samba - Dec 2010 - How can one set/reset machine account passwords

Scenario:

a) Samba with an ldap backend.

b) The ldap database becomes irretrievably corrupted.

c) I roll in a new ldap database from a known good copy.

d) Problem is the passwords for the machine accounts are out of date.

e) Is it possible to coax Samba & the clients (mostly XP) to resynch
their passwords?

f) I want to preserve the client computers SIDs & names.

g) I really don't want to have to rejoin them to the domain

h) I really don't want to have to visit each client computer individually.

2010/12/23 Taso Hatzi <taso.hatzi at gmail.com>:
> Scenario:
(snip)
> c) I roll in a new ldap database from a known good copy.
>
> d) Problem is the passwords for the machine accounts are out of date.
To disable to change machine account passwords, you will restore
passwords from backup.

To disable, execute below on your Samba DC:
 pdbedit -P "refuse machine password change" -C 1
(you may use net sam policy instead.)

or set each clients' DisablePasswordChange key as
 http://support.microsoft.com/kb/175468/en-us

---
TAKAHASHI Motonobu <monyo at samba.gr.jp>