<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Calibri" size="2"><span style="font-size:11pt;">
<div>Grrr...</div>
<div> </div>
<div>This is probably a Samba issue - a known one? - but I can't seem to get AD authentications to hit multiple DCs. Everything goes to the one listed in /etc/samba/smb.conf (which may be a coincidence).</div>
<div> </div>
<div>I set up several mschap instances like so:</div>
<div> </div>
<div>mschap mschap1 { ...</div>
<div> ntlm_auth -s /etc/samba/radius.smb1.conf</div>
<div>}</div>
<div> </div>
<div>mschap mschap2 { ...</div>
<div> ntlm_auth -s /etc/samba/radius.smb2.conf</div>
<div>}</div>
<div> </div>
<div>mschap mschap3 { ...</div>
<div> ntlm_auth -s /etc/samba/radius.smb3.conf</div>
<div>}</div>
<div> </div>
<div>I also disabled all PAP, CHAP, and references to "mschap" in all virtual servers listed in sites-enabled. There is currently no "mschap { ... }" section in modules/mschap.</div>
<div> </div>
<div>Added this to sites-enabled/campus-inner-tunnel where "mschap" was before:</div>
<div> </div>
<div>redundant-load-balance {</div>
<div> mschap1</div>
<div> mschap2</div>
<div> mschap3</div>
<div>}</div>
<div> </div>
<div>Authentication *works*, but all authentications go to the same DC (the one specified in "mschap2"). Running "radiusd -X" shows that all mschap1/2/3 instances are being called, and no authentication *attempts* are being sent to the other two domain controllers.
(1 and 3 aren't failing. They just aren't *tried*.)</div>
<div> </div>
<div>Am I going about this all the wrong way? Is this a known limitation in Samba? Is there something about ntlm_auth that always references /etc/samba/smb.conf, regardless of the -s option?</div>
<div> </div>
<div>Comments and criticisms welcome.</div>
<div> </div>
<div>--J</div>
<div> </div>
</span></font>
</body>
</html>