Samba-TNG                                                    MIGRATE.txt
------------------------------------------------------------------------

This is a short description about how to migrate from an NT4 domain 
controller to TNG.

Use utilities provided in examples/hechenberger.

Follow these steps to migrate existing NT-PDC users to Samba/LDAP:

1.) pwdump the DCs SAM-database into a file, eg. pwdump.exe > xxx
2.) use smbpasswd2lower.sh to have all usernames in small letters and
    eliminate german "umlauts". You could also utf8-encode user 
    descriptions (but _not_ usernames!).
3.) use smbpasswd2passwd.sh to create a passwd-file for your NT users
4.) use smbpasswd2ldif.sh to create ldif file out of a smbpasswd file
5.) use passwd2ldif.sh to create ldif file out of a passwd file


                                   <pwdump-file>
					|
		.........................
		|		
		|
	smbpasswd2lower.sh
		|
		|
  	<smbpasswd-file>  -----> smbpasswd2passwd.sh ----->  <passwd-file>
		|						   |
		|						   |
	smbpasswd2ldif.sh				     passwd2ldif.sh
		|						   |
		|						   |
      <smbpasswd.ldif-file>				    <passwd.ldif-file>

You might have to remove "administrator" and "guest" entries if you had dumped
and added them before using the "basicentries.sh" script.

" ldapadd (-x) -w secret -D "cn=root, dc=mycompany, dc=com" -f filename " will do it for you.

Do NOT forget to use the same domain SID (get it via rpcclient - lsaquery) in 
$tngbase/private/MYDOMAIN.SID!

Group migration is not included yet; you can do this by simlpy querying the existing domain controller with rpcclient and re-add the dumped data into TNG (also via rpcclient).



--------------------------------------------------------------------------------
EOF
