Showstopper! Samba 2.2.8 can't read TDB files from previous versions.

[Michael Steffens]

Fredrik Ohrn wrote:
> It seems that Samba 2.2.8 is unable to open TDB files written by older 
> versions. Instead it just overwrites them with a fresh file.
> 
> This caused our domain-server to loose the domain SID leaving all our NT 
> clients out in the cold. We use a domain SID extracted from the previous 
> PDC, an old WinNT 4.0 server that was scrapped.
> 
> Our print server also lost it's registry of printerdrivers and settings.
> 
> 
> To verify this yourself, try the tdbtool utility. The 2.2.8 version can't 
> open "old" TDB files. The other way round works though, tdbtool from 
> 2.2.7a can open "new" TDB files written by 2.2.8.
> 
> 
> To salvage the domain SID I copied smbpasswd.c from 2.2.8 into a 2.2.7a 
> source tree and compiled it, then I could use the new -X and -W options to 
> extract the SID from the old secrets.tdb and write it into a fresh TDB 
> from 2.2.8.
> 
> I'm still working on the printersettings...
> 
> 
> Anyway, if anyone can replicate this I'd suggest that 2.2.8 should be 
> retracted or atleast a big fat warning should be posted that you may 
> loose your domain SID effectively killing your domain-controller.

Hmm, at least secrets.tdb and winbind_idmap.tdb survived the upgrade
well on four machines here, previous versions 2.2.7a and 2.2.6. All
of them running as domain members, however, none being DC...

Cheers!
Michael