[Samba] BDC, documentation, Machine Accounts Keep Expiring
mjoyner at vbservices.net
Tue May 3 12:44:56 GMT 2005
You could always use gpedit.msc and set the machine password change to "NO"
Dmitry Melekhov wrote:
> I want to create BDC with smbpasswd backend, just because I run ldap
> master on the same machine as PDC and I don't think that using ldap
> backend will be far better for me.
> Only thing I don't understand:
> I read in howto:
> Machine Accounts Keep Expiring
> This problem will occur when the passdb (SAM) files are copied from a
> central server but the local Backup Domain Controller is acting as a
> PDC. This results in the application of Local Machine Trust Account
> password updates to the local SAM. Such updates are not copied back to
> the central server.
> But I looked into change_trust_pw.c
> and see
> /* if this next call fails, then give up. We can't do
> password changes on BDC's --jerry */
> I.e., looks like machines will not change their password when working
> with BDC (i.e. when PDC is down).
> Do I understand this right?
> Thank you!
More information about the samba