On 16 February 2012 12:12, lynn <l...@steve-ss.com> wrote: > Hi > Local root, who is not a domain administrator, can modify the ldb's. No > ticket required. Is my installation correct?
Yes. When you use: ldbmodify -H/usr/local/samba/sam.ldb ... ldbmodify works directly on the files, so as long as root has access to the files it will be able to modify them. If you use: ldbmodify -k yes -H ldap://your.dc ... then you will need to authenticate, because that goes via Samba instead of operating directly on the files. > Cheers, > Steve > > Ubuntu oneiric, 4.0.0alpha18-GIT-567f05e -- Michael Wood <esiot...@gmail.com> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba