[Samba] Samba3 & ADMT, cannot migrate SIDs

[Andrew Bartlett]

On Mon, 2011-11-07 at 15:41 -0500, Adam Tauno Williams wrote:
> I'm attempting to migrate a Samba 3.x / NT domain to Active Directory.
> I have a Windows 2003 SE host and ADMT.  I've established trusts between
> the Samba 3 domain and the Windows 2003 AD domain.  I can use "User
> Account Migration Wizard" up to the "Account Transition Options".  Then
> of I check the option to Migrate SIDs it fails with - 
> 
> "Could not verify auditing and TcpipClientSupport on domains." Will not
> be able to migrate Sids. The system cannot find the file specified.
> 
> Is there something that can be done to enable SID migration from S3?

The best way would be the 'samba-tool domain samba3upgrade', and then
any migration from there.  I know you have not had great luck with that,
and I spent some time today staring at the valgrind log without success.
The other script around is the 'myldap-pub.py' script, which has been
used for real-life s3 -> AD migrations, via Samba4.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org