As far as I know there´s a command used in smb.conf that makes a samba BDC redirect changes to the master LDAP. I never used it before but should work.

ldap replication sleep (G)
When Samba is asked to write to a read-only LDAP replica, we are redirected to talk to the read-write master server. This server then replicates our changes back to the 'local' server, however the replication might take some seconds, especially over slow links. Certain client activities, particularly domain joins, can become confused by the 'success' that does not immediately change the LDAP back-end's data.


This option simply causes Samba to wait a short time, to allow the LDAP server to catch up. If you have a particularly high-latency network, you may wish to time the LDAP replication with a network sniffer, and increase this value accordingly. Be aware that no checking is performed that the data has actually replicated.

The value is specified in milliseconds, the maximum value is 5000 (5 seconds).

     Default: ldap replication sleep = 1000


----- Original Message ----- From: "Adam Tauno Williams" <[EMAIL PROTECTED]>
To: "Tomasz Chmielewski" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Thursday, October 28, 2004 1:50 PM
Subject: Re: [Samba] Samba PDC in many branch offices + one LDAP database -how to change passwords?



>> As it is relatively easy to have one LDAP database across all office
>> branches, I don't know how to make Samba 3 to read/retrieve
>> usernames/passwords from local OpenLDAP slave, but to write added
>> machines/changed passwords to the master OpenLDAP server (which would
>> then replicate the changes to all its slaves).
> If you have the smbldap-tools configured properly with the right master
> and slave set, then adding machines is not a problem.  Changing
> passwords is also not a problem provided you have LDAP referrals set up
> properly.  Setting up referrals is really more of a question for the
> openldap folks, and probably covered in the setup guide at openldap.
Heh, ask at OpenLDAp group, they point you to Samba group; ask at Samba
group, they point you back to OpenLDAP :)

Just to clarify, mostly for the archives: Setting up referrals is NIETHER a
Samba OR OpenLDAP question. It is an LDAP issue, referrals are a standard LDAP
thing, supported by every decent DSA. The OpenLDAP lists are for questions
SPECIFICALLY for OpenLDAP related issues, referrals would not be such an issue.
*ANY* decent LDAP text will cover referrals, and questions about referrals
would be appropriate to the [EMAIL PROTECTED] list (generic LDAP discussion) - but
again, they are a well documented standard type of thing.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba



-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba

Reply via email to