shared MACHINE.SID

[Luke Kenneth Casson Leighton]

On Sat, 30 Jan 1999, Todd Pfaff wrote:

> What are the implications of sharing /usr/local/samba/private/MACHINE.SID
> between a group of samba servers, one of which is a samba PDC, and the
> others are domain members?

bad idea.

which is why, in latest cvs, i use SAM_DATABASE_NAME.SID not MACHINE.SID
(renaming MACHINE.SID if it exists.  do not run latest cvs then revert to
2.0.0 without *manually* renaming the file back to MACHINE.SID)

> Does every samba server, PDC or otherwise, have a MACHINE.SID file, or
> is this file only created and used by a samba PDC?

every NT-domain server needs a SID to represent its SAM database.  for
members-of-domain that goes under the machine name (local SAM).  for
domain-masters that is the DOMAIN name (Domain SAM).