[Samba] Moving users from a Samba 3.6 to 4.9 (tdb)

[Emmanuel Florac]

Le Thu, 8 Oct 2020 18:31:38 +0100
Rowland penny via samba <samba at lists.samba.org> écrivait:

> You do not normally run winbind on standalone server, so I think you 
> need to post the [global] portion of your old smb.conf, so we can
> find out just what you are running.

Here is the old one:

[global]
    name resolve order = wins lmhosts host bcast
    
    passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n . encrypt passwords = true
    passdb backend = tdbsam
    unix password sync = false
    passwd program = /usr/bin/passwd %u
    
    winbind separator = +
    winbind enum users = yes
    winbind enum groups = yes
    winbind cache time = 10
    idmap gid = 10000-20000
    idmap uid = 10000-20000
    obey pam restrictions = yes
    
    preserve case = yes
    short preserve case = yes
    inherit acls = yes
    nt acl support = yes
    dns proxy = no
    inherit permissions = yes
    
    load printers = no
    printcap name = /dev/null 
    disable spoolss = yes 
    printing = bsd

    invalid users = root

    local master = no
    domain master = no
    preferred master = no
    workgroup = WORKGROUP
    syslog only = no
    os level = 20
    security = user
    max log size = 1000
    load printers = no
    
    guest account = nobody
    wins support = no
    wins server = 127.0.0.1
    template shell = /bin/false
    server string = %h server (Samba %v)
    syslog = 0;
    panic action = /usr/share/samba/panic-action %d
    block size = 4096

    allow insecure wide links = yes


For comparison, there's almost nothing in the new one:


[global]
        netbios aliases = NAS
        passwd program = /usr/bin/passwd %u
        syslog = 0
        server role = standalone server
        log file = /var/log/samba/log.%m
        usershare allow guests = yes
        unix password sync = yes
        map to guest = bad user
        panic action = /usr/share/samba/panic-action %d
        passwd chat = *Enter\snew\s*\spassword:* %n\n
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
max log size = 1000 default = NAS
        pam password change = yes
        os level = 20
        obey pam restrictions = yes
        workgroup = WORKGROUP
        passdb backend = tdbsam
        dns proxy = no
        netbios name = 457NAS


-- 
------------------------------------------------------------------------
Emmanuel Florac     |   Direction technique
                    |   Intellique
                    |	<eflorac at intellique.com>
                    |   +33 1 78 94 84 02
------------------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 163 bytes
Desc: Signature digitale OpenPGP
URL: <http://lists.samba.org/pipermail/samba/attachments/20201009/d2816225/attachment.sig>