[Samba] Migrating user accounts Samba 3.5.3 to Windows 2003 (2008)

ITSEF Admin itsef-admin at brightsight.com
Tue Oct 18 09:58:26 MDT 2011


Hi all,

I need some help with the following problem:

I need to migrate a bunch of user accounts to another domain on a Windows 2003 
server (eventually to 2008R2, but that step seemed to big to do in one go). 
To keep all access rights etc. correct, I need to get the SID history set 
correctly as well.

From what I've researched so far, I'm aware of 
http://lists.samba.org/archive/samba/2005-April/103743.html
and
http://lists.samba.org/archive/samba/2005-June/107028.html

which basically state that this migration should be possible using ADMT. As 
far as I know, I have all prerequisites in places as listed in those 
postings, however, I still cannot get ADMT to run. It does find the Samba 
server and recognises it as domain controller for OLDDOMAIN, but when I ask 
it to migrate SID history as well, I get a rather cryptic error "Could not 
verify auditing and TcpipClientSupport on domains. Will not be able to 
migrate Sid's. The system cannot find the file specified." Unfortunately, 
Aunt Google does not have much on that one... Neither tshark nor Process 
Monitor nor the Samba logs provided any additional clues (that I would 
recognise), so this was a dead end for the time being.

After having checked and re-checked domain trusts, administrator accounts 
(with equal passwords), SID filters being off, ... on both machines, I then 
tried a different approach: The "sidhist.vbs" script from the 2003 support 
tools, which in theory should be able to accomplish the same. However, when I 
try to run this script, I also get an error: "Error 0x800706BA, Unable to 
read the configuration information of the computer "SAMBA_DC". The error was: 
The RPC server is unavailable." I've done a lot of searching on this one as 
well, I even went as far as running tshark on the connection to see whether 
that would yield any clues - but came up empty yet again.

Unfortunately, I'm now at the end of my - limited - knowledge of both Samba 
and Windows and would therefore like to ask whether anyone on this list may 
be able to hit me with the appropriate clue stick and/or point me in the 
direction of the proper TFM. Any tips for solving or even just debugging this 
are most welcome.

Thanks in advance,

Thomas


More information about the samba mailing list