security=DOMAIN -> security=USER, authentication=DOMAINMEMBER

[Dominik Kubla]

I guess the best would be to simply add a security parameter "MASTER"
to the existing options.  If security=MASTER is set and "password server"
is unset that implies a PDC.  If "password server" is set then we have
a BDC...

Yours,
  Dominik Kubla