[Samba] Re: Transfering Machine Accounts / MACHINE.SID

[Beast]

Saturday, December 27, 2003, 5:41:37 AM, Andrew wrote:

> On Sat, 2003-12-27 at 07:10, Information Technology wrote:
>>
>> My goal is to rebuild my PDC as I mentioned earlier.  I stated in another 
>> thread my plan was to create a 3.0.1 BDC; tranfer the accounts; transfer the 
>> shares; then, move the user and system accounts into LDAP.  Once the PDC is 
>> rebuild and I need to transfer control back, It should be simple to move the 
>> LDAP first, point the new Samba to the new primary LDAP, and demote the 
>> temporary PDC back down to BDC. 

> And to make it a real BDC, setup an LDAP slave.

If I put PDC in slave ldap, is this means that it will update the
slave (because samaba will bind as ldap-root which has authority of
updating this replica)?
No way to prevent samba to using other ldap account to update the
directory?



--beast