samba - Apr 2013 - Samba Upgrade 3.0.33 to 3.6.13.

Hello,

I'm attempting to upgrade a server from Samba 3.0.33 to Samba 3.6.13.
I'm testing the upgrade on a virtual machine with the same set up  and
data as the production server. My problem is that the SID to UID
mappings and permissions aren't carrying over to the new version.


Here's what I'm doing:

- Uninstall previous version RPMs (This is a CentOS 5.5 server)
- Install new 3.6.13 packages
- Run net rpc join to join the machine to our domain (haven't been
able to make anything work with ADS security.
- Reboot

After doing the above, I currently have to set permissions for the
shares so I can access them from Windows machines.

Please look at my configurations below. A point in the right direction
would be most welcome!

Current config (3.0.33):

[global]

        workgroup = domain
        server string = Samba

        netbios name = fileserver


        hosts allow = 127. 192.168.115.
        encrypt passwords = yes

        security = domain
        passdb backend = tdbsam

        password server = *
log level = 2
log file = /var/log/samba/samba.log.%m

winbind separator = +
idmap uid = 10000-20000
idmap gid = 10000-20000
---------------------------------------------------------------------------
New config (3.6.13):

[global]
netbios name = test-samba
security = domain
realm = domain1.domain.com
password server = domain-server
idmap config * : backend = tdb
idmap config * : range = 10001-20000
idmap config domain : backend = rid
idmap config domain : range = 10000-20000
idmap config domain : base_rid = 0
workgroup = domain

winbind enum users = yes
winbind enum groups = yes
winbind refresh tickets = yes
template homedir = /shared/HOMEDIRS/%U
template shell = /bin/bash
client use spnego = yes
client ntlmv2 auth = yes
encrypt passwords = yes
winbind use default domain = yes
restrict anonymous = 2
passdb backend = tdbsam

log level = 2
log file = /var/log/samba/samba.log.%m

From: Rodney Green <rodgreen at gmail.com>
Date: Wed, 3 Apr 2013 08:27:57 -0400
> My problem is that the SID to UID
> mappings and permissions aren't carrying over to the new version.
(snip)
> Current config (3.0.33):
> 
> [global]
> 
>         workgroup = domain
(snip)
> winbind separator = +
> idmap uid = 10000-20000
> idmap gid = 10000-20000
> ---------------------------------------------------------------------------
> New config (3.6.13):
> 
> [global]
> netbios name = test-samba
> security = domain
> realm = domain1.domain.com
> password server = domain-server
> idmap config * : backend = tdb
> idmap config * : range = 10001-20000
> idmap config domain : backend = rid
> idmap config domain : range = 10000-20000
> idmap config domain : base_rid = 0
> workgroup = domain
(snip)
> encrypt passwords = yes
> winbind use default domain = yes
> restrict anonymous = 2
> passdb backend = tdbsam
Because you use default idmap (tdb) in Samba 3.0.33 and use idmap_rid for
"domain" domain in Samba 3.6.13.

If you use same mappings, use same winbindd_idmap.tdb file or manually set
the mapping with using wbinfo command.

---
TAKAHASHI Motonobu <monyo at monyo.com> / @damemonyo 
                   facebook.com/takahashi.motonobu