[K12OSN] Migrating from Samba 2.2.8 to Samba 3

[Brian Chivers]

Brian Chivers (Webmail) wrote:
> Has anyone managed to migrate from a samba 2.2.x PDC domain using a
> smbpasswd backend to a Samba 3 PDC with a OpenLDAP backend ?
>
> I have setup a test server using the excellent (creep creep)
> smbldap-installer script and I can join machines to the new server
> without a problem and login but with over 500 machines I don't really
> want to have to visit each machine. What I'd like is to export the
> users / machine accounts from the current domain, and import it to
> the one.
>
> I've set the SID to be the same as the existing system but when I
> move a machine from the old one to the new one or vice versa the
> machine complains that it's domain account doesn't exist.
>
> I've tried using pdbedit -i smbpasswd:/root/smbpasswd_old -e ldapsam
> but I get this error
>
> build_sam_account: smbpasswd database is corrupt!  username fred with
> uid 1060 is not in unix passwd database!
>
> Idea's please
>
> Thanks
> Brian
> Portsmouth College
>
>
>
> ---------------------------------------------------------------
>     The views expressed here are my own and not necessarily
>                 the views of Portsmouth College
>
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>

OK I hate to answer my own question but I'm so pleased that I've got it
working.

Turns out that I had to copy all the machine account entries from my old
servers passwd, shadow & smbpasswd file on the the new server.

I then merged the entries into the existing shadow & passwd and copied the
smbpasswd file to /etc/samba.

Then editted the smb.conf so the backend used both the smbpasswd & ldap.

Run pdbedit -i smbpasswd -e ldapsam and this moved the entries into the LDAP
backend.

I then removed the entries from shadow & passwd, remove the smbpasswd file,
took out the entry in smb.conf restarted and the machine now login OK.

The next thing is go get the profiles over & SID's corrected if necessary.

Brian


---------------------------------------------------------------
    The views expressed here are my own and not necessarily 
                the views of Portsmouth College