samba - May 2004 - Migrate passwords from NT4 to Samba-LDAP

We were able to migrate the Machines and the Users from NT4 to 
Samba-LDAP, but now we find that the passwords did not migrate.
Is there a solution for this? Is there another problem.
We are doing the migration onto a Suse system with samba 3.0.2a
and have used both the smbldap-tools 0.8.2 and 0.8.4 without complete 
success.

Philip Washington wrote:
> We were able to migrate the Machines and the Users from NT4 to 
> Samba-LDAP, but now we find that the passwords did not migrate.
> Is there a solution for this? Is there another problem.
> We are doing the migration onto a Suse system with samba 3.0.2a
> and have used both the smbldap-tools 0.8.2 and 0.8.4 without complete 
> success.
> 
    We are also finding that users that we enter manually, when 
attempting to login: if we enter the correct password we get and error 
messages that the user cannot be logged in due to error C000189. If the 
password is entered incorrectly we get the standard message that the 
user could not be entered check the password and the user Id.  This 
different behavior when the correct password and an incorrect password 
are entered indicates to me that it is seeing the password it's just 
doesn't isn't handling it correctly when entered correctly.  The test 
computer was an NT4 computer.

>     We are also finding that users that we enter manually, when
> attempting to login: if we enter the correct password we get and error
> messages that the user cannot be logged in due to error C000189. 
I got those kind of errors whenever my statiosn are not joined properly.
(i forgot to create machine posix account, nullify its password, or apply
the join command )

PS/ windows reboot when you set the domain though it fails at this stage
you have to reboot again when you end fixing its trust account on the PDC

Hopes its help
Alban

Alban Browaeys wrote:
>>    We are also finding that users that we enter manually, when
>>attempting to login: if we enter the correct password we get and error
>>messages that the user cannot be logged in due to error C000189. 
> 
> 
> I got those kind of errors whenever my statiosn are not joined properly.
> (i forgot to create machine posix account, nullify its password, or apply
> the join command )
> 
> PS/ windows reboot when you set the domain though it fails at this stage
> you have to reboot again when you end fixing its trust account on the PDC
> 
> Hopes its help
> Alban
> 
Thanks, you were correct.  Prior to doing the migration we checked the 
locat sid and everything was fine.  Our problem was that we had an 
preload.ldif file which had the wrong sid in it.  It appears to be 
working now with users whose passwords have been changed manually on the 
Samba PDC.  We still have not found a solution as to why the passwords 
didn't migrate.
  We have also discovered another problem.  The user profiles are changed.