[Samba] safe to replace just one ldb file?

Achim Gottinger achim at ag-web.biz
Tue Sep 2 09:20:00 MDT 2014

Am 02.09.2014 15:54, schrieb mourik jan heupink - merit:
> On 9/2/2014 14:27, mourik jan heupink - merit wrote:
>> Hi Rowland,
>> On 9/2/2014 14:15, Rowland Penny wrote:
>>> How did you remove the deleted objects, did you edit the .ldb files in
>>> the sam.ldb.d directory ? If so, then you could have damaged your AD,
>>> you shouldn't edit these directly.
>> With many lines like:
>>   ldbdel -d 0 -H sam.ldb "<GUID=66fd6cd4-a9dc-4d05-ab0c-dc915fce6adb>"
>> --show-recycled --relax
> The script was provided by sernet, so I guess it should be safe...
> The question that remains is:
> Can I just
> - shutdown samba
> - tdbbackup DC=DOMAINDNSZONES,DC=...ldb
> - replace DC=DOMAINDNSZONES,DC=...ldb with the smaller .bak file
> - start samba again
> or do I need to make a dump/restore for *all* ldb files to keep 
> everything in sync?
> MJ
I did it the way you decribed a few times, but i shutdown all addc's in 
the domain before doing the tdbbackup of the DOMAINDNSZONES ldb file and 
copy operation.
Till now i have not had problems related to this operation.


More information about the samba mailing list