[Samba] possible to use ldbedit in a safe way

[Rowland Penny]

On Tue, 17 Oct 2017 11:12:20 +0200
mj <lists at merit.unu.edu> wrote:

> Hi Rowland,
> 
> On 10/16/2017 05:13 PM, Rowland Penny via samba wrote:
> > If you need to edit the NCs in sam.ldb.d, use '--cross-ncs' with the
> > ldb command, this allows you safely change things. There have been
> > reports of AD being destroyed by directly editing the ldb's in
> > sam.ldb.d
> 
> Looking at the man page of ldbedit, I see no reference to --cross-ncs

Try 'ldbedit --help'

> 
> Tried:
> 
> > ldbedit --cross-ncs -e nano
> > -H ./CN=CONFIGURATION,DC=SAMBA,DC=COMPANY,DC=COM 
> 

try 'ldbedit --cross-ncs -e nano -H /path/to/sam.ldb'

Don't try to edit './CN=CONFIGURATION,DC=SAMBA,DC=COMPANY,DC=COM'
directly

Rowland