<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Hi Russell,<div><br></div><div>How many groups are the users you login with a member of?</div><div><br></div><div>Is the primary DNS search domain correct on the client machines? How many AD DCs do you have and are they on the same subnet?<br><br><div dir="ltr"><div><span style="background-color: rgba(255, 255, 255, 0); font-size: 14pt;">Warm Regards,</span></div><div><div dir="ltr"><div><div dir="ltr"><div class="WordSection1" style="page: WordSection1;"><div><p class="MsoNormal" style="margin: 0cm;"><span style="background-color: rgba(255, 255, 255, 0);"><b>Lilac Kapul</b><b> </b>(she/they)<o:p></o:p></span></p></div><div><p class="MsoNormal" style="margin: 0cm;"><o:p style="background-color: rgba(255, 255, 255, 0);"> </o:p></p></div><div><p class="MsoNormal" style="margin: 0cm;"><span style="background-color: rgba(255, 255, 255, 0);"><b>M</b> <a href="tel:+61432114172">0432 114 172</a> <b>E</b> <a href="mailto:ileyd@icloud.com">ileyd@icloud.com</a></span></p></div></div></div></div></div></div></div><div dir="ltr"><br><blockquote type="cite">On 9 Jun 2022, at 14:14, Russell Coker via linux-aus <linux-aus@lists.linux.org.au> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><span>I have a setup of sssd (the Linux Active Directory client) talking to a </span><br><span>locally hosted AD instance which also has an Azure AD domain (which isn't </span><br><span>supported by sssd) mirroring some of the data. I'm getting repeated DNS </span><br><span>lookups for the above SRV entry, any idea of what this is about and what the </span><br><span>right value should be?</span><br><span></span><br><span>The real problem is poor performance with slow logins (like it's timing out </span><br><span>trying to connect to the wrong server) and it appears that doing hundreds of </span><br><span>DNS requests for things that don't exist is likely to be part of that problem.</span><br><span></span><br><span>What does Kerberos expect with the _http service? Does it expect the server </span><br><span>running on port 88?</span><br><span></span><br><span>I'd appreciate any responses that give a clue here. Could be from the AD side </span><br><span>how I can probe the AD setup or just guess what it's doing (assuming that most </span><br><span>of it will be default options). Could be from the Linux/SSSD side of what the </span><br><span>client is expecting and how to make it happy.</span><br><span></span><br><span>Also I'm going to try to get the Ubuntu adsys package to work, currently </span><br><span>installing it breaks AD on that workstation. But that's a later thing.</span><br><span></span><br><span>-- </span><br><span>My Main Blog http://etbe.coker.com.au/</span><br><span>My Documents Blog http://doc.coker.com.au/</span><br><span></span><br><span></span><br><span></span><br><span>_______________________________________________</span><br><span>linux-aus mailing list</span><br><span>linux-aus@lists.linux.org.au</span><br><span>http://lists.linux.org.au/mailman/listinfo/linux-aus</span><br><span></span><br><span>To unsubscribe from this list, send a blank email to</span><br><span>linux-aus-unsubscribe@lists.linux.org.au</span><br></div></blockquote></div></body></html>