[Samba] Migrate NT PDC to SAMBA PDC

[John H Terpstra]

On Mon, 7 Jul 2003 robowarp at gmx.de wrote:

> Hi John,
> this is not working
> delete user script = /usr/sbin/userdel -r %u
> current , my log says this is not full implemented
> i tried to use this option from usrmgr and posted this a few times on the
> list ,did you get this working?
> I have samba3 beta

You will need to customise this for your operating system. The -r option
means delete the user's home directory on removal of the user.

No two Linuxen are born equal - so make sure that this option applies to
your Linux.

- John T.

>
> Regards
> Ps: all other functions running very good as described in the faqs
>
> > On Mon, 7 Jul 2003, blob wrote:
> >
> > > Hi all,
> > >
> > > I'm trying to migrate NT PDC server to Samba PDC.
> > > and now i use samba 3.0.0beta2.
> > > I looks the migration steps from samba-howto-collection.pdf or
> > > in
> >
> http://us2.samba.org/samba/ftp/cvs_current/docs/htmldocs/nt4migration.html,
> > > and it's not works well. The step is :
> > >
> > > ********
> > > The approximate migration process is described below.
> > > " You will have an NT4 PDC that has the users, groups, policies and
> > profiles
> > > to be migrated
> > > " Samba-3 set up as a DC with netlogon share, profile share, etc.
> > >
> > > The Account Migration Process
> > > 1. Create a BDC account for the samba server using NT Server Manager
> > >    a) Samba must NOT be running
> > > 2. rpcclient NT4PDC -U Administrator%passwd
> > >    a) lsaquery
> > >    b) Note the SID returned
> > > 3. net getsid -S NT4PDC -w DOMNAME -U Administrator%passwd
> > >    a) Note the SID
> > > 4. net getlocalsid
> > >    a) Note the SID, now check that all three SIDS reported are the same!
> > > 5. net rpc join -S NT4PDC -w DOMNAME -U Administrator%passwd
> > > 6. net rpc vampire -S NT4PDC -U administrator%passwd
> > > 7. pdbedit -L
> > >    a) Note - did the users migrate?
> > > 8. initGrps.sh DOMNAME
> > > 9. net groupmap list a) Now check that all groups are recognised
> > > 10. net rpc vampire -S NT4PDC -U administrator%passwd
> > > 11. pdbedit -Lv
> > >    a) Note - check that all group membership has been migrated
> > > Now it is time to migrate all the profiles, then migrate all policy
> > files.
> > > More later.
> > > ******************
> > >
> > > The problem is:
> > > 1) when using command "net rpc vampire..." (step 6), i found some
> > message
> > > bellow:
> > > [2003/07/07 16:25:59, 1] utils/net_rpc_samsync.c:fetch_account_info(454)
> > >   SAM Account for beda failed to be updated in the passdb!
> > > 2) In step 7 & 11, i found some message like this :
> > > build_sam_account: smbpasswd database is corrupt!  username lain with
> > uid 2 is
> > > not in unix passwd database!
> > > 3) I can't found file "initGrps.sh" (step 8)
> > >
> > > Can anybody tell me what is the problem?
> > > is there anybody doing this with successfull?
> >
> > The underlying idmap code is still changing. Many things have changed in
> > how the migration will work. Please wait for Beta3. By the time Beta3
> > ships this should be stable and I will then update the procedure so it
> > will work.
> >
> > You are correct that it is not fully functional right now.
> > Also, make sure that you have correctly  configured scripts for the
> > following:
> >
> >        add user script = /usr/sbin/useradd -m %u
> >        delete user script = /usr/sbin/userdel -r %u
> >        add group script = /usr/sbin/groupadd %g
> >        delete group script = /usr/sbin/groupadd %g
> >        add user to group script = /usr/sbin/usermod -G %g %u
> >        add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null
> > %u
> >
> > - John T.
> > --
> > John H Terpstra
> > Email: jht at samba.org
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> >
>
>

-- 
John H Terpstra
Email: jht at samba.org