[Samba] where Samba stores the SID when acting as PDC?

[Andrew Bartlett]

On Fri, 2003-07-25 at 20:00, Fermín Galán wrote:
> Hello everyone.
> 
> As far I know, all Microsoft domain are identified with
> a SID. It is used for authorization, for example in the file
> ACLs of the users' files. Before using it, this SID is generated
> at random. This SID resides in the PDC,
> 
> When Samba is acting as PDC, where lives this SID?
> (I suppose that in a file).

secrets.tdb

> I'm asking this because I'm thinking in a backup
> procedure for my Samba server and I would like
> to backup the SID. If I wouldn't do so, the just
> installed Samba will generate a different SID at
> random, so there would be problems with the files
> with the old SID in the ACLs.

There are now commands (particularly in 3.0's net utility) to get and
set that sid, independent of the rest of the secrets.tdb file.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20030727/d76a6191/attachment.bin