On Mon, 15 Mar 2004, Ed Ravin wrote:
> On Tue, Mar 16, 2004 at 01:26:11AM +0000, Andrew Bartlett wrote:
> > On Mon, Mar 15, 2004 at 08:11:42PM -0500, Ed Ravin wrote:
> > > I have a bunch of Windows users using a Win2k server as a PDC. I want
> > > to move all the server functions to a Samba server without disturbing
> > > the users in any way. The client machines are all Win2k, using local
> > > profiles.
> > >
> > > Samba insists on algorithmicly generating the RID from the UID, so the
> > > Windows user, after migration, gets a new SID and loses contact with
> > > their local profile. In fact, they seem to be an entirely different
> > > user, with a new SID and new profile directory.
> >
> > If you used a 'real' passdb backend, like ldapsam and tdbsam, then
> > this should 'just work'.
>
> Thanks, but it doesn't. I looked up tdbedit and the HOWTO and did
> the following:
>
> ; added this to smb.conf
> passdb backend = tdb
Try:
passdb backend = tdbsam
>
> # ran this:
> # pdbedit -i smbpasswd
Try:
pdbedit -i smbpasswd -e tdbsam
It helps if you tell it which backend to migrate to.
>
> Now, if I look at the table with pdbedit:
>
> # pdbedit -L -u bilbo
> bilbo:1112:Bilbo Baggins
That's likely derived from smbpasswd, not from tdbsam since you did not
specify a tdbsam. Samba has no idea what to do with:
passdb backend = tdb
I'm surprised you got no error messages in the log files. Did you check
the logs?
>
> That looks good, but the when I query via rpcclient for the RID, it's still
> 3224, which is the value returned by the algorithmic mapping (1112 * 2 + 1000).
>
> If I run tdbdump | grep -C2 bilbo I see this:
>
> {
> key = "RID_00000c98\00"
> data = "bilbo\00"
> }
You have not provided enough information to comment on this. The tdbdump
command should be passed the name of a tdb file. Your example does not do
that.
>
> 0xc98 is 3224. It looks like the algorithmic mapping happened when I
> ran "pdbedit -i". Even if I use "pdbedit -u bilbo -U <sid-string>-1112",
> the stored value in the TDB is still 0xc98. Clearly, something is
> enforcing the mapping on the way into or out of the TDB backend.
I can not figure out what you are trying to do here. HAve you read any of
the command man pages?
>
> Are you sure this is supposed to "just work"?
>
Sorry, I am not sure what you mean by that.
- John T.
--
John H Terpstra
Email: [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
