- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - OpenVMS
- >
- CIFS migration to Active Directory
Operating System - OpenVMS
1758258
Members
2768
Online
108868
Solutions
Forums
Categories
Company
Local Language
юдл
back
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
юдл
back
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Blogs
Information
Community
Resources
Community Language
Language
Forums
Blogs
Go to solution
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО05-26-2009 08:42 PM
тАО05-26-2009 08:42 PM
Hi,
This is a sort of followup to my earlier question about getting CIFS to join an Active Directory domain, see
http://forums13.itrc.hp.com/service/forums/questionanswer.do?threadId=1335638
The CIFS machine (prior to joining the AD Domain) has a number of group mappings defined, e.g.
$ NET GROUPMAP LIST
WEB_AD_RW (S-1-5-21-2164268345-1128203276-830212613-1202) -> WEB_AD_RW
ClubPower (S-1-5-21-2164268345-1128203276-830212613-1062) -> 13107216
Users (S-1-5-32-545) -> CIFS$USERS
etc.
Most of these were created during the initial migration from Advanced Server to CIFS.
When we finally put CIFS into the AD domain, what will happen to these group mappings? Are they still valid, or will we need to recreate them? I assume the magic number inside the () above has meaning to Windows and if AD uses different magic numbers for the groups we will have to recreate the groupmaps.
For that matter, are there any CIFS control files (*.TDB) which we should delete before joining CIFS to the AD domain?
Thanks,
Jeremy Begg
This is a sort of followup to my earlier question about getting CIFS to join an Active Directory domain, see
http://forums13.itrc.hp.com/service/forums/questionanswer.do?threadId=1335638
The CIFS machine (prior to joining the AD Domain) has a number of group mappings defined, e.g.
$ NET GROUPMAP LIST
WEB_AD_RW (S-1-5-21-2164268345-1128203276-830212613-1202) -> WEB_AD_RW
ClubPower (S-1-5-21-2164268345-1128203276-830212613-1062) -> 13107216
Users (S-1-5-32-545) -> CIFS$USERS
etc.
Most of these were created during the initial migration from Advanced Server to CIFS.
When we finally put CIFS into the AD domain, what will happen to these group mappings? Are they still valid, or will we need to recreate them? I assume the magic number inside the () above has meaning to Windows and if AD uses different magic numbers for the groups we will have to recreate the groupmaps.
For that matter, are there any CIFS control files (*.TDB) which we should delete before joining CIFS to the AD domain?
Thanks,
Jeremy Begg
Solved! Go to Solution.
2 REPLIES 2
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-16-2009 11:04 PM
тАО06-16-2009 11:04 PM
Solution
Hi Jeremy,
The magix number inside "()" is a SID (Security Identifier) and it uniquely identifies the object in that particular domain/workstation. The following link has good description about the SID:
http://www.ntfs.com/ntfs-permissions-security-identifier.htm
When you are changing the role of CIFS server, it is likely that the SID will get changed as part of role change. So, you may want to give careful consideration about retaining TDBs and also security on the files. It may be a good idea to contact HP support to get their opinion before you do role change.
Regards,
Shilpa
The magix number inside "()" is a SID (Security Identifier) and it uniquely identifies the object in that particular domain/workstation. The following link has good description about the SID:
http://www.ntfs.com/ntfs-permissions-security-identifier.htm
When you are changing the role of CIFS server, it is likely that the SID will get changed as part of role change. So, you may want to give careful consideration about retaining TDBs and also security on the files. It may be a good idea to contact HP support to get their opinion before you do role change.
Regards,
Shilpa
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-17-2009 06:36 PM
тАО06-17-2009 06:36 PM
Re: CIFS migration to Active Directory
Thanks Shilpa, that's an interesting site.
We will definitely be raising a support case.
Regards,
Jeremy Begg
We will definitely be raising a support case.
Regards,
Jeremy Begg
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.
News and Events
Support
© Copyright 2024 Hewlett Packard Enterprise Development LP