topic CIFS migration to Active Directory in Operating System - OpenVMS

CIFS migration to Active Directory

Jeremy Begg — Wed, 27 May 2009 03:42:17 GMT

Hi,

This is a sort of followup to my earlier question about getting CIFS to join an Active Directory domain, see
http://forums13.itrc.hp.com/service/forums/questionanswer.do?threadId=1335638

The CIFS machine (prior to joining the AD Domain) has a number of group mappings defined, e.g.

$ NET GROUPMAP LIST
WEB_AD_RW (S-1-5-21-2164268345-1128203276-830212613-1202) -> WEB_AD_RW
ClubPower (S-1-5-21-2164268345-1128203276-830212613-1062) -> 13107216
Users (S-1-5-32-545) -> CIFS$USERS
etc.

Most of these were created during the initial migration from Advanced Server to CIFS.

When we finally put CIFS into the AD domain, what will happen to these group mappings? Are they still valid, or will we need to recreate them? I assume the magic number inside the () above has meaning to Windows and if AD uses different magic numbers for the groups we will have to recreate the groupmaps.

For that matter, are there any CIFS control files (*.TDB) which we should delete before joining CIFS to the AD domain?

Thanks,
Jeremy Begg

Re: CIFS migration to Active Directory

Shilpa K — Wed, 17 Jun 2009 06:04:55 GMT

Hi Jeremy,

The magix number inside "()" is a SID (Security Identifier) and it uniquely identifies the object in that particular domain/workstation. The following link has good description about the SID:

http://www.ntfs.com/ntfs-permissions-security-identifier.htm

When you are changing the role of CIFS server, it is likely that the SID will get changed as part of role change. So, you may want to give careful consideration about retaining TDBs and also security on the files. It may be a good idea to contact HP support to get their opinion before you do role change.

Regards,
Shilpa

Re: CIFS migration to Active Directory

Jeremy Begg — Thu, 18 Jun 2009 01:36:50 GMT

Thanks Shilpa, that's an interesting site.

We will definitely be raising a support case.

Regards,
Jeremy Begg