CIFS migration to Active Directory

[Jeremy Begg]

Hi,

This is a sort of followup to my earlier question about getting CIFS to join an Active Directory domain, see
http://forums13.itrc.hp.com/service/forums/questionanswer.do?threadId=1335638

The CIFS machine (prior to joining the AD Domain) has a number of group mappings defined, e.g.

$ NET GROUPMAP LIST
WEB_AD_RW (S-1-5-21-2164268345-1128203276-830212613-1202) -> WEB_AD_RW
ClubPower (S-1-5-21-2164268345-1128203276-830212613-1062) -> 13107216
Users (S-1-5-32-545) -> CIFS$USERS
etc.

Most of these were created during the initial migration from Advanced Server to CIFS.

When we finally put CIFS into the AD domain, what will happen to these group mappings? Are they still valid, or will we need to recreate them? I assume the magic number inside the () above has meaning to Windows and if AD uses different magic numbers for the groups we will have to recreate the groupmaps.

For that matter, are there any CIFS control files (*.TDB) which we should delete before joining CIFS to the AD domain?

Thanks,
Jeremy Begg

[Shilpa K · Accepted solution]

Hi Jeremy,

The magix number inside "()" is a SID (Security Identifier) and it uniquely identifies the object in that particular domain/workstation. The following link has good description about the SID:

http://www.ntfs.com/ntfs-permissions-security-identifier.htm

When you are changing the role of CIFS server, it is likely that the SID will get changed as part of role change. So, you may want to give careful consideration about retaining TDBs and also security on the files. It may be a good idea to contact HP support to get their opinion before you do role change.

Regards,
Shilpa

[Jeremy Begg]

Thanks Shilpa, that's an interesting site.

We will definitely be raising a support case.

Regards,
Jeremy Begg