[Samba] Office 365, Windows 10 and Samba AD

[Andrew Bartlett]

On Thu, 2016-04-07 at 14:22 +0200, Stefan G. Weichinger wrote:
> Am 2016-03-29 um 10:44 schrieb Rowland penny:
> 
> > There are a few gotchas, such as you will need to change any normal
> > user
> > & group SIDs that have RIDs less than 1000, note that I am not
> > talking
> > about users like 'Administrator' or groups like 'Domain Users',
> > just
> > normal users & groups.
> > 
> > Try to use the latest supported version of Samba that you can.
> 
> I am starting a new test of this in a current Debian-Jessie-VM.
> Took me some time to get the initial setup of "source" and "target"
> dirs
> correctly ... now the samba-tool runs through at last.
> 
> a) question regarding the groups (seems the main problem here):
> 
> I get something like this for one group
> 
> Exporting groups
> Ignoring group 'mygroup' S-1-5-21-2940660672-4062535256-4144655499
> -1010
> listed but then not found: Unable to enumerate group members,
> (-1073741722,No such group)
> 
> and something like this for all users:
> 
> Exporting users
> Ignoring group memberships of 'user'
> S-1-5-21-2940660672-4062535256-4144655499-1036: Unable to enumerate
> group memberships, (-1073741724,No such user)
> 
> What does that mean? That the users and the group don't exist in
> /etc/passwd and /etc/group on the new server? I realize I could try
> as I
> write this ... no, does not change a thing.

That is what it means.  The upgrade needs that NSS data to import the
information into the AD database.

> b) I want to change the stupid workgroup-name from OFFICE to
> something
> useful ... I assume that's problematic as the clients would have to
> be
> rejoined then?

Sadly yes.  

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba