samba - Jun 2006 - methods to synchronize tdb files between hosts

I use winbind+AD for single sign-on to many Linux machines,
and the Linux hosts automount home directories on one Linux file server.
I am faced with a need to synchronize the *.tdb files on the file server
with all the Linux machines for consistent UID-to-loginID mapping.

Has this been tried by sharing the /var/lib/samba/ over nfs with the
other servers?  Are there any pitfalls?

Has this been tried by a regularly scheduled copy over the network?

Does anyone have a how-to or notes for a better approach?

John Stile wrote:
r.
> I am faced with a need to synchronize the *.tdb files on the file server
> with all the Linux machines for consistent UID-to-loginID mapping.
> Does anyone have a how-to or notes for a better approach?
Yes, use something like (in smb.conf):
 idmap backend = idmap_rid
or
 idmap backend = idmap_ad

-- Rex

Rex Dieter schrieb:
> John Stile wrote:
> r.
>   
>> I am faced with a need to synchronize the *.tdb files on the file
server
>> with all the Linux machines for consistent UID-to-loginID mapping.
>>     
>
>   
>> Does anyone have a how-to or notes for a better approach?
>>     
>
> Yes, use something like (in smb.conf):
>  idmap backend = idmap_rid
> or
>  idmap backend = idmap_ad
>
>   
Does this apply too, when there is a smaba pdc using ldap and many samba 
servers configured as memeber servers?
Do the memeber servers need unix account for sambausers or do they just 
receive authentification from the pdc using ldap?

Cheers

Torsten

they need to map authenticated users (by DCs) to unix accounts.
this can be done with tdbsam but is not recommended in multi samba 
domain server environments. in this case use ldap or rid instead (rid is 
easier to implement).

greez

Torsten Geile wrote:
> Rex Dieter schrieb:
>> John Stile wrote:
>> r.
>>  
>>> I am faced with a need to synchronize the *.tdb files on the file
server
>>> with all the Linux machines for consistent UID-to-loginID mapping.
>>>     
>>
>>  
>>> Does anyone have a how-to or notes for a better approach?
>>>     
>>
>> Yes, use something like (in smb.conf):
>>  idmap backend = idmap_rid
>> or
>>  idmap backend = idmap_ad
>>
>>   
> 
> Does this apply too, when there is a smaba pdc using ldap and many samba 
> servers configured as memeber servers?
> Do the memeber servers need unix account for sambausers or do they just 
> receive authentification from the pdc using ldap?
> 
> Cheers
> 
> Torsten
> 
> 
> 
-- 
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT Staff)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137
        49 (0)341 - 3550 374

Fax:   49 (0)341 - 3550 399