Upgrade from S3 to a Samba4 DC [with LDAPSAM]

[Amitay Isaacs]

Hi Adam,

On Tue, Sep 20, 2011 at 5:06 AM, Adam Tauno Williams <awilliam at whitemice.org
> wrote:

> Quoting Adam Tauno Williams <awilliam at whitemice.org>:
>
>> Quoting Adam Tauno Williams <awilliam at whitemice.org>
>>
>>> Quoting Andrew Bartlett <abartlet at samba.org>:
>>>
>>>> The command has also been renamed in preparation for the Samba 4.0 alpha
>>>> 17 release, it is now 'samba domain samba3upgrade'.
>>>>
>>> I'm puzzled by how to read that.  Does that mean I use the "samba"
>>> program to invoke the upgrade?  After a git pull the previous upgrade script
>>> is gone;  but the syntax to get the same functionality doesn't seem obvious.
>>> /opt/s4/sbin/samba domain samba3upgrade --help
>>> doesn't provide any insight.
>>>
>> Ah ha!  You meant "samba-tool domain samba3upgrade"
>>
>
>
> smbclient --version
> Version 4.0.0alpha18-GIT-fa5475e
>
> This works, with one bug.  It doesn't generate an Administrator password
> (which the previous script would auto-generate one).
>
> $ export PATH=$PATH:/opt/s4/bin:/opt/**s4/sbin
> $ samba-tool domain samba3upgrade --libdir=/tmp/x /tmp/x/smb.conf
> ....
>
> Server Role:           domain controller
> Hostname:              BARBEL
> NetBIOS Domain:        BACKBONE
> DNS Domain:            micore.us
> DOMAIN SID:            S-1-5-21-2037442776-****************
> Admin password:        None  <<<< ????
>
> Importing WINS database
> Importing Account policy
> ....
>
> Which then leaves me puzzled how to set an administrator password.
>
> "samba-tool domain samba3upgrade --help" doesn't mention a parameter to
> predetermine one.
>
> "samba-tool user password --username=administrator" prompts for a password.
>  Entering a blank password doesn't seem to explicitly fail but the operation
> fails with -
>
> ERROR: Failed to change password : Connection to SAMR pipe of PDC of domain
> 'BACKBONE' failed: NT_STATUS_OBJECT_NAME_NOT_**FOUND
>
>
samba3upgrade code sets existing root/administrator password as the
administrator password. In the upgrade process, that's the last line of the
output. It tells which user's password has
been set as the administrator password.

Amitay.