[Samba] safe to replace just one ldb file?

[Achim Gottinger]

Am 02.09.2014 15:54, schrieb mourik jan heupink - merit:
>
>
> On 9/2/2014 14:27, mourik jan heupink - merit wrote:
>> Hi Rowland,
>>
>> On 9/2/2014 14:15, Rowland Penny wrote:
>>>
>>> How did you remove the deleted objects, did you edit the .ldb files in
>>> the sam.ldb.d directory ? If so, then you could have damaged your AD,
>>> you shouldn't edit these directly.
>> With many lines like:
>>   ldbdel -d 0 -H sam.ldb "<GUID=66fd6cd4-a9dc-4d05-ab0c-dc915fce6adb>"
>> --show-recycled --relax
> The script was provided by sernet, so I guess it should be safe...
>
> The question that remains is:
>
> Can I just
> - shutdown samba
> - tdbbackup DC=DOMAINDNSZONES,DC=...ldb
> - replace DC=DOMAINDNSZONES,DC=...ldb with the smaller .bak file
> - start samba again
>
> or do I need to make a dump/restore for *all* ldb files to keep 
> everything in sync?
>
> MJ
I did it the way you decribed a few times, but i shutdown all addc's in 
the domain before doing the tdbbackup of the DOMAINDNSZONES ldb file and 
copy operation.
Till now i have not had problems related to this operation.

achim~