samba - Jul 2005 - migrate existing Unix password to sambapassword

Hello --
 
Our existing Unix system has more than 500 users. The system currently uses
OpenLDAP to authenticate users. We just added dozens of PCs running Windows to
the network.  We are going to set up the existing Unix server as a samba PDC
server such that the users can log onto either their Unix account or Windows
account. It seems a good idea to allow the users have the same password for
their new Windows account as that for their existing Unix account. I wonder if
there is any way to accomplish this, especially automatically.
 
Thanks,
 
--Lingtao


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

> Our existing Unix system has more than 500 users. The system currently
> uses OpenLDAP to authenticate users. We just added dozens of PCs running
> Windows to the network.  We are going to set up the existing Unix server
> as a samba PDC server such that the users can log onto either their Unix
> account or Windows account. It seems a good idea to allow the users have
> the same password for their new Windows account as that for their existing
> Unix account. I wonder if there is any way to accomplish this, especially
> automatically.
UNIX password hashes are a one way encryption, which means that you cannot
decrypt them (aside from brute force of course).  The only way would be if
you A. had a password list to re-key/script the generation of the smb
password or B. change everyone's password to something new and sync them at
that time.

Note that once you get it set up, there are plenty of ways to keep the
passwords in sync from here forward.

Taolizhong said:
> Hello --
>
> Our existing Unix system has more than 500 users. The system currently
> uses OpenLDAP to authenticate users. We just added dozens of PCs running
> Windows to the network.  We are going to set up the existing Unix server
> as a samba PDC server such that the users can log onto either their Unix
> account or Windows account. It seems a good idea to allow the users have
> the same password for their new Windows account as that for their
> existing Unix account. I wonder if there is any way to accomplish this,
> especially automatically.
>
Since you are already usng OpenLDAP to authenticate your Unix users, you
can also use it to authenticate your Windows users.  Since they will then
be authenticating from the same database, you won't have to worry about
password sync.  This is covered in the Samba HOWTO.

    /dwight

-- 
Dwight N. Tovey
email: dtovey@emergecore.com
---------
Work to Live : Live to Ride : Ride to Work