[Samba] Samba4 ldbmodify

Michael Wood esiotrot at gmail.com
Tue Mar 6 02:57:16 MST 2012

On 16 February 2012 12:12, lynn <lynn at steve-ss.com> wrote:
> Hi
> Local root, who is not a domain administrator, can modify the ldb's. No
> ticket required. Is my installation correct?


When you use:

ldbmodify -H/usr/local/samba/sam.ldb ...

ldbmodify works directly on the files, so as long as root has access
to the files it will be able to modify them.

If you use:

ldbmodify -k yes -H ldap://your.dc ...

then you will need to authenticate, because that goes via Samba
instead of operating directly on the files.

> Cheers,
> Steve
> Ubuntu oneiric, 4.0.0alpha18-GIT-567f05e

Michael Wood <esiotrot at gmail.com>

More information about the samba-technical mailing list