I just sent this . but realized i sent it from the wrong email addy . want to make sure it gets thru to the list . so i'm resending . i apologize if both copies make it thru.
well . would help if i didn't hit the send key before pasting in the original msg . once again . my apologies btw . helpful info: mandrake rpms at 2.2.7a, mandrake 9.0 . .all patches applied. I just sent this . but realized i sent it from the wrong email addy . want to make sure it gets thru to the list . so i'm resending . i apologize if both copies make it thru. problem: migrating from one server to another . . .physical and software migration. copied all profiles and am in the process of adding a new automated system for domain management (mysql backend, blah balh) so the uid's changed for each user. this is what how i THOUGHT things would work: 1. everyone logs out 2. shutdown samba on old server 3. add new users to new server 4. transfer ALL data to new server, including profiles, setup permissions on files to correspond with new uids 5. finish config of smb.conf on new server, adding the proper shares, etc . basically a mirror of the old box. 6. start up new server . . .login 9x machines for testing. 7. rejoin all XP machines to the domain, and i should have been good to go. the problem lies in that once i rejoin an XP machine (testing with a couple right now) is that the profiles don't load properly. the user logs in, everything "seems" to be ok . in that the desktop icons are present, custom apps seem to work . .but pieces are broken. for example . . .OE or outlook . broken. it's like the ntuser.dat file doesn't get pulled .. . i noticed that under documents and settings on the local machines HD the owner wasn't correct for the correct profile directory (normally, just the user name) and upon logging in . there was a new profile directory created, username.domain. That "should" have been fine i thought . .as long as the profile was copied from the network . but it's NOT being copied . . . .so i tried different machines . and various tests . from rejoining the domain and changing permission BEFORE logging in as the user to . .well . everything i can think of. so . my question is two fold . .is there any reason an XP machine that DID copy profiles from the network BEFORE the change wouldn't copy them now? logon path and logon home variables are the SAME and my 9x machines WORK fine . .i've got about 100 XP machines out there tho . .and i NEED this to work . .or i'm going to attempt to go back to the old server. last question . what is the "proper" profile directory . . username or username.domain and what is the presence of these two directories telling me . if anything? any help is appreciated GREATLY. Anthony Hardy Director of MIS Jefferson Davis Community College AIM: trist1066 Yahoo: trist1066 MSN: soma@fragfest.net icq 1221725
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1> Date: 01 Apr 2003 10:11:01 +1000 > From: richard <rcoates@bigpond.net.au> > To: Anthony Hardy <mis@jdcc.edu> > Cc: "samba@lists.samba.org" <samba@lists.samba.org> > Subject: Re: [Samba] XP Machines/profiles/migration issues > Message-ID: <1049155862.2283.18.camel@mynewbox> > In-Reply-To: <00d301c2f7b0$f390c0d0$fb020a0a@misdir> > References: <00d301c2f7b0$f390c0d0$fb020a0a@misdir> > Content-Type: text/plain > MIME-Version: 1.0 > Content-Transfer-Encoding: 7bit > Precedence: list > Message: 5 > > I'm no expert on Xp profiles but..doesen't xp assign a sid to each user > in the profile. I believe you'll have to create your new domain-user on > new server THEN copy old profile over newly created one (using xp user > tools). There have posts on how to do this earlier this year. regards, > Richard Coates. >Well, this will not fix the ntuser.dat, since the ACLs in the file will still have the old SIDs.> On Tue, 2003-04-01 at 04:11, Anthony Hardy wrote: > >>> well . would help if i didn't hit the send key before pasting in the >>> original msg . once again . my apologies >>> >>> btw . helpful info: >>> >>> mandrake rpms at 2.2.7a, mandrake 9.0 . .all patches applied. >>> >>> I just sent this . but realized i sent it from the wrong email addy. want>>> to make sure it gets thru to the list . so i'm resending . iapologize if>>> both copies make it thru. >>> >>> problem: >>> >>> >>> migrating from one server to another . . .physical and softwaremigration.