samba - Oct 2005 - LDAP Samba BDC

Hi,  

I was wondering if a Samba BDC should be able to create users and computer 
accounts when connecting to a LDAP PDC server? Should the add scripT lines 
be included in a BDC's smb.conf file? 
Normally, as far I know, BDC should just log on users. Or am I wrong? 

Thanks,

On Sun, Oct 30, 2005 at 07:06:10AM +0100, robert.walland@r-kb.si
wrote:
> I was wondering if a Samba BDC should be able to create users and computer 
> accounts when connecting to a LDAP PDC server? Should the add scripT lines 
> be included in a BDC's smb.conf file? 
I'm also not so sure. Samba knows how to deal with a ldap slave server,
so it would just follow the referrals to the master. I'm also assuming
that when adding a computer account to the domain (like net rpc join),
the client would be looking for the domain master browser netbios
resource, which only the pdc has. But I haven't tested any of this.
> Normally, as far I know, BDC should just log on users. Or am I wrong? 
It can also serve files and share printers as usual, but on large
networks people tend to let it only serve logons to minimize logon
delay.

On Sun, 2005-10-30 at 07:06 +0100, robert.walland@r-kb.si
wrote:
> Hi,  
> 
> I was wondering if a Samba BDC should be able to create users and computer 
> accounts when connecting to a LDAP PDC server? Should the add scripT lines 
> be included in a BDC's smb.conf file? 
> Normally, as far I know, BDC should just log on users. Or am I wrong? 
You should include identical configuration on your BDC as your PDC.
While clients should not contact the BDC, for the small price of a few
scripts, I like a deterministic outcome.  

Samba knows little of the PDC/BDC distinction, as the master/slave ldap
detail is back in the LDAP backend, and not seen except in the form of
chased referrals.  (I have run multiple 'PDC' machines, where I have
separate subnets, as well as had a PDC back to the slave ldap server).

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20051031/e8cd4165/attachment.bin