Upgrade from S3 to a Samba4 DC

[Ted Salmon]

Charles,
You are looking for the `samba-tool domain samba3upgrade` command :)
Usage: samba-tool domain <subcommand> [options]Available subcommands:  exportkeytab      - Dumps kerberos keys of the domain into a keytab  join              - Joins domain as either member or backup domain controller *  level             - Raises domain and forest function levels  machinepassword   - Gets a machine password out of our SAM  passwordsettings  - Sets password settings  samba3upgrade     - Upgrade from Samba3 database to Samba4 AD database

> Date: Wed, 21 Sep 2011 23:21:42 -0400
> Subject: Re: Upgrade from S3 to a Samba4 DC
> From: charles.tryon at gmail.com
> To: samba-technical at lists.samba.org
> 
> I've been out of the samba4 loop for some time, so please forgive my
> ignorance...
> 
> I'm running the latest git build of samba4 on an updated Fedora14 box, and I
> haven't figured out where to get the upgrade_from_s3 script.  It's not in my
> source4/setup directory.  Is it possible I'm missing some support packages
> so that it's not getting built?
> 
> 
> On Sun, Aug 14, 2011 at 3:13 AM, Andrew Bartlett <abartlet at samba.org> wrote:
> 
> > I wanted to update the list on the progress on creating a smooth upgrade
> > path for users of the Samba3 DC functionality to Samba4's AD server.
> >
> > Amitay and I have worked from the basis of Jelmer's python libraries and
> > upgrade_from_s3 script, and have extended that script to take advantage
> > of the new passdb and loadparm wrappers.
> >
> > We already demonstrate an upgrade of an S3 member server and DC in the
> > testsuite, and I'll shortly add and do real-world tests of S3 domains
> > being upgraded to Samba4.
> >
> > So far, the upgrade is only of users, but groups will follow very
> > shortly.  We can upgrade any passdb backend (because we call the C API),
> > which provides a possible upgrade path for users of the externally
> > maintained passdb backends that was not possible before.  Passwords and
> > SIDs are migrated, as are most other passdb attributes.
> >
> > This passdb-centric approach also means we may not need the
> > myldap-pub.py script, or we can have it's features integrated, possibly
> > to handle only the parts not exposed to the passdb API.
> >
> > There is plenty more to do, but I hope this shows a clear direction for
> > this important part of a Samba 4.0 release.
> >
> > Andrew Bartlett
> > --
> > Andrew Bartlett                                http://samba.org/~abartlet/
> > Authentication Developer, Samba Team           http://samba.org
> >
> >
> >
> 
> 
> -- 
>     Charles Tryon
> _________________________________________________________________________
>       "It's the job that's never started that takes longest to finish."
>                                  -- Samwise Gamgee