0

As title suggests. We are migrating from OpenLDAP as user authentication to Samba 4 AD Domain. But I can't find any information on how to transfer passwords and users to Samba 4 AD. How to migrate all LDAP user base at ou=People,dc=company,dc=com to samba 4 AD domain?

I don't need to assistance transferring everything, I only need to transfer user accounts. I've finished migrating them all but user/passwords. Can it be done? If so, how?

1
  • 1. Search.. I have searched everywhere, and I know that Samba4 password is not compatible, but I need to transfer those passwords. There simply nothing exists on the web on how to transfer OpenLDAP to Samba4 AD. What have I tried? EVERYTHING. I transferred everything into Samba4 AD, but samba rejected any passwords. 2. What I tried to do described clearly there. I want to migrate all user and password. That's all. As for other entries, I've done myself. You don't need to care about that. 3. Details? openLDAP, and Samba4 AD as mentioned, Only 2 directory server, both are well known. What else?
    – prd
    Jun 12, 2014 at 13:12

1 Answer 1

6

The schemas for each are different, so there's no direct way to copy the LDAP data. You could write a script to translate data from one format to the other, I don't know of any tool that does this automatically.

6
  • ok.. I can write script, but I can't read the password for each user. How to transfer their passwords?
    – prd
    Jun 11, 2014 at 15:24
  • 3
    The password is probably in a different format anyway, so you probably can't do that.
    – Chris S
    Jun 11, 2014 at 18:27
  • Thank you.. so, I think the best way for me is to recreate users with random password. Is that correct?
    – prd
    Jun 12, 2014 at 6:56
  • 1
    It depends on your situation. If you use some kind of federated identity service you might be able to setup Samba beside LDAP for a time, when users change their passwords it gets updated in both locations. Once the passwords are synchronized you can cut over. If you don't have anything like that, you may be suck using random temporary passwords.
    – Chris S
    Jun 12, 2014 at 14:20
  • 1
    Have you considered using JohnTheRipper on the password store, then you'd probably have the real passwords to feed into the user creation script. Jun 13, 2014 at 6:37

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .