for the last few days I have been looking into migrating an old linux server running a OpenLDAP/Samba 3 configuration with about 100 users to a new SBS Server running Samba 4 (like Zentyal or UCS). Services provided will be Shares, Mail, Webmail, Calendar.
The question, which already has been asked, is how to migrate the user accounts and passwords. I do not care for automatic migration (anymore), so I will recreate all Users and Groups and settings manually.
Ideas for migrating the passwords are so far:
- Automatic migration with a distribution upgrade -> No SBS linux distribution offers an automatic upgrade path (shame!)
- Manually copying over the passwords to Samba 4 -> Does not work as OpenLDAP stores them as {SHA}
- Letting all users choose a new password at the help desk -> Users will kill me
- Upgrading the samba part with samba-tool classicuprade -> Does not work for the configuration, users are not created and resulting configuration is broken for Web Administration
- Reading the Passwords with Apache Directory Studio and reimplanting them into Samba 4 LDAP -> Does not work for same reason as 2
- Using MS Active Directory Migration Tool -> No users found on the internet running this on OpenLDAP
The best idea so far is to create a middle layer as a webservice which will be propagated by a userguide or something, where the users can change their passwords using a local account on their computers ( this exists, as Domain Integration is not very tight here ). This will only need to get the old password from the user, compare that to the OpenLDAP hash and set a new password ( new passwords are not enforced right now, so it is a good time to do that too ) on the Samba 4 (using smbpassword or sth.).
Integrating/Migrating all computers into the AD is a different task, as crucial services are listed in the intro.
I found https://code.google.com/p/pwm/, which provides a user interface for changing passwords, but no usecase for migrating passwords is available.
Does anyone have a better idea?
robert
