2. smb.conf for being a PDC
[global]
passdb backend = tdbsamos level = 33
preferred master = auto
domain master = yes
local master = yes
security = user
domain logons = yes
...
3. passdb backend
1. This contains all the user and group account information.
Acceptable values for a PDC
are: smbpasswd, tdbsam, and ldapsam. The “guest”
entry provides default accounts and is included by
default; there is no need to add it explicitly.
2. Where use of BDCs is intended, the only logical choice is
to use LDAP so the passdb backend can be distributed.
The tdbsam and smbpasswd files cannot effectively be
distributed and therefore should not be used.
4. Domain Control Parameters
1. The parameters os level, preferred master, domain
master, security, encrypt passwords, and domain
logons play a central role in assuring domain control and
network logon support.
2. The os level must be set at or above a value of 32. A
domain controller must be the DMB, must be set
in user mode security, must support Microsoft-compatible
encrypted passwords, and must provide the network
logon service (domain logons). Encrypted passwords
must be enabled. For more details on how to do
this, refer to Account Information Databases.
![smb.conf for being a PDC
[global]
passdb backend = tdbsamos level = 33
preferred master = auto
domain master = yes
local master = yes
security = user
domain logons = yes
...](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)