[Samba] Standalone Server User Import / Export
rpenny at samba.org
Fri Aug 9 12:41:20 UTC 2019
On 09/08/2019 12:49, David Ayers via samba wrote:
> Am Freitag, den 09.08.2019, 08:45 +0100 schrieb Rowland penny via
>> On 09/08/2019 07:38, David Ayers via samba wrote:
>>> Am Donnerstag, den 08.08.2019, 20:01 +0100 schrieb Rowland penny
>>> But what I could do, is copy the setup incl. the tdb files to a
>>> test VM to try to reproduce it, upgrade that test VM in the hope to
>>> produce a dump, that can then be imported back into new clean
>>> installation of the older version.
>>> Is that feasible?
>>> I.e. would a clean dump of a later version be backward compatible
>> Yes and Yes
> Okay... just for validation of the process itself I just tried this:
> - installed the current version of Debian 10 (Buster) into a new vm
> - installed samba Version 4.9.5-Debian
> - without any changes to the default smb.conf:
> ayers at vmbuster:~$ sudo smbpasswd -a ayers
> New SMB password:
> Retype new SMB password:
> Added user ayers.
> ayers at vmbuster:~$ sudo pdbedit -L -v
> Unix username: ayers
> NT username:
> Account Flags: [U ]
> User SID: S-1-5-21-2831882250-3016382946-1246711671-1000
> Primary Group SID: S-1-5-21-2831882250-3016382946-1246711671-513
> Full Name: David Ayers
> Home Directory: \\vmbuster\ayers
> HomeDir Drive:
> Logon Script:
> Profile Path: \\vmbuster\ayers\profile
> Domain: VMBUSTER
> Account desc:
> Munged dial:
> Logon time: 0
> Logoff time: Mi, 06 Feb 2036 16:06:39 CET
> Kickoff time: Mi, 06 Feb 2036 16:06:39 CET
> Password last set: Fr, 09 Aug 2019 13:40:33 CEST
> Password can change: Fr, 09 Aug 2019 13:40:33 CEST
> Password must change: never
> Last bad password : 0
> Bad password count : 0
> Logon hours : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
> ayers at vmbuster:~$ sudo pdbedit -e tdbsam:/home/ayers/samba.tdbsam-export
> ayers at vmbuster:~$ sudo tdbdump samba.tdbsam-export
> key(19) = "INFO/minor_version\00"
> data(4) = "\00\00\00\00"
> key(9) = "NEXT_RID\00"
> data(4) = "\E8\03\00\00"
> key(13) = "INFO/version\00"
> data(4) = "\04\00\00\00"
> I assume that ist not what its supposed to look like?
I don't think so, I have just checked on a standalone server in a VM and
I get a very similar result. I did run tdbdump against
/var/lib/samba/private/passdb.tdb and get more output, but it is
unreadable, even though 'man tdbdump' says this:
tdbdump is a very simple utility that 'dumps' the contents of a TDB
(Trivial DataBase) file to standard output in a human-readable format.
There is a big difference between readable and understandable, there
doesn't seem to be much point in a 'dump' that you cannot understand, or
am I missing something ?
Having said that, they are .tdb files, so back them up with tdbbackup
copy the resulting .bak to the new computer and remove the .bak suffix.
More information about the samba