Solved

Query regarding Active Directory SRV records

Posted on 2009-05-05
5
515 Views
Last Modified: 2013-12-24
Hi Experts

I had a query regarding LDAP/Kerberos SRV records I was hoping someone could help me with.

Let's say I have 5 DC's in my site. I want users to be able to authenticate to each.

Would I have LDAP and Kerberos SRV records with each of the 5 DC's listed? Is it one LDAP/Kerberos SRV record per DC, or is there only one LDAP/Kerberos record which holds all the DC's?

Secondly, say I want users to use on DC preferentially...I understand that I can set the priority/weight...would i be correct in saying that that the lower the priority the higher preference the DC has? And if the priorities are equal, then the lower the weight the higher the preference?

I have been reading from here, but it doesn't go into too much detail;

http://technet.microsoft.com/en-us/library/cc961719.aspx
0
Comment
Question by:kam_uk
  • 2
  • 2
5 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 200 total points
ID: 24303585
The DNS server will automatically maintain SRV records for all DCs
If you want to start tinkering with the priority/weight (and I advise against it then)

Priority - low number = greater preference
Weight - high number = greater preference
0
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 200 total points
ID: 24303586
Yes you would have SRV records for each server.  See my screenshot -- I have 3 DCs in this test network
The lower weight would get less preference
See if this link helps with understanding weight/priority
http://technet.microsoft.com/en-us/library/cc787370.aspx
Thanks
Mike

ldap-kerberos-SRV.jpg
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24303606
KCTS -- if you have time can you send me an email off line (email on my profile) just want to ask you a quick question
Thanks
Mike
0
 
LVL 70

Assisted Solution

by:Chris Dent
Chris Dent earned 100 total points
ID: 24303801

If you have multiple records of equal priority then the weights are summed and queries distributed according to the relative weights.

For example, if I had these two:

_ldap   SRV   0 25 389  server1.domain.com.
_ldap   SRV   0 50 389  server2.domain.com.
_ldap   SRV   0 25 389  server3.domain.com.

In this case the total weight is 100, conveniently converted into a percentage that's 100%. Seeing the weights above, we can see that the division of queries would be 25% to server1, 50% to server2 and 25% to server3.

If you were to determine usage and the weights don't all neatly match up to 100 you would do:

Percentage Usage = (Record Weight / Total Weight) * 100

Chris
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24303804

> if I had these two:

Three... I can do math, but I can't count ;)

Chris
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Many companies are looking to get out of the datacenter business and to services like Microsoft Azure to provide Infrastructure as a Service (IaaS) solutions for legacy client server workloads, rather than continuing to make capital investments in h…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Video by: Steve
Using examples as well as descriptions, step through each of the common simple join types, explaining differences in syntax, differences in expected outputs and showing how the queries run along with the actual outputs based upon a simple set of dem…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question