This option configures Samba to accept domain logons as a primary domain controller. When a client successfully logs on to the domain, Samba will return a special token to the client that allows the client to access domain shares without consulting the PDC again for authentication. Note that the Samba machine must be in user-level security (
security
=
user) and must be the PDC in order for this option to function. In addition, Windows machines will expect a
[netlogon] share to exist on the Samba server (see the section
Section 6.5.1, Configuring Samba for Windows Domain Logons," earlier in this chapter).
