similar to: sambaAcctFlags for PDC

When BDC will not make any changes in ldap, is it safe to not set any *script paramater in smb.conf? --beast

Hi all ! In the samba-Howto, i was looking on informations on how to set up both a samba PDC and a samba BDC controller with ldap backend. I can read: -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Do not install a Samba PDC on a OpenLDAP slave server... Possible PDC/BDC plus LDAP configurations include: . PDC -> LDAP master server, BDC -> LDAP slave server.

Greetings everyone I finally succeeded in doing the seemingly most difficult thing, "following directions." I got my act together configuring the smb.conf and migrating using net rpc vampire into tdbsam. There are issues with this migration in which computer netbios names which are obviously all uppercase were not being created in /etc/passwd. I put my C cap on and converted the computer

I have a Samba 2.2.7 PDC, and I am now trying to set up a new 3.0.1 server. I want this machine to act as a BDC initially and replicate all the accounts over. When I followed the howto it said to use smbpasswd -S to transfer the machine SID and then to replicate the smbpasswd file to the new server. This has caused two major problems: 1) the smbpasswd command does not support the -S option

It apparently samba stored trusted info on secret.tdb so only samba PDC was able to retrieve this info, am I correct? (though trust account waqs stored in ldap). I can't browse samba BDC from (trusted) NT domain, it always ask for username/password again. samba domain = IRSJKT NT domain = DOMJKT msg from samba BDC : [2004/03/18 21:16:42, 5] auth/auth_util.c:make_user_info_map(216)

Dear Lists, I try to configure Samba as PDC LDAP backend with Linux-Suse-9.1 and smbldap-tools form www.idealx.org, I follow guide from SMB-3 by Example book. Step by step installation and configuration came with no error. except i couldnt join w2k workstation to the new domain with administrator account. # /var/lib/samba/sbin/smbldap-usershow administrator dn:

I have some weird error with one of my samba installation. When modifying samba password using smbpasswd, samba seems trying to add same attribute (instead of delete and add again), pls see the "MOD" from log file (from different domain) : UNSUCESSFULL Mar 15 17:10:53 hurricane slapd[27056]: conn=29489 op=1 MOD dn="uid=pwreka,ou=people,ou=purwakarta,dc=indorama,dc=com" Mar 15

Software: OS: Redhat 9 Samba Ver: Samba 3.0.0 (Plus excel writelock patch, waiting for 3.0.2!) OpenLDAP Ver: 2.0.27-8 Just a quick question about PDC / BDC interaction, my plan is to distribute Samba (with slave ldap backend) BDCs to remote facilities, as well as have one on each network segment in the hopes of avoiding unnecessary nmb broadcast traffic. My question is this: Will the PDC /

I've got two sites that I am planning a Samba3/LDAP implementation on, each will have its own local server. The problem is that I want to implement in my local office first, which is not the site that eventually will be the 'master' site. Sometime later when the proper master site comes online, I'd like to demote for lack of a better term, my local machine to a BDC and then

> -----Original Message----- > From: Andrew Bartlett [mailto:abartlet@samba.org] > > passdb backend = ldapsam:"ldaps://ldap1 ldaps://ldap2" > is what you want. This helped me a little bit forward. I suggest to add this line also to samba-pdc help. But still I ran into problems. I fixed the passdb lines on PDC and BDC. If the second server (on PDC slave-ldap and on BDC

Anyone dare to explain? For #2 I'm not using rpc vampire because it can't migrate hash password. ---- Hi, 1. I want to migrate NT to Samba 3 domain without needing to rejoin all machine (using same domain name and SID). just curious, machine account should belong to what group sid? does it matter if belong to any value? 2. I just examine output of pwdump, some of member domain or even

OS / Software: PDC / Master LDAP store: - Redhat 9 - OpenLDAP 2.1.25 - Samba 3.0.0 BDC / Slave LDAP store: - Redat 9 - OpenLDAP 2.0.27-8 - Samba 3.0.2 >From the Samba HOWTO Collection on www.samba.org: (Backup Domain Control) "Can I Do This All with LDAP? The simple answer is yes. Samba's pdb_ldap code supports binding to a replica LDAP server, and will also follow

I am so stoked I just had to share this with y'all. I just "SEAMLESSLY" migrated all of my machines and users over to my new Gentoo Linux Server. I even kept the same: domain name and old PDC NetBios name. The trickiest part was getting all of the users to keep their same profile, but I managed that by cloning the RID and Lanman/NT hashes for the user accounts. Free at last! #

hi, until now (about 1 year ago) i was working only with samba3+ldap PDC, but in near future my company enlarge his network with 6 new branchs spreaded all oever the country and i must build a scalable network with Samba-3 PDCs and BDCs, implement LDAP replication and multiple LDAP backends, all this over some VPNs(ipsec) . so, can tell me anyone how work the relationship beetwen a samba3-ldap

I'm just storing machine accounts under ou=computer,ou=site,dc=domain,dc=com and it works. Tested with W2K sp2 and W2K sp3, recreating from fresh ldif 2 times were never failed. Im sure it is 'stable' right now :-) 'works' means it was able to add machine trust on-the-fly, or using manual creation with smbpasswd command. The key is in not to use

Is it possible? just for wins server, not for file sharing. --beast

Hi, I am searching for information on how to set up an NT4 RAS server to authenticate users against a Samba 3 PDC. Right now we have 2 domain controllers and the plan is to phase them out. We want to set up samba as the PDC, but we need RAS to work for the time being. Is there a way to do this? We are going to use the LDAP backend for samba. Is it also possible to have our NT4 BDC stay

Hello, Our company is trying to implement central Windows Domain at HQ and replicated across all its regional offices. The implementation will have a PDC/LDAP-master on HQ and BDC/LDAP-slave on each regional office. In the hopes of saving bandwidth we are trying to avoid the use of WINS between WAN links. Is there any way of not using WINS and still have the clients find the PDC (for updating

If the first LDAP server faild, the second can be used directly. This server is a PDC server with more than 100 people connected and some application required domain authentification for running. For me is a critical server. ----------------------------------- St?phane PURNELLE stephane.purnelle@corman.be Service Informatique Corman S.A. Tel : 00 32

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Sorry for this general question, but I'd like to hear your opinion on this subject, but I'd like to set up a really working backup solution for my PDC, currently it uses NFS, so there are lots of issues: No ACLs, When NFS server goes down, everything fails. What method would you recommend for replicating folders, keeping existing ACLs