samba - Jan 2011 - Upgrading samba 3.3.x to 3.5.x old smbpasswd file and domainaccounts

Hi,

I plan to update our main RedHat EL 5.6 samba server from samba 3.3.x to
3.5.x .

What I noticed as our main challenge so far, is migrating the user and
machine accounts from our old smbpasswd file to a tdbsam-.tdm fileformat.

pdbedit -i smbpasswd:/etc/samba/smbpasswd -e tdbsam:/etc/samba/passwd.tdb

throws a lot of errors regarding useraccounts which did not exist on the
posix passwd/shadow side.

If I remove the deleted accounts from the sambapasswd file as well, the
convertion goes on.

But what about the machine accounts which are in the smbpasswdfile and
not in the passwd/shadow file?

Thanks for any suggestion and comment.

	Regards . G?tz
-- 
G?tz Reinicke
IT-Koordinator

Tel. +49 7141 969 420
Fax  +49 7141 969 55 420
E-Mail goetz.reinicke at filmakademie.de

Filmakademie Baden-W?rttemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016
Vorsitzende des Aufsichtsrats:
Prof. Dr. Claudia H?bner

Gesch?ftsf?hrer:
Prof. Thomas Schadt

I would have thought you needed to have "unix" machine accounts in the
passwd/shadow file.  Or are they using some sore of idmap allocation?

On 01/14/2011 04:34 AM, G?tz Reinicke - IT-Koordinator
wrote:
> Hi,
>
> I plan to update our main RedHat EL 5.6 samba server from samba 3.3.x to
> 3.5.x .
>
> What I noticed as our main challenge so far, is migrating the user and
> machine accounts from our old smbpasswd file to a tdbsam-.tdm fileformat.
>
> pdbedit -i smbpasswd:/etc/samba/smbpasswd -e tdbsam:/etc/samba/passwd.tdb
>
> throws a lot of errors regarding useraccounts which did not exist on the
> posix passwd/shadow side.
>
> If I remove the deleted accounts from the sambapasswd file as well, the
> convertion goes on.
>
> But what about the machine accounts which are in the smbpasswdfile and
> not in the passwd/shadow file?
>
> Thanks for any suggestion and comment.
>
> 	Regards . G?tz
>

Hm,
I think the old way having a machine join the domain was at first a entry
even in the passwd file called ex.: notetosh$:x:620:100:Workstation Account
NT:/dev/null:/bin/false
So there need to be a shadow account:
notetosh$:!:13909:1:99999:14:::
This entry are all kept like users. If you make a pdbedit -L -w this entries
are shown as users.
So this entries should be exported as well.
But after all Samba/openldap is the better choice. You only have to export
your ldap database and import it to the next
Samba/openldap and almost ready to run.

Good Luck
Daniel



-----------------------------------------------
EDV Daniel M?ller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 T?bingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------
-----Urspr?ngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org]
Im
Auftrag von Gaiseric Vandal
Gesendet: Freitag, 14. Januar 2011 17:21
An: samba at lists.samba.org
Betreff: Re: [Samba] Upgrading samba 3.3.x to 3.5.x old smbpasswd file and
domainaccounts

I would have thought you needed to have "unix" machine accounts in the
passwd/shadow file.  Or are they using some sore of idmap allocation?

On 01/14/2011 04:34 AM, G?tz Reinicke - IT-Koordinator
wrote:
> Hi,
>
> I plan to update our main RedHat EL 5.6 samba server from samba 3.3.x to
> 3.5.x .
>
> What I noticed as our main challenge so far, is migrating the user and
> machine accounts from our old smbpasswd file to a tdbsam-.tdm fileformat.
>
> pdbedit -i smbpasswd:/etc/samba/smbpasswd -e tdbsam:/etc/samba/passwd.tdb
>
> throws a lot of errors regarding useraccounts which did not exist on the
> posix passwd/shadow side.
>
> If I remove the deleted accounts from the sambapasswd file as well, the
> convertion goes on.
>
> But what about the machine accounts which are in the smbpasswdfile and
> not in the passwd/shadow file?
>
> Thanks for any suggestion and comment.
>
> 	Regards . G?tz
>    
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba