Samba3 + OpenLdap classicupgrade problems - Administrator sambaSID != *-500

[Stéphane PURNELLE]

There are no options !

Just change the SID of your Administrator account in your ldap tree before 
start classic upgrade

In your case, S-1-5-21-2051375009-2767682937-3133487178-2024 must become 
S-1-5-21-2051375009-2767682937-3133487178-500



-----------------------------------
Stéphane PURNELLE                         Admin. Systèmes et Réseaux 
Service Informatique       Corman S.A.           Tel : 00 32 (0)87/342467

samba-technical-bounces at lists.samba.org wrote on 11/04/2014 04:02:43:

> De : Kamen Mazdrashki <kamenim at samba.org>
> A : samba-technical <samba-technical at samba.org>, Andrew Bartlett 
> <abartlet at samba.org>, Jelmer Vernooij <jelmer at samba.org>, 
> Date : 11/04/2014 04:03
> Objet : Samba3 + OpenLdap classicupgrade problems - Administrator 
> sambaSID != *-500
> Envoyé par : samba-technical-bounces at lists.samba.org
> 
> Hi,
> 
> I am playing with 'samba-tool domain classicupgrade' and I can't import
> existing users - more specifically, the Administrator.
> 
> I have Samba3 + OpenLdap passdb backend.
> Trying 'samba-tool domain classicupgrade ...' always lead me to:
> Importing users
> User 'Administrator' in your existing directory has SID
> S-1-5-21-2051375009-2767682937-3133487178-2024, expected it to be
> S-1-5-21-2051375009-2767682937-3133487178-500
> ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception -
> ProvisioningError: User 'Administrator' in your existing directory does 
not
> have SID ending in -500
>   File
> "/opt/samba4/lib64/python2.7/site-packages/samba/netcmd/__init__.py", 
line
> 175, in _run
>     return self.run(*args, **kwargs)
>   File 
"/opt/samba4/lib64/python2.7/site-packages/samba/netcmd/domain.py",
> line 1318, in run
>     useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
>   File "/opt/samba4/lib64/python2.7/site-packages/samba/upgrade.py", 
line
> 926, in upgrade_from_samba3
>     raise ProvisioningError("User 'Administrator' in your existing
> directory does not have SID ending in -500")
> 
> What are my options here?
> 
> Cheers,
> Kamen