[KLUG Members] Setting netbios node type via ISC dhcpd (answer)
Adam Williams
members@kalamazoolinux.org
Fri, 14 Feb 2003 09:24:59 -0500 (EST)
>>Last night Mr. Brindleman asked how to set the netbios node type between
>>broadcast, hybrid, and point-to-point (WINS only) for Win32 clients.
>> dhcpOption: netbios-node-type 2
>Do you have something against the hybrid WINS-but-fall-back-to-broadcast
>model, such as a concern for security? IIRC, the Samba team promoted the
>hybrid model.
Our central office sets clients to the Hybrid model, but remote sites are
all set as point-to-point.
In part this is simply an architecural thing.
If your at a remote office (1) browseing for a server which are all at
one of the two main offices site will never find anything (2)
browse mastering is disabled on most Win32 clients so on a small LAN (they get as
few as 8 workstations) may not even find a browse master to query. It is
cleaner just to fail if you can't contact WINS.
Another issue is laptops. People wander about with them, and they are in
large part beyond our adminstrative reach. A WinY2k laptop deciding to
announce itself as browse master or even domain master to Win9x boxes is a
really confusing event. Especially if that laptop is plugged in, the WAN
circuit goes down (thanks Ameriwreck) the clients fall back to browse,
find the laptop browse master, then the WAN circuit comes back up.... and
they still can't find anything till they are rebooted - fun! I've only
had something like this happen once, but that was plenty. And according
to M$ docs it doesn't look like that ever *should* happen.....
We disabled browse master announce as we had a couple of Win32
workstations that were calling for elections on a perpetual basis, and
sending packets across the *WAN* saying "I'm the master now!", then the
Samba PDC would have to say "Like hell you are, I sill am!". Disabling
browse master capability outright seemed to fix it (the problem went
away). The M$ guy scratched his head, "it isn't supposed to do that".
Now I just disable it as a matter of course. The resulting name space
outages only lasted a few seconds and never seemed to effect anything -
but I don't like seeing queer stuff repeating in my logs.