[Samba] Replacement pdc samba3 to samba4 nt classic

[Harry Jede]

Am Dienstag, 11. Oktober 2016 schrieben Sie:
> On 11.10.2016 13:52, Harry Jede via samba wrote:
> > On 10:43:49 wrote Gavrilov Aleksey via samba:
> > Until now, you have destroyed your domain.
> > Is the ldap directory on localhost in production or is this pc in a
> > test lab?
> 
> a copy of the old server ldap
> 
> >> How do I introduce a new PDC in a domain?
> > 
> > Only *one* PDC per domain is allowed! But one may have dozens of
> > BDCs and member servers. So, do you have a working PDC?
> 
> I do not have a working pdc now
> 
> > Or should the new machine replace an old PDC?
> 
> yes,it's replacement
> 
> > What ldap server are in use? Which version?
> 
> slapd/xenial-updates,now 2.4.42+dfsg-2ubuntu3.1 amd64 [installed]
> 
> 
> file system is damaged  on the old server
> I was able to restore some files
> have backups for the old server
> 
> I'm trying to make a change of PDC
OK, let us try to restore.

You may post the following in a private mail.
Post the out of those commands to give us some infos:

# the structure of your DIT
# ldapsearch -xLLL -H ldapi:/// -b dc=rugion,dc=ru hasSubordinates=TRUE dn

# the registered domains
# ldapsearch -xLLL -H ldapi:/// '(&(sambadomainname=*)(objectclass=sambadomain))' sambaDomainName sambaSID

# the machines and or trust accounts
# ldapsearch -xLLL -H ldapi:/// '(&(cn=*$)(objectclass=sambasamaccount))' sambaacctflags sambaSID


# ls -l /var/lib/samba/

# cat /etc/nsswitch.conf

# cat /etc/pam_ldap.conf |egrep -v '^#|^$'

# ls -l /etc/pam_ldap.secret

# cat /etc/pam.d/common-account|egrep -v '^#|^$'

# cat /etc/pam.d/common-auth|egrep -v '^#|^$'

# cat /etc/pam.d/common-password|egrep -v '^#|^$'

# cat /etc/pam.d/common-session|egrep -v '^#|^$'
-- 

Gruss
	Harry Jede