Hello, | -|Hello everybody, -| -|1. Question -|When migration from an nt4 style domain to a new samba 3 -|style domain with ldapsam , -|it is necessary to preserve the old SIDs of the user to keep the users -|in touch with the old servers. M$ calles this SID history, which means -|that the old SID is added to new accounts in an AD. -|Does samba have any equal mechanism? so far i found out, that there's an LDAP Attribute sambaSIDList on the subversion server http://tinyurl.com/3edtz. Is this the attribute, which cares about the SID history? It's important to know thanks. -| -|2. Question -|Does net rpc vampire preserve domain trust accounts? The second question is still interesting Regards, Dirk Laurenz Systems Engineer PSO - Professional Service Organisation Fujitsu Siemens Computers Hildesheimer Strasse 25 30880 Laatzen Germany Telephone: +49 (511) 84 89 - 18 08 Telefax: +49 (511) 84 89 - 25 18 08 Mobile: +49 (170) 22 10 781 Email: mailto:dirk.laurenz@fujitsu-siemens.com Internet: http://www.fujitsu-siemens.com http://www.fujitsu-siemens.de/rl/servicesupport/itdienstleistungen/compe tencecenter.html ************************************************************************ *******************************************
Gerald (Jerry) Carter
2004-May-14 13:17 UTC
AW: [Samba] SID History Mechanism / Trust Accounts
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Laurenz, Dirk wrote: | so far i found out, that there's an LDAP | Attribute sambaSIDList on the subversion server | http://tinyurl.com/3edtz. Is this the attribute, which | cares about the SID history? It's important to know thanks. SID history was introduced with Windows 2000. To my knowledge it is not supported under NT 4. And since Samba acts as an NT4 DC, there is no support for maintaing the SID histsory list. We do honor the SID history list as a member server though. The SambaSIDList you see in the schema is used to stored nested group membership (winbind nested groups). | Does net rpc vampire preserve domain trust accounts? Yes. cheers, jerry - ---------------------------------------------------------------------- Hewlett-Packard ------------------------- http://www.hp.com SAMBA Team ---------------------- http://www.samba.org GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc "...a hundred billion castaways looking for a home." ----------- Sting -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFApMa8IR7qMdg1EfYRAn/OAKC9BDm+Q/J4P27gGiqD83Yc+skMsACgowui B3yKEL0/m+ER1JYhraQv76k=Wj4r -----END PGP SIGNATURE-----