samba - Aug 2005 - Migrated fine except passwords

Hello,

I migrated 140 users and computer accounts from NT4 to Samba 3.0.14
with ldap today.
Smbldap-tools are the latest stable version from tarball.
  No errors during vampire and everyone came over
and the groups and group memberships populated fine.
We couldn't connect to the server as any user from client PC's.
The smbldaptools were set to use SSHA encryption for password attribute but
phpldapadmin showed the passwords as CRYPT with only 8 chars for all users.
I suspect the passwords never came over. In my previous lab, the passwords
migrated as SSHA encryption and worked fine.
I used smbldap-passwd to reset the password for one of the users and it shows
it is now SSHA and phpldapadmin lets me confirm the password.
Remote MS and Linux clients can now connect with the reset password.
I can reset all the user passwords manually but wonder what I may have
missed.

TIA

Kevin

[global]
unix charset = LOCALE
workgroup = GDAY
netbios name = GDAY1
server string = GDAY1
encrypt passwords = Yes
username map = /etc/samba/smbusers
log level = 0
syslog = 0
os level = 35
passdb backend = ldapsam:ldap://localhost
add user script = /usr/local/sbin/smbldap-useradd -m '%u'
#delete user script = /usr/local/sbin/smbldap-userdel '%u'
add group script = /usr/local/sbin/smbldap-groupadd '%g'
#delete group script = /usr/local/sbin/smbldap-groupdel '%g'
add user to group script = /usr/local/sbin/smbldap-groupmod -m '%u'
'%g'
#delete user from group script = /usr/local/sbin/smbldap-groupmod -x
'%u'
'%g'
set primary group script = /usr/local/sbin/smbldap-usermod -g '%g'
'%u'
add machine script = /usr/local/sbin/smbldap-useradd -w '%u'
domain logons = yes
preferred master = no
domain master = no
ldap suffix = dc=domain,dc=net
ldap machine suffix = ou=People
ldap user suffix = ou=People
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
ldap admin dn = cn=admin,dc=domain,dc=net
ldap ssl = no
idmap uid = 10000-20000
idmap gid = 10000-20000
logon path logon drive = H:
wins support = yes


[homes]
comment = Home Directories
valid users = %S
read only = no
browseable = no

Kevin B wrote:
> Hello,
> We couldn't connect to the server as any user from client PC's.
> The smbldaptools were set to use SSHA encryption for password
> attribute but phpldapadmin showed the passwords as CRYPT with only 8
> chars for all users. I suspect the passwords never came over. In my
> previous lab, the passwords migrated as SSHA encryption and worked
> fine.   
You know that no POSIX passwd info will come over don't you?  To do that the
samba passwd stuff would have to be cracked ond then put into SSHA or MD5
format.  Which the tools don't do.  So you will only get the samba passwd
and then if you are wanting to use other linux services that require POSIX
passwords you will need to use some of the password sync option s in
smb.conf.

Cheers GS

Le Jeudi 11 Ao?t 2005 23:28, Kevin B a ?crit?:
> Hello,
Net vampire don t import password .
This passsword is fake password ,i think it s because ldap cannot allow blank 
field .

-- 
Laradji nacer <n.laradji at ovea dot com>
  oooo ovea http://www.ovea.com
T?l : +33 4 6767 0000 Gsm : +33 6 1059 6883
1024D/DFCF1726 : 33A5 7162 4370 9C30 E22C 0721 DBA7 CBEE DFCF 1726