[K12OSN] LDAP rebuild question

[dahopkins at comcast.net]

Last night I used the ldap script to create a new ldap authentication server (need to move authentication from one system to another).  But ... when I tried to import the old ldif, I got errors/conflicts with the Samba groups created by the script and the existing groups from the current authentication server. (SID issues?)

Now, I could just delete the entire ldap database on the new server and import the old one.  My question though is how do I keep the samba information the same e.g. the new machine which is intended to become the pdc should look exactly like the old system to all windows boxes.  As it is right now, if I activate samba on the new system and then log onto the windows systems the users get new profiles created because the SID is different.  Should probably post this to the samba list, but since I used the ldap script, was hoping this had been addressed already.

Should I bring up the new authentication server using the bdc option, then edit the smb.conf to make it the pdc instead?  Would that fix it?  Or is there some samba-related file I can just copy over?

Sincerely,
Dave Hopkins