[Samba] migrating from Samba 3 PDC to W2008 AD

[Vladimir Vassiliev]

Hi all,

I already can successfully join Samba 3 (3.3.x) server to AD domain and setup winbind service to see 
domain users on linux server.

The main problem for me is that I want to save all already existing uids and gids on linux server 
without any change.

Firstly, I can map domain user to unix user with "username map" option
vova = CORP\vova

But this trick doesn't work for groups, only for users.

But even this doesn't work for next share definition:
[testshare]
    path =/home/testshare
    guest ok=no
    write list = +CORP\testgroup
    force create mode = 0660
    force directory mode = 2770
    force group = +CORP\testgroup
    create mask = 0660
    directory mask = 2770

Domain user vova is member of domain group testgroup, so he would get access to share but when he is 
mapped to unix user vova (with "username map" option), he wouldn't. So "username map" looks useless 
for my problem.
I tried other methods of mapping accounts (net groupmap; wbinfo --set-gid-mapping) but they all 
nonfunctional.
Also I don't want to setup LDAP backend only for this mapping.
I struggle with this already some days, but still can't get solution and clean answer. Is this 
possible to join Samba to AD domain while saving local uids and gids? Or it's easier to just 
"rechown" all files on server?

Thank you all.

-- 
Vladimir Vassiliev