Upgrade from S3 to a Samba4 DC

[Charles Tryon]

Ah!  Thanks!


On Wed, Sep 21, 2011 at 11:30 PM, Ted Salmon <tass2001 at hotmail.com> wrote:

>  Charles,
>
> You are looking for the `samba-tool domain samba3upgrade` command :)
>
> Usage: samba-tool domain <subcommand> [options]
> Available subcommands:
>   exportkeytab      - Dumps kerberos keys of the domain into a keytab
>   join              - Joins domain as either member or backup domain
> controller *
>   level             - Raises domain and forest function levels
>   machinepassword   - Gets a machine password out of our SAM
>   passwordsettings  - Sets password settings
>   samba3upgrade     - Upgrade from Samba3 database to Samba4 AD database
>
>
> > Date: Wed, 21 Sep 2011 23:21:42 -0400
> > Subject: Re: Upgrade from S3 to a Samba4 DC
> > From: charles.tryon at gmail.com
> > To: samba-technical at lists.samba.org
>
> >
> > I've been out of the samba4 loop for some time, so please forgive my
> > ignorance...
> >
> > I'm running the latest git build of samba4 on an updated Fedora14 box,
> and I
> > haven't figured out where to get the upgrade_from_s3 script. It's not in
> my
> > source4/setup directory. Is it possible I'm missing some support packages
> > so that it's not getting built?
> >
> >
> > On Sun, Aug 14, 2011 at 3:13 AM, Andrew Bartlett <abartlet at samba.org>
> wrote:
> >
> > > I wanted to update the list on the progress on creating a smooth
> upgrade
> > > path for users of the Samba3 DC functionality to Samba4's AD server.
> > >
> > > Amitay and I have worked from the basis of Jelmer's python libraries
> and
> > > upgrade_from_s3 script, and have extended that script to take advantage
> > > of the new passdb and loadparm wrappers.
> > >
> > > We already demonstrate an upgrade of an S3 member server and DC in the
> > > testsuite, and I'll shortly add and do real-world tests of S3 domains
> > > being upgraded to Samba4.
> > >
> > > So far, the upgrade is only of users, but groups will follow very
> > > shortly. We can upgrade any passdb backend (because we call the C API),
> > > which provides a possible upgrade path for users of the externally
> > > maintained passdb backends that was not possible before. Passwords and
> > > SIDs are migrated, as are most other passdb attributes.
> > >
> > > This passdb-centric approach also means we may not need the
> > > myldap-pub.py script, or we can have it's features integrated, possibly
> > > to handle only the parts not exposed to the passdb API.
> > >
> > > There is plenty more to do, but I hope this shows a clear direction for
> > > this important part of a Samba 4.0 release.
> > >
> > > Andrew Bartlett
> > > --
> > > Andrew Bartlett http://samba.org/~abartlet/
> > > Authentication Developer, Samba Team http://samba.org
> > >
> > >
> > >
> >
> >
> > --
> > Charles Tryon
> > _________________________________________________________________________
> > "It's the job that's never started that takes longest to finish."
> > -- Samwise Gamgee
>



-- 
    Charles Tryon
_________________________________________________________________________
      "It's the job that's never started that takes longest to finish."
                                 -- Samwise Gamgee