[Samba] backup of tdb files
Andrew Bartlett
abartlet at samba.org
Thu Oct 25 07:36:02 UTC 2018
On Thu, 2018-10-25 at 09:16 +0200, Philipp Gesang wrote:
> Hi Andrew,
>
> thank you for your reply.
>
> I’m working on a patchset that allows extracting the machine
> account credentials so they can be stored outside Samba. That
> part is already working.
Can you remind us of the current patch?
> The goal is now to always have up to
> date values stored away to minimize the possibility that a
> re-join is needed after replaying the creds from a backup. The
> join requires manual intervention and elevated privileges so it
> is quite undesirable to request it unless absolutely necessary
> (e. g. password changed since last backup).
>
> There is of course always the option of monitoring secrets.tdb
> with inotify and acting on change events. It would be more
> convenient though if I could just throw a script at Samba and
> have it executed at the right moment.
Perhaps set:
machine password timeout = 0
in the smb.conf
and then run
wbinfo --change-secret
and then do the backup?
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
More information about the samba
mailing list