search for: keepchang

...er note that privileges are not very important in AD because they are not replicated. Instead things tend to be provided by extended rights on magic AD objects. Perhaps avoid re-generating the whole AD and just migrate the changed passwords? A bit more fiddly but then things like GUIDs won't keepchanging. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

Dear all, we are transitioning from an openldap / MIT KDC setup to a samba4 AD. I am doing this by setting up a samba NT4 domain, populating it from LDAP and sticking in the password hashes which I automatically extract from the MIT KDC arc4-hmac keys. Then I run the classicupgrade. I do this whole thing from cron in a script once a day to be able to slowly migrate services. The MIT / openldap