[Dnsmasq-discuss] Problems with dnsmasq + authentication with AD

[Simon Kelley]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

There's an option to dnsmasq called --filterwin2k which was an
ill-concieved attempt to modify this sort of query. Check that you
don't have that enabled. Apart from that, I'm not aware of anything in
dnsmasq that could cause this.

Cheers,

Simon.


On 17/03/15 09:03, Erling Ringen Elvsrud wrote:
> Hi,
> 
> We use AD to authenticate users for our Linux-servers. Recently we
> started to try out dnsmasq in order to get better dns-request
> performance, better resiliance (more dns-servers, avoid timeout:1,
> etc with the standard glibc resolver).
> 
> Today I noticed that about every fifth logon attempt is a lot
> slower than normal (10x the time). If I stop dnsmasq the slowdowns
> seems to dissapear.
> 
> I can see with many ad-related dns-queries with wireshark when
> logon is slow like ForestDnsZones.mydomain  and
> DomainDnsZones.mydomain. The replies are large (tcp-based) these
> queries returns 20-30 A-records for many domain-controllers.
> 
> Are you aware of similar problems with the dnsmasq /
> ad-integration combination?
> 
> Thanks,
> 
> Erling
> 
> 
> 
> _______________________________________________ Dnsmasq-discuss
> mailing list Dnsmasq-discuss at lists.thekelleys.org.uk 
> http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCAAGBQJVCKNEAAoJEBXN2mrhkTWiTksP/0czuFYsKvU9oCz6FBMFQivW
tbgATUXAMxDT4PwMZVPVdhcNQiNkspO0fYf7eoLSRpdwLjw0Qcm2uHpoPREFZPVE
LXI+KSTc1qv2/Z3spAHiOLM1cF/8ERKlYwn3dlFbFTTW63XV53IRKsK1150uDqgH
WvAwdLAvXuaXrZt9HDt6Aqef+r6KnqGAkcfNIwwyLv7qTWDeT+xFcJ5qhfO+hFm9
LnZtEDs/r7rbTG8L3E2oyRl2eunWeyE9iYHqo2PEVLDur5QaAqxUbFmu1rYFPRIV
wCuMXz/n69Fwj6LMPlSQ2h/vl6SMYF2IXS0OnBeMVucuejWafJEguQFXMTCgPUuV
AjJXq8gl6NAtxW7JjvvxWJkDeSvUTHoZpHPHFa8Ioxvuzaoj1+OBaatwWyg4HtQf
V3KQSfduC1L+h3Xr7F3vHuGKr3kXT977QSdwb/VMXlay4ekQtpywNJga+vGhS/G1
2VWl0NxsIa2RxC+58m5qCBRP73Yz6JWYoDNr3sE6SRP5M0442SP518/SzMz//d8f
Fb6RzMdgqnWXHG1BbPYz7KfmnVdb15LJP7k6KsxWCDmHSpNSKlUwNxe0s5N+C9bv
5a0PlsbjnMn9iA6hGS125cbGsCU8h496BCFdKcbT4BQES9BcgYsPMwXiPAZ7h8lg
uwiUd71aUaOz0wPV9V46
=E5QU
-----END PGP SIGNATURE-----