Hello Lads,
I have a PDC & BDC / Master & Slave; I regularly make backups of the LDAP
database:
Slapcat ¡Vv ¡Vl backupallusers.txt.
Both my PDC & BDC have been rebuilt from scratch, I slapadd ¡Vv ¡Vl
backupallusers.txt and I net set localsid domainsidhere for the PDC << I get
that from the backupallusers.txt.
Smbpasswd ¡Vw secret < on both PDC & BDC
Net rpc getsid < on the BDC; Storing domain sid in secrets¡K
Now net rpc getsid gets the domain sid from the PDC.
I then slapadd ¡Vv ¡Vl backupallusers.txt on the BDC. I create a new test
account on the PDC and replicates to the BDC as expected.
The user can login to windows workstation connected to the domain.
However; if I create an account through the BDC which writes to the master
ldap database this is different and user cannot login to domain
****different User SID****
Created on the PDC
[EMAIL PROTECTED] ~]# pdbedit -Lv asender
WARNING: The "printer admin" option is deprecated
Unix username: asender
NT username: asender
Account Flags: [U ]
User SID: S-1-5-21-3959433150-537517574-2380176113-3000
²--------------------------------------
Primary Group SID: S-1-5-21-3959433150-537517574-2380176113-513
²------------------------------------
Full Name: System User
Home Directory: \\192.168.0.4\asender
HomeDir Drive: H:
Logon Script: asender.bat
Profile Path: \\192.168.0.4\profiles\asender
Domain: DDESIGN
Account desc: System User
Workstations:
Munged dial:
Logon time: 0
Logoff time: Tue, 19 Jan 2038 14:14:07 EST
Kickoff time: Tue, 19 Jan 2038 14:14:07 EST
Password last set: Sun, 05 Feb 2006 22:42:01 EST
Password can change: Sun, 05 Feb 2006 22:42:01 EST
Password must change: Tue, 19 Jan 2038 14:14:07 EST
Last bad password : 0
Bad password count : 0
Logon hours : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
[EMAIL PROTECTED] ~]#
Backup Domain Controller
[EMAIL PROTECTED] sbin]# ./smbldap-useradd -m -a test20
[EMAIL PROTECTED] sbin]# pdbedit -Lv test20
Unix username: test20
NT username: test20
Account Flags: [UX ]
User SID: S-1-5-21-262279049-421990743-3931325934-3036
²--------------------------------------
Primary Group SID: S-1-5-21-3959433150-537517574-2380176113-513
²---------------------------------
Full Name: System User
Home Directory: \\192.168.0.4\test20
HomeDir Drive: H:
Logon Script: test20.bat
Profile Path: \\192.168.0.4\profiles\test20
Domain: DDESIGN
Account desc: System User
Workstations:
Munged dial:
Logon time: 0
Logoff time: Tue, 19 Jan 2038 14:14:07 EST
Kickoff time: Tue, 19 Jan 2038 14:14:07 EST
Password last set: 0
Password can change: 0
Password must change: Tue, 19 Jan 2038 14:14:07 EST
Last bad password : 0
Bad password count : 0
Logon hours : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
[EMAIL PROTECTED] sbin]#
Thanks.
Adrian Sender.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
