[Samba] security = user, multiple Sambas, shared LDAP

Daniel Pocock
2008-02-26T21:27:39Z

Consider the following scenario:

- a single OpenLDAP server, with a single instance of the object class
sambaDomain and a single SID:

dn: sambaDomainName=myserver,ou=samba,dc=example,dc=com
objectClass: sambaDomain
sambaDomainName: MYGROUP
sambaSID: S-1-2-3

- multiple Samba servers, each with the following configuration:

   security = user
   workgroup = MYGROUP

Is this a valid configuration?  Or does the SMB protocol require the
domain security to be used (security = domain) when all servers share a
single LDAP backend?

Regards,

Daniel