>>> copied all profiles and am in the process of adding a new automatedsystem>>> for domain management (mysql backend, blah balh) so the uid'schanged for>>> each user. >>>Are you using the samba mysql sam backend (is that in 2.2.x, if not, you may want to try samba3). Also, LDAP may be a better backend for 2.2.x.>>> this is what how i THOUGHT things would work: >>> >>> 1. everyone logs out >>> 2. shutdown samba on old server >>> 3. add new users to new server >>> 4. transfer ALL data to new server, including profiles, setuppermissions on>>> files to correspond with new uids >>> 5. finish config of smb.conf on new server, adding the propershares, etc .>>> basically a mirror of the old box. >>> 6. start up new server . . .login 9x machines for testing. >>> 7. rejoin all XP machines to the domain, and i should have been goodto go.>>> >>> the problem lies in that once i rejoin an XP machine (testing with acouple>>> right now) is that the profiles don't load properly. the user logs in, >>> everything "seems" to be ok . in that the desktop icons are present,custom>>> apps seem to work . .but pieces are broken. >>>Chances are that if you need to rejoin machines to the domain, you are going to need to fix the profiles. You should aim not to need to rejoin machines.>>> for example . . .OE or outlook . broken. it's like the ntuser.dat file >>> doesn't get pulled .. .Probably becuase the ACLs in the profile itself don't allow the user to read the settings.>>> >>> i noticed that under documents and settings on the local machines HD the >>> owner wasn't correct for the correct profile directory (normally,just the>>> user name) and upon logging in . there was a new profile directorycreated,>>> username.domain. That "should" have been fine i thought . .as longas the>>> profile was copied from the network . but it's NOT being copied .. . .so>>> i tried different machines . and various tests . from rejoining thedomain>>> and changing permission BEFORE logging in as the user to . .well . >>> everything i can think of. >>>If you don't repair the profile, you will have to delete it first.>>> so . my question is two fold . .is there any reason an XP machinethat DID>>> copy profiles from the network BEFORE the change wouldn't copy them now?Yes, the SIDs have changed.>>> logon path and logon home variables are the SAME and my 9x machines WORK >>> fine98 doesn't have SIDs, NT, 2k and XP do.>>> . .i've got about 100 XP machines out there tho . .and i NEED this to >>> work . .or i'm going to attempt to go back to the old server. >>>It may be possible for you to fix this using the profiles binary in samba3. Easiest way for you to do that is to install samba3-server and samba3-common alpha22 (haven't gotten around to building alpha23 yet ...) from here: http://ranger.dnsalias.com/mandrake/9.0/samba3/ These packages are made to parallel-install with Mandrake samba-2.2.x RPMs, so they are safe to use (just check the smb3 is off with chkconfig after installing it) Then, run # profiles3 I have forgotten how to use it, but just read the --help, iy has an option for changing SIDs. Just ensure your existing profiles are backed up. Buchan - -- |--------------Another happy Mandrake Club member--------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE+ibMqrJK6UGDSBKcRAqLZAJ4kdRDXXzzbWbBKzCFtsiRNOmF7rACgkT8a Qg2PAOZGTIH1Z7ARWnq0a6s=RFQG -----END PGP SIGNATURE-----
On Thu, 3 Apr 2003, Jim Wharton wrote:> I wasn't aware that there was a Microsoft tool for migrating profiles. > (Nothing short of sticking a CD in the drive of course... ;-)On MS Windows 2000 Pro log on as the local administrator. Right click on 'My Computer' icon, select properties. Left click on 'User Profiles' tab Select the profile you wish to convert (migrate) Click on 'Copy To' button In the permitted to use box, click on the 'Change' button Click on 'Look in' area that lists the machine name, click there to open up a selection box. Click on the domain to which the profile must be accessible. Note: You will need to log onto any domain you might choose. Note2: You may temporarily want to assign the right to use to 'Everyone' Click 'Ok' Click 'Ok' again. Done. Under Samba-3.0.0 you can do further editting with the 'profiles' tool. - John T.