Short background :
Due to Windows Seven deplaoyment we have to upgrade Samba 3.0 to Samba 3.4 (actually less version but I see no reason not to go directly to 3.4). And due to SQL backend support aborted we have to switch from SQL backend to LDAP backend.

What I have in mind to do this migration is the following :

-install samba 34/OpenLDAP (I also change the machine in the meantime)
-configure Samba 34 to use the ldap backend, the smb.conf will be rewriten from scratch.
- sync the sid with net getlocalsid and netsetlocalsid.
-pdbedit -e to export users and pdbedit -eg to export groups (on the old server).
-pdbedit -i and pdbedit -ig on the new server.
-tests.

I'm far to be an expert in Samba, so advices on this procedure are very welcome.


While checking that everything should be ok, I did a pdbedit -L and many lines (less than 1000) like this one appeared :
lookup_global_sam_rid: looking up RID 513.
Executing query SELECT nt_logon_time,nt_logoff_time,nt_kickoff_time,nt_pass_last_set_time,nt_pass_can_change_time,nt_pass_must_change_time,username,nt_domain,nt_username,gecos,nt_homedir,nt_dir_drive,nt_logon
Can't find a unix id for an unmapped group
No user SID retrieved from database!

There are 3 RIDs concerned : 513, 11001, 515.

Can I correct this error before migrating ? Is it mandatory/interesting to correct this error ?

This is the output of the testparm command :

Load smb config files from /usr/local/etc/smb.conf
Processing section "[netlogon]"
Unknown parameter encountered: "readable"
Ignoring unknown parameter "readable"
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions

[global]
        dos charset = 850
        unix charset = ISO8859-1
        workgroup = CYANIDE
        netbios name = PDC
        server string = Primary Domain Controller
        passdb backend = mysql:foo
passwd program = /usr/local/bin/php -q /root/CyanManager/samba/update_mysql_password.php %u
        passwd chat = "password:" %n\n "ok\n"
        passwd chat debug = Yes
        unix password sync = Yes
        log level = 5
        log file = /var/log/samba/log.%m
        fam change notify = No
        load printers = No
        domain logons = Yes
        os level = 128
        preferred master = Yes
        domain master = Yes
        dns proxy = No
        wins support = Yes
        foo:unknown 6 column = nt_unknown_6
        foo:logon count column = nt_logon_count
        foo:bad password count column = nt_bad_password_count
        foo:logon hours column = nt_logon_hours
        foo:hours len column = nt_hours_len
        foo:logon divs column = nt_logon_divs
        foo:acct ctrl column = nt_acct_ctrl
        foo:plain pass column = NULL
        foo:nt pass column = nt_pw
        foo:lanman pass column = nt_lm_pw
        foo:group sid column = nt_group_sid
        foo:user sid column = nt_user_sid
        foo:munged dial column = nt_munged_dial
        foo:unknown string column = nt_unknown_str
        foo:workstations column = nt_workstations
        foo:acct desc column = nt_acct_desc
        foo:profile path column = nt_profile_path
        foo:logon script column = nt_logon_script
        foo:dir drive column = nt_dir_drive
        foo:home dir column = nt_homedir
        foo:fullname column = gecos
        foo:nt username column = nt_username
        foo:domain column = nt_domain
        foo:username column = username
        foo:pass history = NULL
        foo:pass must change time column = nt_pass_must_change_time
        foo:pass can change time column = nt_pass_can_change_time
        foo:pass last set time column = nt_pass_last_set_time
        foo:kickoff time column = nt_kickoff_time
        foo:logoff time column = nt_logoff_time
        foo:logon time column = nt_logon_time
        foo:mysql database = ***********
        foo:mysql password = ************
        foo:mysql user = ********
        foo:mysql host = 10.1.8.12
        foo:host = 10.1.8.12
        admin users = administrateur

[netlogon]
        path = /var/samba/netlogon
        browseable = No


--
Bastien Semene
Administrateur Réseau&  Système

Cyanide Studio - FRANCE

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to