[Samba] Re-establishing a Samba 2.2.1a domain controller after major "crash"

[Andrew Bartlett]

Lasse Taul Bjerre wrote:
> 
> Our Samba 2.2.1a domain controller suffered a major disk error the other
> day. The partition with /etc and /dev died. :(
> I?ve now reinstalled SuSE 7.3, and re-established the UNIX password files
> (passwd, group, shadow) from backup, further more I?ve re-established the
> files from /etc/samba (MACHINE.SID, groups.mapping, lmhosts, machine.sid,
> secrets.tdb, smb.conf, smbpasswd, smbusers).
> 
> All my shares are up and running and the users can log on to the server, and
> they can map the shares. The only, but major, problem I experiences is: The
> workstations has lost the ?thrust? to the domain controller. If I check the
> /etc/samba/smbpasswd file the ?Machine Trust Account? exists. Have I missed
> a file or something, or is it just not possible to re-establish a domain
> controller via the config files?
> 
> ANY help is MUCH appreciated, this is a domain with 250 computers, and so
> going around and rejoining all the computers is to time consuming. And I
> would really like to have the system back online Monday morning.

Ensure that you copy across *all* the mentioned files, and before you
start smbd.  Also, ensure you must use exactly the same hostname.  If
you have the misfortune to start smbd without the old secrets.tdb in
place, or the hostname changed, it will regenerate the SID, causing this
problem.

> Further more, I plan to upgrade to 2.2.6 ASAP (when I've solved the Trust
> issue) Is this a good version or should I use an older version like 2.2.5
> or??

2.2.6 is a 'good' version, as far as we can tell :-).

(The pre and RC releases cleaned out quite a number of nice little
bugs).

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net