default_realm = MYDOMAIN.COM
dns_lookup_realm = true
dns_lookup_kdc = true

[realms]
MYDOMAIN.COM = {
kdc = dc01.MYDOMAIN.COM:88
admin_server = dc01.MYDOMAIN.COM:749
kpasswd_server = dc01.MYDOMAIN.COM:464
kpasswd_protocol = SET_CHANGE
#default_domain = example.com
}

[domain_realm]
*.MYDOMAIN.COM = MYDOMAIN.COM
.MYDOMAIN.COM = MYDOMAIN.COM

[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false

kabars_edge · 03-11-2011, 10:05 PM

Yes, not only shouldn't there be an issue with you listing multiple dc's, it should be a best practice. Additionally, in the smb.conf, there is an area to add password servers, you will need to add them there as well.

HTH,