Migrate Windows 2000 AD to Ubuntu 10.4

[Arnaud BLONDEL - Alter Way Solutions]

On 05/07/2010 12:27, Olivier Nicole wrote:
>> Samba controler+LDAP is, of course, in a test domain to test.
>
> So what is working/not working so far? Can you join one test machine
> to the test domain in samba+ldap?
>
> Can you autheticate a user?
 >

If I use computer which was on Windows domain, I can't open session with 
this computer on Ubuntu server (new PDC).

I have this message "domain xxxx is not available"

I need to add this computer to the domain again (My Conmputer > Computer 
Name tab > Change ... > Member of Domain : xxxx). I want to avoid it.

>
> Do you have any ldap browser installed to check that the entries in
> your ldap directory are the one you expect?
>

I can view record with 'smbldap-usershow test$' command

 >
> I did the simple migration from samba to samba+ldap, that only was a
> major pain (part of it being I had ldap running and I had to integrate
> the existing directiory rather than creating a new directory).
>
> I'use a test SSID and change all what is needed to use the existing
> domain SSID once I am ready for complete migration.
>
>> getent passwd command return this information, I changed
>> /etc/nsswitch.conf :
>>
>> passwd:         compat ldap
>> group:          compat ldap
>> shadow:         compat ldap
>
> In fact you don't need to modify nsswitch for group and shadow, unless
> you want your users to authenticate to the Unix machine too. Samba
> will access LDAP server directly to read the group and password
> information (and password is saved in the LDAP attributes
> sambaNTPassword (and sambaLMPassword?), not in the Unix password).
>
> Bests,
>
> olivier
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: arnaud_blondel.vcf
Type: text/x-vcard
Size: 278 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20100705/21460336/attachment.vcf>