haroon anwaar
2005-Aug-20 08:39 UTC
[Samba] Urgent - Password Migration from WINNT 4.0 to Samba-LDAP
Hi, I am working on migrating WINNT 4.0 Domain to Samba. User information is being stored in LDAP. I have done test migration and works fine. I can migrate users, groups and machine accounts. But, after migrating I have seen that it does migrate sambaLMPassword,sambaNTPassword fields but it does not migrate userPassword(unix password) field. For all my users, in the user password field, it has got the same password which is "e2NyeXB0fXg=" which does not look right. Is there any way, userPassword field can be updated with the correct entry while performing migration or immidiately after the migration. I got around 1200 users in my PDC and I want to make this migration without affecting users. I can re-set the passwords using smbldap-passwd but its a big pain to contact every user asking for their passwords. All the test migration have been done by following instructions on a document available on Samba by Example (http://us3.samba.org/samba/docs/man/Samba-Guide/ntmigration.html#id2584506). Any one's help in solving this issue is higly appreciated. Thanks Regards Haroon
Andrew Bartlett
2005-Aug-22 22:25 UTC
[Samba] Urgent - Password Migration from WINNT 4.0 to Samba-LDAP
On Sat, 2005-08-20 at 18:39 +1000, haroon anwaar wrote:> Hi, > > I am working on migrating WINNT 4.0 Domain to Samba. User information > is being stored in LDAP. I have done test migration and works fine. I > can migrate users, groups and machine accounts. But, after migrating I > have seen that it does migrate sambaLMPassword,sambaNTPassword fields > but it does not migrate userPassword(unix password) field. For all my > users, in the user password field, it has got the same password which > is "e2NyeXB0fXg=" which does not look right. > > Is there any way, userPassword field can be updated with the correct > entry while performing migration or immidiately after the migration. > I got around 1200 users in my PDC and I want to make this migration > without affecting users. I can re-set the passwords using > smbldap-passwd but its a big pain to contact every user asking for > their passwords.No, it is not possible to set the cleartext/md5/sha1 userPassword field, but it is also not required for operation of the Samba part of the server. (The encryption algorithms are incompatible). Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Samba Developer, SuSE Labs, Novell Inc. http://suse.de Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20050823/6d3c01d3/attachment.bin