samba - Oct 2002 - Re-establishing a Samba 2.2.1a domain controller after major "crash"

Our Samba 2.2.1a domain controller suffered a major disk error the other
day. The partition with /etc and /dev died. :(
I?ve now reinstalled SuSE 7.3, and re-established the UNIX password files
(passwd, group, shadow) from backup, further more I?ve re-established the
files from /etc/samba (MACHINE.SID, groups.mapping, lmhosts, machine.sid,
secrets.tdb, smb.conf, smbpasswd, smbusers).

All my shares are up and running and the users can log on to the server, and
they can map the shares. The only, but major, problem I experiences is: The
workstations has lost the ?thrust? to the domain controller. If I check the
/etc/samba/smbpasswd file the ?Machine Trust Account? exists. Have I missed
a file or something, or is it just not possible to re-establish a domain
controller via the config files?

ANY help is MUCH appreciated, this is a domain with 250 computers, and so
going around and rejoining all the computers is to time consuming. And I
would really like to have the system back online Monday morning.

Further more, I plan to upgrade to 2.2.6 ASAP (when I've solved the Trust
issue) Is this a good version or should I use an older version like 2.2.5
or??

TIA.

Lasse

Lasse Taul Bjerre wrote:
> 
> Our Samba 2.2.1a domain controller suffered a major disk error the other
> day. The partition with /etc and /dev died. :(
> I?ve now reinstalled SuSE 7.3, and re-established the UNIX password files
> (passwd, group, shadow) from backup, further more I?ve re-established the
> files from /etc/samba (MACHINE.SID, groups.mapping, lmhosts, machine.sid,
> secrets.tdb, smb.conf, smbpasswd, smbusers).
> 
> All my shares are up and running and the users can log on to the server,
and
> they can map the shares. The only, but major, problem I experiences is: The
> workstations has lost the ?thrust? to the domain controller. If I check the
> /etc/samba/smbpasswd file the ?Machine Trust Account? exists. Have I missed
> a file or something, or is it just not possible to re-establish a domain
> controller via the config files?
> 
> ANY help is MUCH appreciated, this is a domain with 250 computers, and so
> going around and rejoining all the computers is to time consuming. And I
> would really like to have the system back online Monday morning.
Ensure that you copy across *all* the mentioned files, and before you
start smbd.  Also, ensure you must use exactly the same hostname.  If
you have the misfortune to start smbd without the old secrets.tdb in
place, or the hostname changed, it will regenerate the SID, causing this
problem.
> Further more, I plan to upgrade to 2.2.6 ASAP (when I've solved the
Trust
> issue) Is this a good version or should I use an older version like 2.2.5
> or??
2.2.6 is a 'good' version, as far as we can tell :-).

(The pre and RC releases cleaned out quite a number of nice little
bugs).

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net