samba - Jun 2022 - Active Directory Domain Corruption.

On Wed, 2022-06-01 at 10:42 +0100, Rowland Penny via samba
wrote:
> 
> That is your decision, but, from my point of view, you are doing
> 
> everything wrong:
> 
> 
> 
> You are using an experimental kerberos.
> 
> You are running Bind9 in a chroot.
> 
> You are running Bind9 with flatfiles.
> 
> You have turned off dnsupdate.
> 
> You are using a DC as a fileserver.
> 
> 
Yet to be clear, none of these will be changing the contents of
sam.ldb. 

Andrew Bartlett

-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions

On Wed, 2022-06-01 at 21:51 +1200, Andrew Bartlett
wrote:
> On Wed, 2022-06-01 at 10:42 +0100, Rowland Penny via samba wrote:
> > That is your decision, but, from my point of view, you are doing
> > 
> > everything wrong:
> > 
> > 
> > 
> > You are using an experimental kerberos.
> > 
> > You are running Bind9 in a chroot.
> > 
> > You are running Bind9 with flatfiles.
> > 
> > You have turned off dnsupdate.
> > 
> > You are using a DC as a fileserver.
> > 
> > 
> 
> Yet to be clear, none of these will be changing the contents of
> sam.ldb. 
> 
> Andrew Bartlett
But the middle three should be.

Rowland