[Samba] Multiple samba servers with LDAP

[cooper mail]

So all of your samba servers are BDCs that need a password backend, is
that correct?  That makes perfect sense.  They have to have somthing
to log people on against.  Do you have any member servers?  If so, how
are they configured?  Thanks.

cooper


On Sun, 6 Mar 2005 20:36:34 -0600, Chris Smith
<christophermsmith at gmail.com> wrote:
> We are building out a 90 server WAN with a single master ldap server
> and each remote office is a slave ldap / bdc. Each local office server
> references it local copy of ldap like:
> passdb backend = ldapsam:ldap://127.0.0.1 as far as samba is
> concerned.. and then for machine and account additions they referr
> back to the main ldap server.
> The local office servers all act as bdcs.
> The local office servers show a different SID from the PDC when I do a
> "net get localsid" however, it doesn't seem to affect anything.
> 
> 
> On Sun, 6 Mar 2005 21:23:12 -0500, cooper mail <cooper.list at gmail.com> wrote:
> > I was wondering what the best practice is for setting up several SAMBA
> > servers in a SAMBA domain all on the same LAN.  Here is what I am
> > looking at
> >
> > PDC: LDAP, Samba, nss_ldap, pam_ldap
> > Member1: Samba, nss_ldap, pam_ldap
> > Member2: Samba, nss_ldap, pam_ldap
> > Member . . . .
> >
> > Should I set the member servers up with:
> > Security = domain
> > and join the severs with net rpc jo
> >
> > or, whould it be better to set them up with:
> > passdb backend = ldapsam:ldap://pdc.domain.com
> > security = server
> >
> > Do you see where I am going?  If you need more details to answer, let me know.
> >
> > Thanks,
> >
> > cooper
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/listinfo/samba
> >
>