> > What is it? > > Jim > > > -----Original Message----- > > From: John H Terpstra [mailto:jht@samba.org] > > Sent: Wednesday, April 02, 2003 11:16 PM > > To: Jim Wharton > > Cc: samba@lists.samba.org > > Subject: Re: [Samba] XP Machines/profiles/migration issues > > > > > > On Wed, 2 Apr 2003, Jim Wharton wrote: > > > > > Would it be possible to use this tool (profile3) to copy an > > NT4 profile to a > > > 2000 box? It must be possible to do it since MS can do it > > during an upgrade. > > > Does anyone know of a tool for this. > > > > Yes, you could use the 'profiles' to from samba-3 to do this, but why? > > You could also use the Microsoft tool to migrate profiles. If > > you can wait > > a few days I will finish documenting this in the > > Samba-HOWTO-Collection.pdf file that will be in the > > Samba-3.0.0 branch. > > > > - John T. > > > > > > > > Jim > > > > > > > > > ----- Original Message ----- > > > From: "Buchan Milne" <bgmilne@cae.co.za> > > > To: "Anthony Hardy" <mis@jdcc.edu> > > > Cc: <samba@lists.samba.org> > > > Sent: Tuesday, April 01, 2003 10:41 AM > > > Subject: Re: [Samba] XP Machines/profiles/migration issues > > > > > > > > > > -----BEGIN PGP SIGNED MESSAGE----- > > > > Hash: SHA1 > > > > > > > > > Date: 01 Apr 2003 10:11:01 +1000 > > > > > From: richard <rcoates@bigpond.net.au> > > > > > To: Anthony Hardy <mis@jdcc.edu> > > > > > Cc: "samba@lists.samba.org" <samba@lists.samba.org> > > > > > Subject: Re: [Samba] XP Machines/profiles/migration issues > > > > > Message-ID: <1049155862.2283.18.camel@mynewbox> > > > > > In-Reply-To: <00d301c2f7b0$f390c0d0$fb020a0a@misdir> > > > > > References: <00d301c2f7b0$f390c0d0$fb020a0a@misdir> > > > > > Content-Type: text/plain > > > > > MIME-Version: 1.0 > > > > > Content-Transfer-Encoding: 7bit > > > > > Precedence: list > > > > > Message: 5 > > > > > > > > > > I'm no expert on Xp profiles but..doesen't xp assign a > > sid to each user > > > > > in the profile. I believe you'll have to create your > > new domain-user on > > > > > new server THEN copy old profile over newly created one > > (using xp user > > > > > tools). There have posts on how to do this earlier this > > year. regards, > > > > > Richard Coates. > > > > > > > > > > > > > Well, this will not fix the ntuser.dat, since the ACLs in > > the file will > > > > still have the old SIDs. > > > > > > > > > On Tue, 2003-04-01 at 04:11, Anthony Hardy wrote: > > > > > > > > > >>> well . would help if i didn't hit the send key before > > pasting in the > > > > >>> original msg . once again . my apologies > > > > >>> > > > > >>> btw . helpful info: > > > > >>> > > > > >>> mandrake rpms at 2.2.7a, mandrake 9.0 . .all patches applied. > > > > >>> > > > > >>> I just sent this . but realized i sent it from the > > wrong email addy > > > > . want > > > > >>> to make sure it gets thru to the list . so i'm resending . i > > > > apologize if > > > > >>> both copies make it thru. > > > > >>> > > > > >>> problem: > > > > >>> > > > > >>> > > > > >>> migrating from one server to another . . .physical > > and software > > > > migration. > > > > >>> copied all profiles and am in the process of adding a > > new automated > > > > system > > > > >>> for domain management (mysql backend, blah balh) so the uid's > > > > changed for > > > > >>> each user. > > > > >>> > > > > > > > > Are you using the samba mysql sam backend (is that in > > 2.2.x, if not, you > > > > may want to try samba3). > > > > > > > > Also, LDAP may be a better backend for 2.2.x. > > > > > > > > >>> this is what how i THOUGHT things would work: > > > > >>> > > > > >>> 1. everyone logs out > > > > >>> 2. shutdown samba on old server > > > > >>> 3. add new users to new server > > > > >>> 4. transfer ALL data to new server, including profiles, setup > > > > permissions on > > > > >>> files to correspond with new uids > > > > >>> 5. finish config of smb.conf on new server, adding the proper > > > > shares, etc . > > > > >>> basically a mirror of the old box. > > > > >>> 6. start up new server . . .login 9x machines for testing. > > > > >>> 7. rejoin all XP machines to the domain, and i should > > have been good > > > > to go. > > > > >>> > > > > >>> the problem lies in that once i rejoin an XP machine > > (testing with a > > > > couple > > > > >>> right now) is that the profiles don't load properly. > > the user logs > > > in, > > > > >>> everything "seems" to be ok . in that the desktop > > icons are present, > > > > custom > > > > >>> apps seem to work . .but pieces are broken. > > > > >>> > > > > > > > > Chances are that if you need to rejoin machines to the > > domain, you are > > > > going to need to fix the profiles. You should aim not to > > need to rejoin > > > > machines. > > > > > > > > >>> for example . . .OE or outlook . broken. it's like > > the ntuser.dat > > > file > > > > >>> doesn't get pulled .. . > > > > > > > > Probably