That troublemaker again (replace domain logons =, domain master=)

Simo Sorce idra at
Mon Nov 12 07:49:02 GMT 2001

On Tue, Nov 13, 2001 at 01:26:02AM +1100, Andrew Bartlett wrote:
>   Domain Master    Domain Logons      Security
>       Y                  Y             USER     = PDC
>       N                  N             DOMAIN   = BDC
>       N                  N             SERVER   = BDC
>       N                  N             DOMAIN   = DOMAIN MEM
>       N                  N             USER     = STANDALONE
>       *                  *             SHARE    = STANDALONE
> Not in particular that it is quite possible to construct a BDC without
> using secuirty=server/domain, but we can't advertise this with the
> current crippled arrangement.
> I hope this makes the dependency on security= clearer, and therefore why
> we need 'server role' to specify this explicitly.

a real bdc would have Domain Logons set to Yes but would not allow any modification to the sam database, as far as I remember, and the patch volker put in the code was just to not reply to  a password change (or something like that) request if you have domain logons but not domain master.:x

Simo Sorce       idra at
Samba Team

More information about the samba-technical mailing list