[Samba] How to move a samba PDC to a diffrent box

[Ivan Ordonez]

All seems to be working fine.  I had issues joining PC to the domain but 
it seems to be working now.  We did not do anything to fix the issue.  
We just waited and give the PDC few minutes and it works.

Thanks so much for all the help and suggestions.  You guys are great.

-Ivan


Ivan Ordonez wrote:
> Should this be set on smbldap.conf file?  If I do the command as you 
> suggest, the machine's local SID is going to be the domain's SID. Is 
> that something I should do?
>
> Thanks,
> -Ivan
>
> Bruno La Torre wrote:
>>
>>
>> Ivan Ordonez ha scritto:
>>>
>>>
>>> John Drescher wrote:
>>>>> Sorry to bother you.  I hope you can help me with my issue.
>>>>>
>>>>>     
>>>> Always cc to the list as well.
>>>>
>>>>  
>>>>> We have a domain with more than 100 users and we need to replace 
>>>>> our PDC.
>>>>> The PDC main function is to authenticate our users to connect to 
>>>>> the shared
>>>>> drive and to authenticate computer login.  The PDC is running 
>>>>> samba with
>>>>> openldap on Gentoo machine.  I have two BDCs with ACL set to read 
>>>>> and write
>>>>> only.  It was set that way to make the syncing process easier.  
>>>>> The syncing
>>>>> process is like a chain using slurpd.  We plan to use "syncrepl" 
>>>>> later.
>>>>>
>>>>> What is the best way to do to replace the PDC?  I already have a 
>>>>> Gentoo
>>>>> machine up and running.  I copied over all the samba and openldap 
>>>>> files from
>>>>> the old PDC to this new machine.  I also exported the database by 
>>>>> running
>>>>> the "slapcat -l" command.  I am hesitant to start the slapd, 
>>>>> slurpd and
>>>>> samba service as I am not so sure if I am doing the right thing.
>>>>>
>>>>>     
>>>> Disconnect the network cable on the new machine to make sure you are
>>>> not interfering with the rest of the network.
>>>> Start slapd then use slapadd to add your ldap to the database. Use
>>>> slapcat to verify that all was added and the ldif looks correct. Then
>>>> start samba and see if the smbclient can connect to itself.
>>>>
>>>> Is the old machine the same name as the new? How about the ipddress?
>>>> Are you using wins, lmhosts or dns for your clinets to find the pdc?
>>>>   
>>> I will try your suggestion.  We plan on using the same name on the 
>>> new machine and the same IP address as well. We are using WINS for 
>>> our client to find the PDC.
>>
>>
>> you must set on the new PDC the SID of the old PDC
>> see "net getlocalsid" and "net setlocalsid"
>>
>> bruno
>>