[Samba] Root user problems with Samba 3.0.0beta1

[John H Terpstra]

On Wed, 11 Jun 2003, David van Geyn wrote:

> Here's what I tested...
>
> rm -rf /usr/local/samba3 to delete the new samba installation
> cd /tmp/samba-3.0.0beta1
> make install
> cp /tmp/smb.conf /usr/local/samba3/lib
> cd /usr/local/samba3/bin
> ./smbpasswd -a root
> New SMB password:
> Retype new SMB password:
> pdb_getsampwnam: Unable to open TDB passwd
> (/usr/local/samba3/private/passdb.tdb)!
> Added user root.

Good.

>
> The user root is now added... what I had done before was that I had copied
> my samba 2.2.8 folder to samba3, and then run make install so it would
> 'upgrade'. I guess that didn't work out properly.
>
> Now my only question that remains, how do I get the old machine trust
> accounts from samba 2.2.8 over to the new tdbsam database correctly, and
> also, how do I keep the old domain's SID (or whatever it is) - So that all
> the machines don't need to be re-joined to a new domain.

copy smbpasswd from your old installation to the new one.

In your smb.conf [globals]:

	passdb backend = tdbsam, smbpasswd, guest


Then:

	pdbedit -e smbpasswd -i tdbsam

Then drop the smbpasswd from your smb.conf settings. You should now have
all your old accounts in the tdbsam. You can confirm that by:

	pdbedit -Lv

To recover your Domain SID: In Samba-2.2.8 use smbpasswd to print out your
domain SID.

Then in samba-3:

	net setlocalsid SID

>
> Is it possible?

Yep.

- John T.

>
> Thanks,
>
> David
>
> > On Wed, 11 Jun 2003, David van Geyn wrote:
> >
> >> Attached is smb.conf - I tried also setting passdb backend = tdbsam,
> >> guest, but it won't let me add the root user to the pass database.
> >
> > 1. Suggest you remove:
> > 	interfaces
> > 	socket address
> >
> > 2. Stop samba
> >
> > 3. Delete all *.tdb files
> >
> > 4. Add to your smb.conf file the interface scripts needed to add user and
> > machine accounts as well as groups, etc.
> >
> > 5. Restart samba
> >
> > 6. Run:
> > 	smbpasswd -a root
> > as the first thing you do.
> >
> > Please let me know how this goes. Attached is my working smb.conf file
> > FYI.
> >
> > - John T.
>

-- 
John H Terpstra
Email: jht at samba.org