CVS update: samba/source/nsswitch

[Andrew Tridgell]

> There's a different type of fix for this in HEAD.  If the machine account
> password is changed within a certain time period (set to 3600s in HEAD -
> too long!) then use the PDC instead of a BDC.

That doesn't solve the problem.

At connectathon we had a PDC and a BDC, both Win2000 servers. When a
new user was added to the PDC it didn't show up in wbinfo for over 5
minutes because the PDC and BDC were not running their replication
protocol often enough and Samba had chosen to talk to the PDC.

> I'm a bit concerned about putting too much load on the PDC in large
> domains.

very true, but waiting 5 minutes for user changes to show up isn't
really acceptable :)