[Samba] pdbedit how to change a domain
John Davis
johnd at firstnls.com
Mon Feb 14 17:18:17 GMT 2005
Samba version 3.0.9 on Red Hat 9.0
workstations: NT 4.0 SP6
When I took over this project, there were two domains connected by a
VPN. For reasons that I'm unable to understand, some new users wound up
with the intended domain of SATA and some wound up in SATB (even though
they joined the SATA domain. Recently, all kinds of problems have
materialized and the only thing I can find wrong is the fact that people
logging into the SATA domain are sometimes (at least according to
pdbedit) members of the SATB domain (now defunct, and shut off). My
immediate fix was to remove the user's profile, and recreate it from
scratch, but this is a heavy handed and clumsy approach, and not
efficient when you have hundreds problems like this to address. Using
google, I looked for a way to change the domain, and it appears as
though this is unsupported, or at least is not a common enough issue to
have been asked and answered. There must be a way to move people from
one domain to another fairly easily, but I don't know what it is.
Consulting man pdbedit also gives no hints, so I may not even be using
the right tool. Could someone enlighten me on what I'm missing?
//example follows
User krish logs into SATA every morning, but seems to get bizarre errors
when opening her documents and using other domain resources. User
maggieg has no issues of any kind. In fact, all (hundreds) users with
permissions issues have the SATB domain instead of the SATA domain.
There are no issues with users who have the SATA domain, so I concluded
that the problems are caused by the wrong domain. Here's some output
from pdbedit -L -v to illustrate:
---------------
Unix username: krish
NT username:
Account Flags: [U ]
User SID: S-1-5-21-3135006320-233574996-2523178827-5648
Primary Group SID: S-1-5-21-3135006320-233574996-2523178827-3005
Full Name: KRIS HOSINO
Home Directory: \\firewall2\krish
HomeDir Drive:
Logon Script: kix32.exe sat.kix
Profile Path: \\FIREWALL2\profiles\krish
Domain: SATB
Account desc:
Workstations:
Munged dial:
Logon time: 0
Logoff time: Mon, 18 Jan 2038 19:14:07 GMT
Kickoff time: Mon, 18 Jan 2038 19:14:07 GMT
Password last set: Thu, 27 Jan 2005 19:55:26 GMT
Password can change: Thu, 27 Jan 2005 19:55:26 GMT
Password must change: Mon, 18 Jan 2038 19:14:07 GMT
Last bad password : 0
Bad password count : 0
Logon hours : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
---------------
Unix username: maggieg
NT username:
Account Flags: [U ]
User SID: S-1-5-21-3135006320-233574996-2523178827-6900
Primary Group SID: S-1-5-21-3135006320-233574996-2523178827-3005
Full Name: MARGARET GAGNON
Home Directory: \\firewall2\maggieg
HomeDir Drive:
Logon Script: kix32.exe sat.kix
Profile Path: \\FIREWALL2\profiles\maggieg
Domain: SATA
Account desc:
Workstations:
Munged dial:
Logon time: 0
Logoff time: Mon, 18 Jan 2038 19:14:07 GMT
Kickoff time: Mon, 18 Jan 2038 19:14:07 GMT
Password last set: Mon, 24 Jan 2005 08:14:02 GMT
Password can change: Mon, 24 Jan 2005 08:14:02 GMT
Password must change: Mon, 18 Jan 2038 19:14:07 GMT
Last bad password : 0
Bad password count : 0
Logon hours : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
---------------
TIA
More information about the samba
mailing list