During Michael's tutorial today we found that the wbinfo --check-secret got removed from the samba event script for security=ads (or domain), while it probably should have been replaced by wbinfo --ping-dc which does not impact the load as heavily.
Created attachment 6443 [details]
fix by adding --ping-dc
wbinfo --ping-dc was added but found to be too unreliable. It caused the health status of nodes to flip-flop and was dropped in favour of just using wbinfo -p.
OK to close with WONTFIX?
There looks to be no desire to change existing behaviour, so closing.