[Samba] Samba PDC in many branch offices + one LDAP database - how to change passwords?

[Tomasz Chmielewski]

Paul Gienger wrote:
> 
>> As it is relatively easy to have one LDAP database across all office 
>> branches, I don't know how to make Samba 3 to read/retrieve 
>> usernames/passwords from local OpenLDAP slave, but to write added 
>> machines/changed passwords to the master OpenLDAP server (which would 
>> then replicate the changes to all its slaves).
> 
> 
> If you have the smbldap-tools configured properly with the right master 
> and slave set, then adding machines is not a problem.  Changing 
> passwords is also not a problem provided you have LDAP referrals set up 
> properly.  Setting up referrals is really more of a question for the 
> openldap folks, and probably covered in the setup guide at openldap.
> 

Heh, ask at OpenLDAp group, they point you to Samba group; ask at Samba 
group, they point you back to OpenLDAP :)

"From my (limited) knowledge of samba (3.0.X), it allows to configure 
both the slave and the master DSA for users storage, and autimatically 
directs password changes to the master even when reading from a slave. 
Consult samba's documentation for details."

Tomek