Am 2016-03-29 um 10:44 schrieb Rowland penny:> There are a few gotchas, such as you will need to change any normal user > & group SIDs that have RIDs less than 1000, note that I am not talking > about users like 'Administrator' or groups like 'Domain Users', just > normal users & groups. > > Try to use the latest supported version of Samba that you can.I am starting a new test of this in a current Debian-Jessie-VM. Took me some time to get the initial setup of "source" and "target" dirs correctly ... now the samba-tool runs through at last. a) question regarding the groups (seems the main problem here): I get something like this for one group Exporting groups Ignoring group 'mygroup' S-1-5-21-2940660672-4062535256-4144655499-1010 listed but then not found: Unable to enumerate group members, (-1073741722,No such group) and something like this for all users: Exporting users Ignoring group memberships of 'user' S-1-5-21-2940660672-4062535256-4144655499-1036: Unable to enumerate group memberships, (-1073741724,No such user) What does that mean? That the users and the group don't exist in /etc/passwd and /etc/group on the new server? I realize I could try as I write this ... no, does not change a thing. b) I want to change the stupid workgroup-name from OFFICE to something useful ... I assume that's problematic as the clients would have to be rejoined then? thanks, Stefan
On Thu, 2016-04-07 at 14:22 +0200, Stefan G. Weichinger wrote:> Am 2016-03-29 um 10:44 schrieb Rowland penny: > > > There are a few gotchas, such as you will need to change any normal > > user > > & group SIDs that have RIDs less than 1000, note that I am not > > talking > > about users like 'Administrator' or groups like 'Domain Users', > > just > > normal users & groups. > > > > Try to use the latest supported version of Samba that you can. > > I am starting a new test of this in a current Debian-Jessie-VM. > Took me some time to get the initial setup of "source" and "target" > dirs > correctly ... now the samba-tool runs through at last. > > a) question regarding the groups (seems the main problem here): > > I get something like this for one group > > Exporting groups > Ignoring group 'mygroup' S-1-5-21-2940660672-4062535256-4144655499 > -1010 > listed but then not found: Unable to enumerate group members, > (-1073741722,No such group) > > and something like this for all users: > > Exporting users > Ignoring group memberships of 'user' > S-1-5-21-2940660672-4062535256-4144655499-1036: Unable to enumerate > group memberships, (-1073741724,No such user) > > What does that mean? That the users and the group don't exist in > /etc/passwd and /etc/group on the new server? I realize I could try > as I > write this ... no, does not change a thing.That is what it means. The upgrade needs that NSS data to import the information into the AD database.> b) I want to change the stupid workgroup-name from OFFICE to > something > useful ... I assume that's problematic as the clients would have to > be > rejoined then?Sadly yes. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Am 07.04.2016 um 16:34 schrieb Andrew Bartlett:>> What does that mean? That the users and the group don't exist in >> /etc/passwd and /etc/group on the new server? I realize I could try >> as I >> write this ... no, does not change a thing. > > That is what it means. The upgrade needs that NSS data to import the > information into the AD database.I had added the problematic group to /etc/group and re-ran samba-tool (after deleting the generated files/tdbs), same error again. I will retry that later in my test setup ... copying over the lines from the old samba-server might help, maybe with a little editing?>> b) I want to change the stupid workgroup-name from OFFICE to >> something >> useful ... I assume that's problematic as the clients would have to >> be >> rejoined then? > > Sadly yes.ok, cosmetics. Not really important. thanks!