[Samba] Help / Suggestions on how to migrate to AD from smbpasswd

2011-03-04 Thread David Broome
Hello,

I have an older standalone Samba 3.0.14 system (security = user) with
local users and local home directories and shares. This uses another
'legacy' system for adding linux users accounts.  I then use the pam
plug-in pam_smbpass pam_smbpass.so migrate to create a smbpasswd
entry for users.

The UID's up to 8765 are currently in use ie:

etc/passwd: noni:x:8765:4251::/home/noni:/bin/bash
etc/samba/smbpasswd: noni:8765:bla:bla:[U  ]:LCT-4D2B7B16:

I hope to have the new system Samba 3.5.4 that I am migrating to use
AD (security = ads) for samba and ssh via PAM.

Will I be able to do this?

How do I keep the current users and their UIG / GID active while
changing them to authenticate to AD vs local files?All the
usernames match between my local accounts and the domain ones.

Except for root - how is root login handled? I assume as 'files' is
still in the nssswitch.conf that will work.

Will the Samba Add Users script work to add new users.  I would
expect if a used tried to login via ssh without a local account it
would not work, but would (and created the home dir) via Samba.

I would also set  AssumeDefaultDomain .

Should I use Likewise Open for this?

Thanks in advance.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Help / Suggestions on how to migrate to AD from smbpasswd

2011-03-04 Thread Volker Lendecke
On Fri, Mar 04, 2011 at 07:11:22PM -0800, David Broome wrote:
 I have an older standalone Samba 3.0.14 system (security = user) with
 local users and local home directories and shares. This uses another
 'legacy' system for adding linux users accounts.  I then use the pam
 plug-in pam_smbpass pam_smbpass.so migrate to create a smbpasswd
 entry for users.
 
 The UID's up to 8765 are currently in use ie:
 
 etc/passwd: noni:x:8765:4251::/home/noni:/bin/bash
 etc/samba/smbpasswd: noni:8765:bla:bla:[U  ]:LCT-4D2B7B16:
 
 I hope to have the new system Samba 3.5.4 that I am migrating to use
 AD (security = ads) for samba and ssh via PAM.
 
 Will I be able to do this?

Look at net idmap dump / net idmap restore.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba