From: Bastien Semene on
Short background :
Due to Windows Seven deplaoyment we have to upgrade Samba 3.0 to Samba
3.4 (actually less version but I see no reason not to go directly to 3.4).
And due to SQL backend support aborted we have to switch from SQL
backend to LDAP backend.

What I have in mind to do this migration is the following :

-install samba 34/OpenLDAP (I also change the machine in the meantime)
-configure Samba 34 to use the ldap backend, the smb.conf will be
rewriten from scratch.
- sync the sid with net getlocalsid and netsetlocalsid.
-pdbedit -e to export users and pdbedit -eg to export groups (on the old
-pdbedit -i and pdbedit -ig on the new server.

I'm far to be an expert in Samba, so advices on this procedure are very

While checking that everything should be ok, I did a pdbedit -L and many
lines (less than 1000) like this one appeared :
lookup_global_sam_rid: looking up RID 513.
Executing query SELECT
Can't find a unix id for an unmapped group
No user SID retrieved from database!

There are 3 RIDs concerned : 513, 11001, 515.

Can I correct this error before migrating ? Is it mandatory/interesting
to correct this error ?

This is the output of the testparm command :

Load smb config files from /usr/local/etc/smb.conf
Processing section "[netlogon]"
Unknown parameter encountered: "readable"
Ignoring unknown parameter "readable"
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions

dos charset = 850
unix charset = ISO8859-1
workgroup = CYANIDE
netbios name = PDC
server string = Primary Domain Controller
passdb backend = mysql:foo
passwd program = /usr/local/bin/php -q
/root/CyanManager/samba/update_mysql_password.php %u
passwd chat = "password:" %n\n "ok\n"
passwd chat debug = Yes
unix password sync = Yes
log level = 5
log file = /var/log/samba/log.%m
fam change notify = No
load printers = No
domain logons = Yes
os level = 128
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
foo:unknown 6 column = nt_unknown_6
foo:logon count column = nt_logon_count
foo:bad password count column = nt_bad_password_count
foo:logon hours column = nt_logon_hours
foo:hours len column = nt_hours_len
foo:logon divs column = nt_logon_divs
foo:acct ctrl column = nt_acct_ctrl
foo:plain pass column = NULL
foo:nt pass column = nt_pw
foo:lanman pass column = nt_lm_pw
foo:group sid column = nt_group_sid
foo:user sid column = nt_user_sid
foo:munged dial column = nt_munged_dial
foo:unknown string column = nt_unknown_str
foo:workstations column = nt_workstations
foo:acct desc column = nt_acct_desc
foo:profile path column = nt_profile_path
foo:logon script column = nt_logon_script
foo:dir drive column = nt_dir_drive
foo:home dir column = nt_homedir
foo:fullname column = gecos
foo:nt username column = nt_username
foo:domain column = nt_domain
foo:username column = username
foo:pass history = NULL
foo:pass must change time column = nt_pass_must_change_time
foo:pass can change time column = nt_pass_can_change_time
foo:pass last set time column = nt_pass_last_set_time
foo:kickoff time column = nt_kickoff_time
foo:logoff time column = nt_logoff_time
foo:logon time column = nt_logon_time
foo:mysql database = ***********
foo:mysql password = ************
foo:mysql user = ********
foo:mysql host =
foo:host =
admin users = administrateur

path = /var/samba/netlogon
browseable = No

Bastien Semene
Administrateur Réseau& Système

Cyanide Studio - FRANCE

To unsubscribe from this list go to the following URL and read the