samba - Nov 2003 - User Data / Profiles / Permission / Mappings Loss from Samba to Samba Migration

We have completed a migration from one Samba server to another Samba.
The versions and binaries are exactly the same. The only difference
between the two configs is that the original Samba server used LDAP for
authentication and the new Samba server uses the flat files for
authentication (smbpasswd file).

Here is the problem: On a Windows 2000 file server, we have folder
shares.  Users can log on via Samba, but permissions to the shared
folders are all screwed up.  When I review the permissions in the
sharing tab on the 2000 server I noticed that none of the user names are
listed, just some sort of serial number (e.g. S-xxxx-xxxx-xxxx-xxxx).
-- 
Fanying Jen <fanying.jen@lillecorp.com>
Lille Corp

On Mon, 17 Nov 2003, Fanying Jen wrote:
> We have completed a migration from one Samba server to another Samba.
> The versions and binaries are exactly the same. The only difference
> between the two configs is that the original Samba server used LDAP for
> authentication and the new Samba server uses the flat files for
> authentication (smbpasswd file).
>
> Here is the problem: On a Windows 2000 file server, we have folder
> shares.  Users can log on via Samba, but permissions to the shared
> folders are all screwed up.  When I review the permissions in the
> sharing tab on the 2000 server I noticed that none of the user names are
> listed, just some sort of serial number (e.g. S-xxxx-xxxx-xxxx-xxxx).
That number is the SID (security identifier your user has/had). Every
domain / server has it's own SID. Did you updte the new server SID to that
of the old one?

On samba-2.2.x the tool to retrieve the domain SID is:
	smbpasswd -S 'Domain_Name'

To write it on samba-2.2.x:
	smbpasswd -W S-1-5-...

On samba-3.x to read the SID:
	net getlocalsid

To write on samba-3.x:
	net setlocalsid S-1-5-....

- John T.
-- 
John H Terpstra
Email: jht@samba.org