[Samba] How to move a samba PDC to a diffrent box

Ivan Ordonez iordonez at nature.berkeley.edu
Thu Jun 19 15:17:44 GMT 2008

Should this be set on smbldap.conf file?  If I do the command as you 
suggest, the machine's local SID is going to be the domain's SID. Is 
that something I should do?


Bruno La Torre wrote:
> Ivan Ordonez ha scritto:
>> John Drescher wrote:
>>>> Sorry to bother you.  I hope you can help me with my issue.
>>> Always cc to the list as well.
>>>> We have a domain with more than 100 users and we need to replace 
>>>> our PDC.
>>>> The PDC main function is to authenticate our users to connect to 
>>>> the shared
>>>> drive and to authenticate computer login.  The PDC is running samba 
>>>> with
>>>> openldap on Gentoo machine.  I have two BDCs with ACL set to read 
>>>> and write
>>>> only.  It was set that way to make the syncing process easier.  The 
>>>> syncing
>>>> process is like a chain using slurpd.  We plan to use "syncrepl" 
>>>> later.
>>>> What is the best way to do to replace the PDC?  I already have a 
>>>> Gentoo
>>>> machine up and running.  I copied over all the samba and openldap 
>>>> files from
>>>> the old PDC to this new machine.  I also exported the database by 
>>>> running
>>>> the "slapcat -l" command.  I am hesitant to start the slapd, slurpd 
>>>> and
>>>> samba service as I am not so sure if I am doing the right thing.
>>> Disconnect the network cable on the new machine to make sure you are
>>> not interfering with the rest of the network.
>>> Start slapd then use slapadd to add your ldap to the database. Use
>>> slapcat to verify that all was added and the ldif looks correct. Then
>>> start samba and see if the smbclient can connect to itself.
>>> Is the old machine the same name as the new? How about the ipddress?
>>> Are you using wins, lmhosts or dns for your clinets to find the pdc?
>> I will try your suggestion.  We plan on using the same name on the 
>> new machine and the same IP address as well. We are using WINS for 
>> our client to find the PDC.
> you must set on the new PDC the SID of the old PDC
> see "net getlocalsid" and "net setlocalsid"
> bruno

More information about the samba mailing list