RE: [ActiveDir] Cross forest trust and DNS

2005-12-14 Thread Bernard, Aric
e :) neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: 14 December 2005 09:12 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Cross forest trust and DNS Thanks Jorge I was aware of these. The provide good detail, but bo

RE: [ActiveDir] Cross forest trust and DNS

2005-12-14 Thread neil.ruston
e :) neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: 14 December 2005 09:12 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Cross forest trust and DNS Thanks Jorge I was aware of these. The provide good detail, but both of them a

RE: [ActiveDir] Cross forest trust and DNS

2005-12-14 Thread Tony Murray
PROTECTED] On Behalf Of Almeida Pinto, Jorge de Sent: Wednesday, 14 December 2005 8:25 p.m. To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Cross forest trust and DNS Tony, Found the following documents. I think this is what you were looking for Planning and Implementing Federated Forests

RE: [ActiveDir] Cross forest trust and DNS

2005-12-13 Thread Almeida Pinto, Jorge de
Sent: Wed 12/14/2005 3:46 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Cross forest trust and DNS Agreed, although it's nice to have a documented model to hand alongside the testing, as there are sometimes environmental variables that could sk

RE: [ActiveDir] Cross forest trust and DNS

2005-12-13 Thread Tony Murray
p.m. To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Cross forest trust and DNS   A network monitor and a test environment is often better than any other source. J   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: Tuesday, December 13, 2005 5

RE: [ActiveDir] Cross forest trust and DNS

2005-12-13 Thread Bernard, Aric
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric Sent: Wednesday, 14 December 2005 1:59 p.m. To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Cross forest trust and DNS   More information…   The DNS interactions work as follows (note that I have excluded most other

RE: [ActiveDir] Cross forest trust and DNS

2005-12-13 Thread Tony Murray
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric Sent: Wednesday, 14 December 2005 1:59 p.m. To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Cross forest trust and DNS   More information…   The DNS interactions work as follows (note that I have excluded most other

RE: [ActiveDir] Cross forest trust and DNS

2005-12-13 Thread Bernard, Aric
, December 13, 2005 2:00 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Cross forest trust and DNS   Thanks Jorge and Deji for your responses.   It sounds like we’re all pretty much of the same opinion, i.e. that there will be a sequence of attempts against a list of DCs in Forest B

RE: [ActiveDir] Cross forest trust and DNS

2005-12-13 Thread Almeida Pinto, Jorge de
configuring NOT to register domain wide DC locator records might work also. jorge From: [EMAIL PROTECTED] on behalf of Tony Murray Sent: Tue 12/13/2005 11:00 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Cross forest trust and DNS Thanks Jorge

RE: [ActiveDir] Cross forest trust and DNS

2005-12-13 Thread Tony Murray
doesn’t impact anything else.   Tony   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge de Sent: Wednesday, 14 December 2005 9:39 a.m. To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Cross forest trust and DNS   I would think the client

RE: [ActiveDir] Cross forest trust and DNS

2005-12-13 Thread Almeida Pinto, Jorge de
I would think the client receives a list of referrals and use the DC on top of the list and goes down the list until it finds a DC that responds. A client simply does not know why a certain DC does not respond. It can be anything... firewall, network, DC down or whatever. As there is no site

RE: [ActiveDir] Cross forest trust and DNS

2005-12-12 Thread deji
If the DC is unreacheable, the client places it in a (temporary?) blacklist and doesn't try it again for a set period of time. Now, what follows next is an informed guess (OK, maybe just a guess). the client will receive multiple DCs in the referral and will then move onto the next DC on that