samba - Aug 2002 - PDC to LDAP migration

I'm migrating a NT4 PDC over to a Samba OpenLDAP PDC.  I've migrated the
user and computer accounts fine.  I using pwdump and the tools from
http://samba.idealx.org/, to do this.

But I'm at a lose with migration of groups from NT4 PDC over to the Samba
LDAP PDC.  I've heard it's possible with rpcclient.  Any information on
how
to do this would be appreciated.


-Jason Yates

Hi,

On Tue, 20 Aug 2002 16:02:32 -0400
"Jason Yates" <jyates@dataservice.org> wrote:
> But I'm at a lose with migration of groups from NT4 PDC over to the
> Samba LDAP PDC.  I've heard it's possible with rpcclient.  Any
> information on how to do this would be appreciated.
You can get the groups from your NT Server:

rpcclient -U administrator%password -c 'enumdomgroups' SERVERNAME

With the hex RID you could now get the members of each group, here for the
"Domain Users":

rpcclient -U administrator%password -c 'querygroupmem 0x201' SERVERNAME

Or the groups a user (identified by the decimal RID) is in:

rpcclient -U administrator%password -c 'queryusergroups 1107' SERVERNAME

And with a bit of effort and perlmagic, you could build yourself a nice
script which gets the users and their groupmemberships and puts them into
Linux groups.

Goetz