samba - Aug 2005 - Urgent - Password Migration from WINNT 4.0 to Samba-LDAP

Hi,

I am working on migrating WINNT 4.0 Domain to Samba. User information
is being stored in LDAP. I have done test migration and works fine. I
can migrate users, groups and machine accounts. But, after migrating I
have seen that it does migrate sambaLMPassword,sambaNTPassword fields
but it does not migrate userPassword(unix password) field. For all my
users, in the user password field, it has got the same password which
is "e2NyeXB0fXg=" which does not look right.

Is there any way, userPassword field can be updated with the correct
entry  while performing migration or immidiately after the migration.
I got around 1200 users in my PDC and I want to make this migration
without affecting users. I can re-set the passwords using
smbldap-passwd but its a big pain to contact every user asking for
their passwords.

All the test migration have been done by following instructions on a
document available on Samba by Example
(http://us3.samba.org/samba/docs/man/Samba-Guide/ntmigration.html#id2584506).

Any one's help in solving this issue is higly appreciated.

Thanks

Regards

Haroon

On Sat, 2005-08-20 at 18:39 +1000, haroon anwaar wrote:
> Hi,
> 
> I am working on migrating WINNT 4.0 Domain to Samba. User information
> is being stored in LDAP. I have done test migration and works fine. I
> can migrate users, groups and machine accounts. But, after migrating I
> have seen that it does migrate sambaLMPassword,sambaNTPassword fields
> but it does not migrate userPassword(unix password) field. For all my
> users, in the user password field, it has got the same password which
> is "e2NyeXB0fXg=" which does not look right.
> 
> Is there any way, userPassword field can be updated with the correct
> entry  while performing migration or immidiately after the migration.
> I got around 1200 users in my PDC and I want to make this migration
> without affecting users. I can re-set the passwords using
> smbldap-passwd but its a big pain to contact every user asking for
> their passwords.
No, it is not possible to set the cleartext/md5/sha1 userPassword field,
but it is also not required for operation of the Samba part of the
server.  (The encryption algorithms are incompatible).

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20050823/6d3c01d3/attachment.bin