samba - Jan 2014 - classicupgrade error: User 'Administrator' does not have SID ending in 500

Oh Boy.

User 'Administrator' in your existing directory has SID 
S-1-5-21-2070472328-935435760-1634736958-1000, expected it to be 
S-1-5-21-2070472328-935435760-1634736958-500
ERROR(<class 'samba.provision.ProvisioningError'>): uncaught
exception -
ProvisioningError: User 'Administrator' in your existing directory does 
not have SID ending in -500

It's not all that suprising that there's cleanups to do with this this 
old, old Samba3 domain with an openLDAP backend, created... many years ago.

very old. much cruft. so trouble!

But this one worries me - what should I do about this?

I'm inclined to create an account 'Old Administrator', give him the 
'-1000' SID and change the existing Administrator account to
'-500'.

Does this seem like a sensible approach to take?

Any suggestions?

M.

-- 
Michael Brown               | `One of the main causes of the fall of
Systems Consultant          | the Roman Empire was that, lacking zero,
Net Direct Inc.             | they had no way to indicate successful
?: +1 519 883 1172 x5106    | termination of their C programs.' - Firth

You should just try to change the SID to -500 on the old administrator

and re-run the migrate tool


On Wed, Jan 15, 2014 at 3:37 AM, Michael Brown <michael at netdirect.ca>
wrote:
> Oh Boy.
>
> User 'Administrator' in your existing directory has SID
> S-1-5-21-2070472328-935435760-1634736958-1000, expected it to be
> S-1-5-21-2070472328-935435760-1634736958-500
> ERROR(<class 'samba.provision.ProvisioningError'>): uncaught
exception -
> ProvisioningError: User 'Administrator' in your existing directory
does not
> have SID ending in -500
>
> It's not all that suprising that there's cleanups to do with this
this
> old, old Samba3 domain with an openLDAP backend, created... many years ago.
>
> very old. much cruft. so trouble!
>
> But this one worries me - what should I do about this?
>
> I'm inclined to create an account 'Old Administrator', give him
the
> '-1000' SID and change the existing Administrator account to
'-500'.
>
> Does this seem like a sensible approach to take?
>
> Any suggestions?
>
> M.
>
> --
> Michael Brown               | `One of the main causes of the fall of
> Systems Consultant          | the Roman Empire was that, lacking zero,
> Net Direct Inc.             | they had no way to indicate successful
> ?: +1 519 883 1172 x5106    | termination of their C programs.' - Firth
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

Hello,

Am Dienstag, den 14.01.2014, 14:37 -0500 schrieb Michael Brown:
> User 'Administrator' in your existing directory has SID 
> S-1-5-21-2070472328-935435760-1634736958-1000, expected it to be 
> S-1-5-21-2070472328-935435760-1634736958-500
> ERROR(<class 'samba.provision.ProvisioningError'>): uncaught
exception -
> ProvisioningError: User 'Administrator' in your existing directory
does
> not have SID ending in -500
> 
> It's not all that suprising that there's cleanups to do with this
this
> old, old Samba3 domain with an openLDAP backend, created... many years ago.
> 
> very old. much cruft. so trouble!
> 
> But this one worries me - what should I do about this?
> 
> I'm inclined to create an account 'Old Administrator', give him
the
> '-1000' SID and change the existing Administrator account to
'-500'.
> 
> Does this seem like a sensible approach to take?
I did the same as you suggests and it worked. Deleted user root with SID
-500 in LDAP and changed the -1000 in your case to -500 for the
migration classicupgrade work fine for the Administrator.

-- 
No?l K?the <noel debian.org>
Debian GNU/Linux, www.debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL:
<http://lists.samba.org/pipermail/samba/attachments/20140116/74d96624/attachment.pgp>