samba - Mar 2005 - Practical guide to migrate from tdbsam to ldapsam

Hello people!

I'd like to know about a practical guide which helps to migrate users 
from a perfect working Samba PDC running with tdbsam backend to a new 
backend to LDAP. Does "pdbedit -i xxx -e xxx" make all the job? My 
network is growing and I need a directory service to help find people so 
I'd like to see a LDAP server running well with Samba without rebuild my 
user base.

Thanks a lot in advance,
Juli?n Herrera

On Friday 11 March 2005 04:38, Juli?n Herrera wrote:
> Hello people!
>
> I'd like to know about a practical guide which helps to migrate users
> from a perfect working Samba PDC running with tdbsam backend to a new
> backend to LDAP. Does "pdbedit -i xxx -e xxx" make all the job?
My
> network is growing and I need a directory service to help find people so
> I'd like to see a LDAP server running well with Samba without rebuild
my
> user base.
Installations that use tdbsam have user and group accounts in two places:

UNIX Accounts:
	/etc/passwd + /etc/shadow: Holds the POSIX (system) user accounts
	/etc/group: Has the POSIX (system) group account

Samba SAM Accounts:
	/etc/samba/passdb.tdb
or	/usr/local/samba/lib/private/passdb.tdb

The use of 'pdbedit -i tdbsam -e ldapsam' can be used to migrate the 
SambaSAMAccount infromation to LDAP, but the migrationm of the POSIX accounts 
is a little more difficult.

The procedure you could use is to use the PADL migration tools to migrate the 
POSIX accounts to LDAP first, then use the pdbedit tool to migrate the 
SambaSAMAccount information. Alternately, check http://idealx.org and 
http://www.padl.com for the suitable migration tools that may permit the 
migration as a one-step operation.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.

John Terpstra wrote:
> 
> The use of 'pdbedit -i tdbsam -e ldapsam' can be used to migrate
the
> SambaSAMAccount infromation to LDAP, but the migrationm of 
> the POSIX accounts is a little more difficult.
> 
> The procedure you could use is to use the PADL migration 
> tools to migrate the POSIX accounts to LDAP first, then 
> use the pdbedit tool to migrate the SambaSAMAccount information. 
> Alternately, check http://idealx.org and http://www.padl.com 
> for the suitable migration tools that may permit the migration 
> as a one-step operation.
>
   Thanks for this information.
   Are there any suggestions or warnings for setting up a new Samba
server (with simple winbind and a range of UIDs & GIDs) which will later
be moved to using LDAP [against an Active Directory] for the backend?
   Thanks.
-wde
--
Will Enestvedt
UNIX System Administrator
Johnson & Wales University -- Providence, RI