Part IV: Migration and Updating

Chapter 29. Upgrading From Samba-2.X to Samba-3.0.0

This chapter deals exclusively with the differences between Samba-3.0.0 and Samba-2.2.8a. It points out where configuration parameters have changed, and provides a simple guide for the move from 2.2.x to 3.0.0.

29.1 Quick Migration Guide

Samba-3.0.0 default behavior should be approximately the same as Samba-2.2.x. The default behavior when the new parameter passdb backend is not defined in the smb.conf file provides the same default behviour as Samba-2.2.x with encrypt passwords = Yes, and will use the smbpasswd database.

So why say that behavior should be approximately the same as Samba-2.2.x? Because Samba-3.0.0 can negotiate new protocols, such as support for native Unicode, that may result in differing protocol code paths being taken. The new behavior under such circumstances is not exactly the same as the old one. The good news is that the domain and machine SIDs will be preserved across the upgrade.

If the Samba-2.2.x system was using an LDAP backend, and there is no time to update the LDAP database, then make sure that passdb backend = ldapsam_compat is specified in the smb.conf file. For the rest, behavior should remain more or less the same. At a later date, when there is time to implement a new Samba-3 compatible LDAP backend, it is possible to migrate the old LDAP database to the new one through use of the pdbedit . See Section 10.3.2.

29.2 New Features in Samba-3

The major new features are:

1. Active Directory support. This release is able to join an ADS realm as a member server and authenticate users using LDAP/kerberos.

2. Unicode support. Samba will now negotiate unicode on the wire and internally there is a much better infrastructure for multi-byte and unicode character sets.

3. New authentication system. The internal authentication system has been almost completely rewritten. Most of the changes are internal, but the new authoring system is also very configurable.

4. New filename mangling system. The filename mangling system has been completely rewritten. An internal database now stores mangling maps persistently.

5. New " net " command. A new " net " command has been added. It is somewhat similar to the " net " command in Windows. Eventually, we plan to replace a bunch of other utilities (such as smbpasswd) with subcommands in " net ".

6. Samba now negotiates NT-style status32 codes on the wire. This considerably improves error handling.

7. Better Windows 200x/XP printing support including publishing printer attributes in Active Directory.

8. New loadable RPC modules for passdb backends and character sets.

9. New default dual-daemon winbindd support for better performance.

10. Support for migrating from a Windows NT 4.0 domain to a Samba domain and maintaining user , group and domain SIDs.

11. Support for establishing trust relationships with Windows NT 4.0 Domain Controllers.

12. Initial support for a distributed Winbind architecture using an LDAP directory for storing SID to UID/GID mappings.

13. Major updates to the Samba documentation tree.

14. Full support for client and server SMB signing to ensure compatibility with default Windows 2003 security settings.

Plus lots of other improvements!