samba - Oct 2017 - possible to use ldbedit in a safe way

Hi Rowland,

On 10/16/2017 05:13 PM, Rowland Penny via samba wrote:
> If you need to edit the NCs in sam.ldb.d, use '--cross-ncs' with
the
> ldb command, this allows you safely change things. There have been
> reports of AD being destroyed by directly editing the ldb's in
sam.ldb.d
Looking at the man page of ldbedit, I see no reference to --cross-ncs

Tried:
> ldbedit --cross-ncs -e nano -H
./CN=CONFIGURATION,DC=SAMBA,DC=COMPANY,DC=COM
but that gives the ldbedit --help page.

MJ

On Tue, 17 Oct 2017 11:12:20 +0200
mj <lists at merit.unu.edu> wrote:
> Hi Rowland,
> 
> On 10/16/2017 05:13 PM, Rowland Penny via samba wrote:
> > If you need to edit the NCs in sam.ldb.d, use '--cross-ncs'
with the
> > ldb command, this allows you safely change things. There have been
> > reports of AD being destroyed by directly editing the ldb's in
> > sam.ldb.d
> 
> Looking at the man page of ldbedit, I see no reference to --cross-ncs
Try 'ldbedit --help'
> 
> Tried:
> 
> > ldbedit --cross-ncs -e nano
> > -H ./CN=CONFIGURATION,DC=SAMBA,DC=COMPANY,DC=COM 
> 
try 'ldbedit --cross-ncs -e nano -H /path/to/sam.ldb'

Don't try to edit './CN=CONFIGURATION,DC=SAMBA,DC=COMPANY,DC=COM'
directly

Rowland

On 10/17/2017 11:44 AM, Rowland Penny via samba wrote:
> 
> try 'ldbedit --cross-ncs -e nano -H /path/to/sam.ldb'
> 
Thanks!