samba3upgrade clarification on groups
charles.tryon at gmail.com
Fri May 25 07:14:41 MDT 2012
On Thu, May 24, 2012 at 6:06 PM, Andrew Bartlett <abartlet at samba.org> wrote:
> On Thu, 2012-05-24 at 14:57 -0400, Charles Tryon wrote:
> > I was doing some updates to the samba-tool samba3upgrade Wiki page, and I
> > just had a quick question for people who have been using this tool...
> > My Samba3 DC uses the older tdb backend rather than LDAP. To the best of
> > my knowledge, the migration tool does NOT know how to convert the
> > /etc/group file when migrating to the new domain, so I've simply written
> > couple line script which slurps up the group file and issues commands to
> > create the groups in the new Samba4 domain.
> The samba3upgrade tool does know how to read /etc/group, if that file is
> installed on the system doing the upgrade. It reads it via the same
> methods that Samba3 uses to make members part of their groups at
> runtime, as well as the methods for enumerating group members. Both of
> these are nss calls in this instance.
> If there is a desire to upgrade from a 'group' file not installed on the
> system, I will happily accept patches to do that (ie parse it in
> > My question is: If you are using an LDAP back end, then does the tool
> > normally build the groups for you? I know I've seen indications that
> > are situations where the groups fail to build correctly, but that makes
> > sound like it normally does work. Since this is not behavior I've seen
> > myself, I just wanted to note this in the HOWTO.
> If you know of any situation where groups fail to migrate, please let me
> know, and we can fix it. We need to remove notes to the contrary from
> the wiki page.
OK, I'll try this out and make the changes on the samba3migrate HOWTO page.
> Andrew Bartlett
> Andrew Bartlett http://samba.org/~abartlet/
> Authentication Developer, Samba Team http://samba.org
“Risks are not to be evaluated in terms of the probability of success,
but in terms of the value of the goal.”
- Ralph D. Winter
More information about the samba-technical