Apart from the Samba and LDAP configuration, the migration of a Windows NT server to a SUSE Linux Enterprise Server Samba server consists of two basic steps. First, migrate profiles then migrate accounts.
The first step of your migration should be the configuration of the LDAP server. You need to add base DN information and entries for accounts of your software clients with passwords. Detailed information about LDAP configuration is provided in Chapter 37, LDAP—A Directory Service.
It is not necessary to configure it all manually. You can use scripts
from smbldap-tools. These scripts are part of the package samba-doc
and, after installation of the
package, are available in
/usr/share/doc/packages/samba/examples/LDAP
.
![]() | LDAP and Security |
---|---|
The LDAP administration DN should be an account other than Root DN. To make the network more secure, you can also use a secure connection with TSL. |
Before you start migration, configure your Samba server.
Find configuration of profile
,
netlogon
, and home
shares in the
tab of the YaST module. To do the default value, select the share and
click
.
To add LDAP configuration for your Samba server and the credentials of the LDAP administrator, use the
tab of the YaST module. The LDAP administration DN (label ) and password are essential to add or modify accounts stored in the LDAP directory.For every profile to migrate, complete these steps:
Procedure 38.1. Migrating a Profile
On your NT4 domain controller, right-click
then select . Select the tab.Select a user profile you to migrate and click it.
Click
.In c:\temp\profiles
.
Click
in .Click
. To close the box, click .To finish saving the profile, click
.Copy saved profiles to the appropriate profile directories on your Samba server.
Procedure 38.2. The Account Migration Process
Create a BDC account in the old NT4 domain for the Samba server using NT Server Manager. Samba must not be running.
net rpc join -S NT4PDC -w DOMNAME -U Administrator%passwd net rpc vampire -S NT4PDC -U administrator%passwd pdbedit -L
Assign each of the UNIX groups to NT groups:
Example 38.6. Example Script initGroups.sh
#!/bin/bash #### Keep this as a shell script for future re-use # Known domain global groups net groupmap modify ntgroup="Domain Admins" unixgroup=root net groupmap modify ntgroup="Domain Users" unixgroup=users net groupmap modify ntgroup="Domain Guests" unixgroup=nobody # Our domain global groups net groupmap add ntgroup="Operation" unixgroup=operation type=d net groupmap add ntgroup="Shipping" unixgroup=shipping type=d
Check that all groups are recognized:
net groupmap list