problem with an application that uses ldap to authenticate on AD.

Is one domain controller more available than the others (on-site vs over slow-link, etc)? Does your application have ability to configure 2 ldap servers? Might be worth it to configure MyADSite.local and DC2.MyADSite.local if possible. Or, although not ideal, the most reliable DC as the LDAP server.

Hello @Gabriele Martufi ,

Thank you for posting here.

Based on the description "tries to request authentication also from the unreachable domain controller, going into error.", do we mean the ldap authentication for the application fails at last?

If so, what error message do we receive?

Meanwhile, we can check:

1.Check whether your computer with an application is in the same site as the unreachable DC?
2.Whether all the 3 domain controllers have been configured to uses ldap to authenticate this application. Or whether we only configure LDAP authentication for the application using this unreachable domain controller.
3.If we only configure the other two domain controllers (assue the other two DCs are also DNS servers) as the DNS server of the computer with application, check whether the issue persists.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.