That troublemaker again (replace domain logons =, domain master=)

[Simo Sorce]

On Tue, Nov 13, 2001 at 01:26:02AM +1100, Andrew Bartlett wrote:
>   Domain Master    Domain Logons      Security
>       Y                  Y             USER     = PDC
>       N                  N             DOMAIN   = BDC
>       N                  N             SERVER   = BDC
>       N                  N             DOMAIN   = DOMAIN MEM
>       N                  N             USER     = STANDALONE
>       *                  *             SHARE    = STANDALONE
> 
> Not in particular that it is quite possible to construct a BDC without
> using secuirty=server/domain, but we can't advertise this with the
> current crippled arrangement.
> 
> I hope this makes the dependency on security= clearer, and therefore why
> we need 'server role' to specify this explicitly.
> 

a real bdc would have Domain Logons set to Yes but would not allow any modification to the sam database, as far as I remember, and the patch volker put in the code was just to not reply to  a password change (or something like that) request if you have domain logons but not domain master.:x


-- 
Simo Sorce       idra at samba.org
-------------------------------
Samba Team http://www.samba.org