[Samba] Export users from samba4(PDC) to a new installation of samba4(PDC)?

[Rowland Penny]

On 30/10/14 15:12, Brayan Vargas wrote:
> Hi Marc , thanks for answer,
>
> First of all I have to apologize for my english :) .
> The domain have a lot of problems: clients are disconnecting from domain continuosly, many many errors logs of dns(Its not working, I configured a bind9 in another server), missing libraries, etc.
> It is a bad installation by the guy was before me, and the company got some good hardwares, so I installed another samba4 like pdc following this instructions (http://mark.orbum.net/2014/02/22/compiling-samba-4-on-debian-wheezy-active-directory-domain-controllers-ho/) using one of the new machines, and I want to migrate just the users and their passwords from the actual pdc to the new one.
>
> ** Info actual pdc:
> *samba -V
> samba: /usr/lib/i386-linux-gnu/libwbclient.so.0: no version information available (required by /usr/lib/i386-linux-gnu/samba/libauth4.so)
> Version 4.0.0beta2
> * hostname: pdc
> * samba-tool domain info 192.168.10.197
> Forest : valcocr.int
> Domain : valcocr.int
> Netbios domain : VALCOCR
> DC name : pdc.valcocr.int
> DC netbios name : PDC
> Server site : Default-First-Site-Name
> Client site : Default-First-Site-Name
> *Debian 7.4 wheezy
> *domain 'DC=valcocr,DC=int'
>
> * /etc/samba/smb.conf
> # Global parameters
> [global]
> workgroup = VALCOCR
> server role = active directory domain controller
> realm = valcocr.int
> netbios name = PDC
> passdb backend = samba4
> dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, winreg, srvsvc
> server services = rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate, smb
> log file = /var/log/samba/log.%m
>
> [netlogon]
> path = /var/lib/samba/sysvol/valcocr.int/scripts
> read only = No
>
> [sysvol]
> path = /var/lib/samba/sysvol
> read only = No
>
> [Users]
> directory_mode: parameter = 0700
> read only = no
> path = /Users
> csc policy = documents
>
>
>
> **New pdc
> root at atlante:~# samba -V
> Version 4.1.13
>
> *hostname: atlante
> * domain 'DC=atlante,DC=valcocr,DC=int'
> *Debian 7.4 wheezy
> *Original smb.conf from installation , no modifications .
>
> Thanks for you interest.
>
>
>
>
> ----- Mensaje original -----
>
> De: "Marc Muehlfeld" <mmuehlfeld at samba.org>
> Para: "Brayan Vargas" <bvargas at valcocr.com>, samba at lists.samba.org
> Enviados: Miércoles, 29 de Octubre 2014 12:45:41
> Asunto: Re: [Samba] Export users from samba4(PDC) to a new installation of samba4(PDC)?
>
> Hello Brayan,
>
> Am 28.10.2014 um 23:15 schrieb Brayan Vargas:
>> I am looking for a way to export all users (usernames/passwords)
>> from a pdc with samba4 to an other hardware with a clean
>> installation of samba4 like pdc, they have the same
>> domain.int, if someone can show me the way, it would
>> be great.
> Do you have any problems with your domain? Or what is the reason for
> this extra effort?
>
> If there's really the need for such a procedure, then you should give
> more information. Samba version, passdb backend, etc.
>
>
> Regards,
> Marc
>
Hi, seeing as you are using Debian Wheezy, you could start again with a 
clean install, add backports to /etc/apt/sources.list, then install 
samba4 from backports. This will get you version 4.1.11 (but 4.1.13 is 
in sid and will presumably get to backports shortly), you can also 
install bind 9.9.5 from backports if required. Once you have all your 
required packages installed, you can then join this computer to your 
domain as another DC, everything should replicate to your new DC. 
Transfer all the FSMO roles (including the two 'hidden' DNS ones) to the 
new DC, or seize them, turn off the old DC and tidy up. OK, I know this 
is a very simplistic view of the process and that it will be a bit more 
involved, but I cannot see any other way of getting the passwords 
transferred.

Rowland