s3 upgrade troubles

Collen cblijenberg at hermanjordan.nl
Mon Nov 21 08:05:38 MST 2011


Hi Amitay, thx.

that did the trick on the password age thing. (used git pull from today)

still got no userprincipalname (logon name)
but that might be obvious, since the previous domain
was NT4 style samba, and uses pre-2000 usernames.

also old netbios alias names are converted ok.
so i do get these names in the domain controller section,
but accessing them will not work.
i'll try to dig into it, this week.

but most important for me is the browsing/printing part.
can i use the s3compat part that is build with samba4 ?
and how do i do that, i've found the franky and s3compat page
of the samba wiki, but it looks like a lose end.

thx for the help.

Collen.


On 21-11-2011 0:49, Amitay Isaacs wrote:
> Hi Collen,
>
> On Fri, Nov 18, 2011 at 9:55 PM, Collen <cblijenberg at hermanjordan.nl
> <mailto:cblijenberg at hermanjordan.nl>> wrote:
>
>     hi,
>
>     where busy migrating from samba3 to samba4 with the samba-tool.
>     so far so good, the samba3upgrade worked, i've been able to
>     import all the users, computers groups and appropriate domain sid
>     (came from tdbsam backend)
>
>     still i have some troubles or let's call it feedback.
>
>     - all accounts are expired, as mentioned in this mail
>     (https://lists.samba.org/__archive/samba-technical/2011-__September/079433.html
>     <https://lists.samba.org/archive/samba-technical/2011-September/079433.html>)
>     only the --max-pwd-age=0 work's as workaround.
>
>     - i have no user logon names (userprincipalname) only pre2000 names
>
>     - most migrated users can not access the shares (\\server\netlogon
>     or profiles) only the buildin admin can. or newly made users with
>     samba-tool user... checked the file permissions and where ok.
>
>
> Can you try the samba3upgrade with the latest code in the git
> repository? There have been several patches to samba3upgrade which
> fix some of the issues related to migration from s3 to s4. These patches
> take care of the account policy migration, which decides
> whether an account is expired or not.
>
> Amitay.

-- 
---
Collen Blijenberg - systeem/netwerk beheerder



More information about the samba-technical mailing list