[Samba] pdbedit how to change a domain

John Davis johnd at firstnls.com
Mon Feb 14 17:18:17 GMT 2005


Samba version 3.0.9 on Red Hat 9.0
workstations: NT 4.0 SP6

When I took over this project, there were two domains connected by a 
VPN. For reasons that I'm unable to understand, some new users wound up 
with the intended domain of SATA and some wound up in SATB (even though 
they joined the SATA domain. Recently, all kinds of problems have 
materialized and the only thing I can find wrong is the fact that people 
logging into the SATA domain are sometimes (at least according to 
pdbedit) members of the SATB domain (now defunct, and shut off). My 
immediate fix was to remove the user's profile, and recreate it from 
scratch, but this is a heavy handed and clumsy approach, and not 
efficient when you have hundreds problems like this to address. Using 
google, I looked for a way to change the domain, and it appears as 
though this is unsupported, or at least is not a common enough issue to 
have been asked and answered. There must be a way to move people from 
one domain to another fairly easily, but I don't know what it is. 
Consulting man pdbedit also gives no hints, so I may not even be using 
the right tool. Could someone enlighten me on what I'm missing?

//example follows

User krish logs into SATA every morning, but seems to get bizarre errors 
when opening her documents and using other domain resources. User 
maggieg has no issues of any kind. In fact, all (hundreds) users with 
permissions issues have the SATB domain instead of the SATA domain. 
There are no issues with users who have the SATA domain, so I concluded 
that the problems are caused by the wrong domain. Here's some output 
from pdbedit -L -v to illustrate:
---------------
Unix username:        krish
NT username:
Account Flags:        [U          ]
User SID:             S-1-5-21-3135006320-233574996-2523178827-5648
Primary Group SID:    S-1-5-21-3135006320-233574996-2523178827-3005
Full Name:            KRIS HOSINO
Home Directory:       \\firewall2\krish
HomeDir Drive:
Logon Script:         kix32.exe sat.kix
Profile Path:         \\FIREWALL2\profiles\krish
Domain:               SATB
Account desc:
Workstations:
Munged dial:
Logon time:           0
Logoff time:          Mon, 18 Jan 2038 19:14:07 GMT
Kickoff time:         Mon, 18 Jan 2038 19:14:07 GMT
Password last set:    Thu, 27 Jan 2005 19:55:26 GMT
Password can change:  Thu, 27 Jan 2005 19:55:26 GMT
Password must change: Mon, 18 Jan 2038 19:14:07 GMT
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
---------------
Unix username:        maggieg
NT username:
Account Flags:        [U          ]
User SID:             S-1-5-21-3135006320-233574996-2523178827-6900
Primary Group SID:    S-1-5-21-3135006320-233574996-2523178827-3005
Full Name:            MARGARET GAGNON
Home Directory:       \\firewall2\maggieg
HomeDir Drive:
Logon Script:         kix32.exe sat.kix
Profile Path:         \\FIREWALL2\profiles\maggieg
Domain:               SATA
Account desc:
Workstations:
Munged dial:
Logon time:           0
Logoff time:          Mon, 18 Jan 2038 19:14:07 GMT
Kickoff time:         Mon, 18 Jan 2038 19:14:07 GMT
Password last set:    Mon, 24 Jan 2005 08:14:02 GMT
Password can change:  Mon, 24 Jan 2005 08:14:02 GMT
Password must change: Mon, 18 Jan 2038 19:14:07 GMT
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
---------------



TIA


More information about the samba mailing list