samba - Mar 2010 - [Probably OT]: Samba LDAP data migration

Hi List,

This is probably more of an LDAP specific question but I am sure I can
have a couple of pointers from the list members. So, I have this Samba
PDC running Samba 3.4.3 with OpenLDAP 2.3.43-3 on a CentOS 5.3 box.
All the user data is stored in the OpenLDAP directory. I am interested
in migrating this data to a Sun LDAP server that is already in place.

Is there any script that any of you might have come across to help
migrate the data from OpenLDAP to Sun? Any pointers or caveats that I
may have to face in such a migration? Appreciate the help.


Regards

--
Zaeem

On Wed, Mar 10, 2010 at 11:28 AM, Zaeem Arshad <zaeem.arshad at
gmail.com>wrote:
> Hi List,
>
> This is probably more of an LDAP specific question but I am sure I can
> have a couple of pointers from the list members. So, I have this Samba
> PDC running Samba 3.4.3 with OpenLDAP 2.3.43-3 on a CentOS 5.3 box.
> All the user data is stored in the OpenLDAP directory. I am interested
> in migrating this data to a Sun LDAP server that is already in place.
>
> Is there any script that any of you might have come across to help
> migrate the data from OpenLDAP to Sun? Any pointers or caveats that I
> may have to face in such a migration? Appreciate the help.
>
> Hi
What about doing ldapsearch to the base tree and redirecting it to an LDIF
and importing LDIF file to Sun DIrectory server
but there are few thing you need to take care

1. First stop samba service, so that no further user passowrd changes or
machine password changes takes place

2. Take an LDIF output by using ldap search

example :
#ldapsearch  -LLL -x  -b "dc=example,dc=com" -D
"cn=Manager,dc=example,dc=com" -W  >>> /tmp/mybackup.ldif

3. Once the LDAP information is exported to Sun Directory server, change the
ldap server ip address in smb.conf


Now there is one more part

the secrets.tdb file has the password of "DN" through which it binds
to LDAP
server,  I would suggest to keep the same password for the Sun Directory
server also.

because having a different password means running "smbpasswd " command
to
update it and this may cause to change the "SID" , though . so be
careful
here.

Let me know if the above helped and if any body else can comment on above
steps ,  or is there anything else i am missing.


Regards
Niranjan

> Regards
>
> --
> Zaeem
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On Wed, 2010-03-10 at 11:42 +0530, mallapadi niranjan
wrote:
> On Wed, Mar 10, 2010 at 11:28 AM, Zaeem Arshad <zaeem.arshad at
gmail.com>wrote:
> > This is probably more of an LDAP specific question but I am sure I can
> > have a couple of pointers from the list members. So, I have this Samba
> > PDC running Samba 3.4.3 with OpenLDAP 2.3.43-3 on a CentOS 5.3 box.
> > All the user data is stored in the OpenLDAP directory. I am interested
> > in migrating this data to a Sun LDAP server that is already in place.
> > Is there any script that any of you might have come across to help
> > migrate the data from OpenLDAP to Sun? Any pointers or caveats that I
> > may have to face in such a migration? Appreciate the help.
> What about doing ldapsearch to the base tree and redirecting it to an LDIF
> and importing LDIF file to Sun DIrectory server
> but there are few thing you need to take care
Use the OpenLDAP tool slapcat to export your database (which is
typically how you made backups anyway).  The output is LDIF, so
*theoretically* you can load it into any DSA that supports the same
schema.
> 1. First stop samba service, so that no further user passowrd changes or
> machine password changes takes place
Executing slapcat is always transaction safe.

-- 
Adam Tauno Williams <awilliam at whitemice.org> LPIC-1, Novell CLA
<http://www.whitemiceconsulting.com>
OpenGroupware, Cyrus IMAPd, Postfix, OpenLDAP, Samba