samba - Apr 2015 - Samba 3 DC and Samba 4 AD DC - same subnet OK with different domain names?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi list,

Subject says it all, really.  I would like to migrate to Samba 4/AD,
but I'd like to use a user profile transfer tool to keep user
profiles, even though I've set up new user accounts on a new AD DC.

The tool requires both domains to be active to do the transfer, but
since there are numerous warnings about what happens when a
workstation sees an AD controller... I thought it better to ask anyone
who's done this than to do something that might turn out to be a rash
decision.

Thoughts?

Thanks,

- -John


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJVG94sAAoJEO3fit/H7ujXGcUH/3nMA/uCB74kOsO/j4lLfXzh
aMnO6o27Ei8VL3o4OW2fTAx5m8NK7EOZAlxWB7NPniB6dpYGaKrkUmJuu7Ev8wPz
OxK8rqclgK/2PnzPZFvR4gx6GQ4LvCb+T5F37kWVak6wUNpYwj229moVNAfH6Uj3
doMehrMkhw/gHx5N4p6U3VSOC4zI2CB3QLz5YKWUHsL3U+7kLTgnNkvY5NGvvtoI
iYkfjuhpmgaiM99fbTrZOd+hlWXRNojWaLM8NGj/YbwaPeYWFH9+ZLEDaxMvOd8O
66WO19/RDzR0Y487EoABxGyVIPjZTv8gyqo8dSPnuYdg8xYOVJqwS2eHmNUA9QQ=R/Mj
-----END PGP SIGNATURE-----

On Wed, 2015-04-01 at 08:01 -0400, John E.P. Hynes
wrote:
> Subject says it all, really.  I would like to migrate to Samba 4/AD,
> but I'd like to use a user profile transfer tool to keep user
> profiles, even though I've set up new user accounts on a new AD DC.
> The tool requires both domains to be active to do the transfer, but
> since there are numerous warnings about what happens when a
> workstation sees an AD controller... I thought it better to ask anyone
> who's done this than to do something that might turn out to be a rash
> decision.
> Thoughts?
It is not about the domain *name*, it is about the domain SID.  If you
are migrating the new domain will take over the SID of the old domain
[oversimplified].

But if you are doing an A->B migration the profiles should "just
work",
the path to the profiles can remain the same.  I've migrated a domain
and had no issue with user profiles; after all they are just a share
with some registry glop in them.

-- 
Adam Tauno Williams <mailto:awilliam at whitemice.org> GPG D95ED383
Systems Administrator, Python Developer, LPI / NCLA