Prev: [Samba] 2 domains, 2 password servers and one Samba installation
Next: [Samba] Samba on top of Windows?
From: Bastien Semene on 5 May 2010 10:10 Short background : Due to Windows Seven deplaoyment we have to upgrade Samba 3.0 to Samba 3.4 (actually less version but I see no reason not to go directly to 3.4). And due to SQL backend support aborted we have to switch from SQL backend to LDAP backend. What I have in mind to do this migration is the following : -install samba 34/OpenLDAP (I also change the machine in the meantime) -configure Samba 34 to use the ldap backend, the smb.conf will be rewriten from scratch. - sync the sid with net getlocalsid and netsetlocalsid. -pdbedit -e to export users and pdbedit -eg to export groups (on the old server). -pdbedit -i and pdbedit -ig on the new server. -tests. I'm far to be an expert in Samba, so advices on this procedure are very welcome. While checking that everything should be ok, I did a pdbedit -L and many lines (less than 1000) like this one appeared : lookup_global_sam_rid: looking up RID 513. Executing query SELECT nt_logon_time,nt_logoff_time,nt_kickoff_time,nt_pass_last_set_time,nt_pass_can_change_time,nt_pass_must_change_time,username,nt_domain,nt_username,gecos,nt_homedir,nt_dir_drive,nt_logon Can't find a unix id for an unmapped group No user SID retrieved from database! There are 3 RIDs concerned : 513, 11001, 515. Can I correct this error before migrating ? Is it mandatory/interesting to correct this error ? This is the output of the testparm command : Load smb config files from /usr/local/etc/smb.conf Processing section "[netlogon]" Unknown parameter encountered: "readable" Ignoring unknown parameter "readable" Loaded services file OK. Server role: ROLE_DOMAIN_PDC Press enter to see a dump of your service definitions [global] dos charset = 850 unix charset = ISO8859-1 workgroup = CYANIDE netbios name = PDC server string = Primary Domain Controller passdb backend = mysql:foo passwd program = /usr/local/bin/php -q /root/CyanManager/samba/update_mysql_password.php %u passwd chat = "password:" %n\n "ok\n" passwd chat debug = Yes unix password sync = Yes log level = 5 log file = /var/log/samba/log.%m fam change notify = No load printers = No domain logons = Yes os level = 128 preferred master = Yes domain master = Yes dns proxy = No wins support = Yes foo:unknown 6 column = nt_unknown_6 foo:logon count column = nt_logon_count foo:bad password count column = nt_bad_password_count foo:logon hours column = nt_logon_hours foo:hours len column = nt_hours_len foo:logon divs column = nt_logon_divs foo:acct ctrl column = nt_acct_ctrl foo:plain pass column = NULL foo:nt pass column = nt_pw foo:lanman pass column = nt_lm_pw foo:group sid column = nt_group_sid foo:user sid column = nt_user_sid foo:munged dial column = nt_munged_dial foo:unknown string column = nt_unknown_str foo:workstations column = nt_workstations foo:acct desc column = nt_acct_desc foo:profile path column = nt_profile_path foo:logon script column = nt_logon_script foo:dir drive column = nt_dir_drive foo:home dir column = nt_homedir foo:fullname column = gecos foo:nt username column = nt_username foo:domain column = nt_domain foo:username column = username foo:pass history = NULL foo:pass must change time column = nt_pass_must_change_time foo:pass can change time column = nt_pass_can_change_time foo:pass last set time column = nt_pass_last_set_time foo:kickoff time column = nt_kickoff_time foo:logoff time column = nt_logoff_time foo:logon time column = nt_logon_time foo:mysql database = *********** foo:mysql password = ************ foo:mysql user = ******** foo:mysql host = 10.1.8.12 foo:host = 10.1.8.12 admin users = administrateur [netlogon] path = /var/samba/netlogon browseable = No -- Bastien Semene Administrateur Réseau& Système Cyanide Studio - FRANCE -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |