DCLocator | Acitve Directory Client logon
The netlogon service in DC is responsible for registering SRV records in the DNS server under _tcp.dc._msdcs.domain.com. It then registers the SRV records of Domain Controller under _sites.dc._msdcs.domain.com. based on their site location.
When a client first tries to login to an AD network, the client sends a DNS request for finding the DC's under, _ldap._tcp.dc._msdcs.domain.com. From the list, it chooses a DC server randomly for authenticating. Then the client sends an LDAP ping to the DC asking for the site it is based on with respect to the IP address of the client. The DC then returns the site which the client's IP address is most related to, along with the current site and a flag DSClosestFlag which would be either 0 or 1 based on whether the current authenticated DC is the closest to the client. If this flag indicates that the client is not authenticated to the closest DC, the client sends a site specific DNS query for finding the DC from _ldap._tcp._sitename._sites.dc._msdcs.domain.com.
Comments
Post a Comment