New Microsoft Knowledgebase article

[Jason Levine]

Paul Rogers <paul.rogers at mis-cds.com> wrote:

>In /etc/smb.conf, edit / add the following lines to be:
>
>domain master = no
>local master = no
>domain logons = no
>os level = 20

No -- "local master" has nothing to do with being a primary domain controller, 
it's purely a local master browser thing.  Likewise, "os level" is only 
whether or not a machine can become the local master browser in the selection 
process with other machines, and has nothing to do with the PDC role.  And 
"domain logons", so far as I can tell, has absolutely no effect when the 
security model is set to domain ("security=domain") -- it's a Win9X thing, and 
it's purely for workgroups, not for domains.

All this illustrates my problem with this whole discussion -- there's a lot of 
ego flying around about how certain users aren't "qualified" to have samba 
boxes, when we're talking about a configuration that's clearly confusing even 
to some long-time samba users.  "DOmain master" and "local master" mean very 
different things, about entirely different roles (PDC/DMB vs LMB), despite 
being named such that it's not an entirely out-there conclusion that they are 
similar, and I'd venture to guess that many samba admins have made this 
mistake (and fixed it on their own, when they read the docs).

Yes, MS didn't document the right remedy -- but then again, neither did a lot 
of posts to this very list, the technical list for samba and NT domain 
controller code.

/jason

/--------------------------------------------------------------\

For PGP public key, go to: http://www.queso.com/keys/siphoto.txt

Fingerprint: DB4C C56A 74ED 5F6E 1A7C  39B4 7354 01FD 8793 E537