[Samba] Migrated PDC to new server

[Matt Ingram]

I just migrated my SMB pdc to a new server (was running 3.0.21c, now 
3.0.22).  Some things seems to be ok. net rpc list; net rpc testjoin 
seem to work. But if I attempt to join a windows system to the domain I 
get "The following error occured while attempting to join to domain 
"DOMAINNAME": The user name could not be found".   The machine name is 
getting loaded into ldap.

LDAP seems to be fine, getent passwd/group returns all the ldap users; 
net groupmap list returns all the groups. I can shell in with ldap accounts/

I copied the old server's /etc/samba to the new server and I set the new 
servers SID to be that of the old server.

Also, I have a logon script on my BDC and my PDC.  The BDC script runs 
on the client boot up, but the PDC one isn't running.

Any ideas?

SMB.CONF
[global]
        workgroup = DOMAINNAME
        netbios name = HOME
        server string = HOME
        passdb backend = ldapsam:ldap://ldap.domain
        username map = /etc/samba/smbusers
        printcap name = cups
        enable privileges = Yes
        log level = 2
        add user script = /usr/local/sbin/smbldap-useradd -m '%u'
        delete user script = /usr/local/sbin/smbldap-userdel %u
        add group script = /usr/local/sbin/smbldap-groupadd -p '%g'
        delete group script = /usr/local/sbin/smbldap-groupdel '%g'
        add user to group script = /usr/local/sbin/smbldap-groupmod -m 
'%u' '%g'
        delete user from group script = /usr/local/sbin/smbldap-groupmod 
-x '%u' '%g'
        set primary group script = /usr/local/sbin/smbldap-usermod -g 
'%g' '%u'
        add machine script = /usr/local/sbin/smbldap-useradd -w '%u'
        logon script = scripts\logon.bat
#       logon path = \\%L\Profiles\%U
        logon path =
        logon drive = H:
        logon home = \\%L\%U
        domain logons = Yes
        os level = 65
        preferred master = Yes
        domain master = Yes
        wins server = 172.30.30.25
        ldap suffix = ou=Accounts,dc=company,dc=com
        ldap machine suffix = ou=Computers
        ldap user suffix = ou=People
        ldap group suffix = ou=Posix,ou=Groups
        ldap idmap suffix = ou=idmap
        ldap admin dn = cn=Manager,dc=company,dc=com
        ldap ssl = no
        ldap passwd sync = No
#       idmap uid = 15000-20000
#       idmap gid = 15000-20000
        printing = cups
        map acl inherit = Yes


here's my log.smbd when I tried to add the computer:

[2006/06/23 11:28:27, 2] smbd/sesssetup.c:setup_new_vc_session(772)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2006/06/23 11:28:27, 2] smbd/sesssetup.c:setup_new_vc_session(772)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2006/06/23 11:28:27, 2] lib/smbldap.c:smbldap_open_connection(722)
  smbldap_open_connection: connection opened
[2006/06/23 11:28:27, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
  init_sam_from_ldap: Entry found for user: root
[2006/06/23 11:28:27, 2] passdb/pdb_ldap.c:init_group_from_ldap(2215)
  init_group_from_ldap: Entry found for group: 512
[2006/06/23 11:28:27, 2] auth/auth.c:check_ntlm_password(307)
  check_ntlm_password:  authentication for user [Administrator] -> 
[root] -> [root] succeeded
[2006/06/23 11:28:28, 2] smbd/server.c:exit_server(614)
  Closing connections
[2006/06/23 11:28:28, 2] smbd/sesssetup.c:setup_new_vc_session(772)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2006/06/23 11:28:28, 2] smbd/sesssetup.c:setup_new_vc_session(772)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2006/06/23 11:28:28, 2] lib/smbldap.c:smbldap_open_connection(722)
  smbldap_open_connection: connection opened
[2006/06/23 11:28:28, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
  init_sam_from_ldap: Entry found for user: root
[2006/06/23 11:28:28, 2] passdb/pdb_ldap.c:init_group_from_ldap(2215)
  init_group_from_ldap: Entry found for group: 512
[2006/06/23 11:28:28, 2] auth/auth.c:check_ntlm_password(307)
  check_ntlm_password:  authentication for user [Administrator] -> 
[root] -> [root] succeeded
[2006/06/23 11:28:29, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2670)
  Returning domain sid for domain DOMAINNAME -> 
S-1-5-21-3186883984-1813041273-1898769360
[2006/06/23 11:28:30, 2] smbd/server.c:exit_server(614)
  Closing connections

thanks in advance.




-- 
Matt Ingram
Intermediate Unix Administrator, IS
Canadian Bank Note Company, Limited
\m/