becuase the ACLs in the profile itself don't > > allow the user to > > > > read the settings. > > > > > > > > >>> > > > > >>> i noticed that under documents and settings on the > > local machines HD > > > the > > > > >>> owner wasn't correct for the correct profile > > directory (normally, > > > > just the > > > > >>> user name) and upon logging in . there was a new > > profile directory > > > > created, > > > > >>> username.domain. That "should" have been fine i > > thought . .as long > > > > as the > > > > >>> profile was copied from the network . but it's NOT > > being copied . > > > > . . .so > > > > >>> i tried different machines . and various tests . from > > rejoining the > > > > domain > > > > >>> and changing permission BEFORE logging in as the user > > to . .well . > > > > >>> everything i can think of. > > > > >>> > > > > > > > > If you don't repair the profile, you will have to delete it first. > > > > > > > > >>> so . my question is two fold . .is there any reason > > an XP machine > > > > that DID > > > > >>> copy profiles from the network BEFORE the change > > wouldn't copy them > > > now? > > > > > > > > Yes, the SIDs have changed. > > > > > > > > >>> logon path and logon home variables are the SAME and > > my 9x machines > > > WORK > > > > >>> fine > > > > > > > > 98 doesn't have SIDs, NT, 2k and XP do. > > > > > > > > >>> . .i've got about 100 XP machines out there tho . > > .and i NEED this to > > > > >>> work . .or i'm going to attempt to go back to the old server. > > > > >>> > > > > > > > > It may be possible for you to fix this using the profiles > > binary in > > > > samba3. Easiest way for you to do that is to install > > samba3-server and > > > > samba3-common alpha22 (haven't gotten around to building > > alpha23 yet > > > > ...) from here: > > > > > > > > http://ranger.dnsalias.com/mandrake/9.0/samba3/ > > > > > > > > These packages are made to parallel-install with Mandrake > > samba-2.2.x > > > > RPMs, so they are safe to use (just check the smb3 is off > > with chkconfig > > > > after installing it) > > > > > > > > Then, run > > > > # profiles3 > > > > > > > > I have forgotten how to use it, but just read the --help, > > iy has an > > > > option for changing SIDs. > > > > > > > > Just ensure your existing profiles are backed up. > > > > > > > > Buchan > > > > > > > > - -- > > > > |--------------Another happy Mandrake Club member--------------| > > > > Buchan Milne Mechanical Engineer, Network Manager > > > > Cellphone * Work +27 82 472 2231 * +27 21 8828820x121 > > > > Stellenbosch Automotive Engineering http://www.cae.co.za > > > > GPG Key http://ranger.dnsalias.com/bgmilne.asc > > > > 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 > > > > -----BEGIN PGP SIGNATURE----- > > > > Version: GnuPG v1.2.1 (GNU/Linux) > > > > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > > > > > > > iD8DBQE+ibMqrJK6UGDSBKcRAqLZAJ4kdRDXXzzbWbBKzCFtsiRNOmF7rACgkT8a > > > > Qg2PAOZGTIH1Z7ARWnq0a6s> > > > =RFQG > > > > -----END PGP SIGNATURE----- > > > > > > > > -- > > > > To unsubscribe from this list go to the following URL and read the > > > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > > > > > -- > > John H Terpstra > > Email: jht@samba.org > > > > > OutBound Mail Scanned by Mcafee Web Appliance. > >-- John H Terpstra Email: jht@samba.org
On Wed, 2 Apr 2003, Jim Wharton wrote:> Would it be possible to use this tool (profile3) to copy an NT4 profile to a > 2000 box? It must be possible to do it since MS can do it during an upgrade. > Does anyone know of a tool for this. >You can do it from the NT Control Panel->System->Profiles. The reason I suggested using the profiles tool from samba3 is that the previous poster had a problem with SIDs on his existing profiles on his domain controller. In this case, you will probably want to have the current profile retained. While you could go around to each workstation, and guess on which workstation each user most recently logged into, and copy that profile to the server, I think it would be a lot less effort, and more reliable to do this on the server. Note that the tool is only called profiles3 the Mandrake samba3 packages, where we use the major version suffix to prevent clashes with the binaries from the standard samba (2.2.x) packages to allow simultaneous installation. It's normal name should be 'profiles' Regards, Buchan -- |----------------Registered Linux User #182071-----------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7