[gptalk] Re: note re DFS referral / kb831201

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Fri, 1 Dec 2006 15:44:52 -0800

Graham-
Since your questions are probably a bit more geared towards DFS behavior, I
probably can't personally help much. But here goes:

1. yes, I believe that is the case because when you look at the LDAP queries
that go to AD during the initial setup of GP processing, one of them is for
the DFS object underlying SYSVOL.

2. I believe that it would be a random list of DCs in the site that is
normally returned. Not sure I understand the second part of the question--my
understanding of this KB is that it puts the logonserver DC at the top of
the DFS referral list just by reordering the list that is returned.

3. Yes, I believe it's a simple matter of try the replica, if it can connect
then use it. I could be wrong here however--it may actually ping the DC
first but I haven't done a sniffer trace of this. Also, keep in mind that
DFS referrals are cached for 180 minutes by default, if I remember
correctly.

Darren


-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Graham Turner
Sent: Thursday, November 30, 2006 10:53 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] note re DFS referral / kb831201

This is a query re the technote on www.gpoguy.com

re the issue of the server from which AD info retrived being different from
the one
which delivers GPO data

would like to understand the concept of DFS referral a bit better

1. I assume DFS referral request is sent to the logon server discovered by
SRV (not
SVC record lookup data) records in the DNS ??

2. the DFS server responds with a referral list

prior to this patch how would a DFS referral list be ordered ?

with this patch and configured with 'preferlogondc', what mechanism does the
DFS
server put the 'logon server' at the top of the list ?

3. how does the client respond to the DFS referral list say in terms of
connecting
to other servers in the list

retry / timeout if not avaialble ?

Thanks









***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at //www.freelists.org/archives/gptalk/
************************

Other related posts: