Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

As title suggests. We are migrating from OpenLDAP as user authentication to Samba 4 AD Domain. But I can't find any information on how to transfer passwords and users to Samba 4 AD. How to migrate all LDAP user base at ou=People,dc=company,dc=com to samba 4 AD domain?

I don't need to assistance transferring everything, I only need to transfer user accounts. I've finished migrating them all but user/passwords. Can it be done? If so, how?

share|improve this question
    
1. Search.. I have searched everywhere, and I know that Samba4 password is not compatible, but I need to transfer those passwords. There simply nothing exists on the web on how to transfer OpenLDAP to Samba4 AD. What have I tried? EVERYTHING. I transferred everything into Samba4 AD, but samba rejected any passwords. 2. What I tried to do described clearly there. I want to migrate all user and password. That's all. As for other entries, I've done myself. You don't need to care about that. 3. Details? openLDAP, and Samba4 AD as mentioned, Only 2 directory server, both are well known. What else? –  prd Jun 12 at 13:12

1 Answer 1

up vote 6 down vote accepted

The schemas for each are different, so there's no direct way to copy the LDAP data. You could write a script to translate data from one format to the other, I don't know of any tool that does this automatically.

share|improve this answer
    
ok.. I can write script, but I can't read the password for each user. How to transfer their passwords? –  prd Jun 11 at 15:24
3  
The password is probably in a different format anyway, so you probably can't do that. –  Chris S Jun 11 at 18:27
    
Thank you.. so, I think the best way for me is to recreate users with random password. Is that correct? –  prd Jun 12 at 6:56
1  
It depends on your situation. If you use some kind of federated identity service you might be able to setup Samba beside LDAP for a time, when users change their passwords it gets updated in both locations. Once the passwords are synchronized you can cut over. If you don't have anything like that, you may be suck using random temporary passwords. –  Chris S Jun 12 at 14:20
    
Okay.. I'll do that.. Both are running right now, but services still authenticated to ldap, since new Samba AD rejects every passwords. I already have PHP apps on my ldap server for user to manage their own OpenLDAP account, I think I can easily add routines there to update AD password as well. Thank you –  prd Jun 12 at 14:25

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.