I am using the Redhat 9 source RPM of samba 3.0.0. I modified the spec file to configure --with-ldapsam in order to work with our LDAP backend. When I set an ldap suffix in the SWAT interface (global settings), in some circumstances, that suffix ends up added again everytime I load the SWAT page. The settings are not actually in the file, but of course a commit will add them. The workaround is to manually re-set all the ldap suffixes before committing the global settings in SWAT. Obviously, this defeats the purpose of SWAT. I suspect this is to do with loadparm.c's handle_ldap_suffix(), but I'm afraid my C-fu is weak.
*** This bug has been marked as a duplicate of 328 ***