[Samba] coexisting with samba2-ldap and samba3-ldap

[Paul Gienger]

> Hi, in my local network i have two samba server (2.2.8a) :
> 
> 
> [samba-2.2.8a-ldap PDC and OpenLDAP server]-> contains scripts,policies
> [samba-2.2.8a-ldap File server] -> contains data (160GB)
> 
> Recently i upgrade PDC to samba 3.0.12 and OpenLDAP server(2.2.23).
> The PDC works correctly but when the scripts mount a share from samba FS
> not works because still using old ldap attributes.
> 
> I'm trying to change some parameters, for example (smb.conf):
> 
> ldap filter = (&(uid=%u)(objectclass=sambaSamAccount))
> 
> and in /etc/ldap.conf:
> 
> nss_map_objectclass sambaAccount sambaSamAccount
> nss_map_attribute pwdLastSet sambaPwdLastSet
> nss_map_attribute logonTime sambaLogonTime
> [...]
> 
> many attributes (old rid, old primaryGroupID, etc.) are not identical
> and i don't know if i can map this and i don't know if samba take into
> account the /etc/ldap.conf configuration.
> 
> exists some way to do this without having to update everything to
> version 3?

Have you tried to make the 2.2.8a machine a simple member server which pulls
it's auth info from the main server rather than going direct to LDAP?  I
know we went the other way, i.e. 3.0.x as a member to a 2.2.x domain, and
that worked fine.