[Samba] Password change question/2: 'syncpassword' suffices on *ONE* DC?

[Marco Gaiarin]

I'm forced, for legacy reasons, to use 'syncpassword'.
Docs are scarce, so i ask here.


Seems to me that the ''consumer'' (eg, 'samba-tool user syncpasswords',
with or without '--daemon') get activated after every password change,
indipendently on what DC get originated (eg, i've changed a password,
see previous email, on DC2 and the 'syncpassword' script get called on
DC1).

So seems to me that all that stuff (minus the GPG key and the
'password hash gpg key ids = 1234567890ABCDEF' in smb.conf) it suffices/have to
be installed on *ONE* DC.

Right? If yes, 'it suffices' or 'have to'? Eg, if i install on every DC
i get some sort of ''failover'' system (eg, the LDAP change get
''consumed'' one time), or simply i've my script called for every DC?


Thanks.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)