Skip to main content
Start a Conversation

Unsolved

This post is more than 5 years old

E

EEHO

35 Posts

1714

August 16th, 2010 04:00

CIFS server on W2k3 domain Migration to W2k8 domain


From the following environment:

[NAS]
EMC Celerra NS42G
Datamovers - Dual (active-pasive)
DART - 5.6.44.4
Control Station - 'cs01'
Domain - 'domainA.es'

[CIFS Server Properties]
Windows Computer Name- 'cifs001'
NetBIOS Name- 'cifs001'
Domain- "domainA.es"
Interface- 192.168.x.158

[Windows Domain (source)]
'domainA.es'
Windows 2003 SE (32bit)
DNS Servers: 192.168.x.60 - 192.168.x.8

[Windows Domaint (target)]
'domainB.local'
Windows 2008 (64bit)
DNS Servers: 192.168.x.170 - 192.168.x.178

After migrating the CIFS server to a new domain ('domainB.local') there is visibility to the shares of CIFS server, but the security IDs are not updated.

We have applied the following procedure:

1.- Change values in the 'Control Station Properties'
- DNS Domain Name to 'domainB.local' (Windows Domain-target)
- DNS Servers to DNS Servers from (Windows Domain-target)
- NTP Servers to NTP Servers from (Windows Domain-target)

2.- Change values in the 'Server_2 Properties'
- NTP Servers to NTP Servers from (Windows Domain-target)

3.- Added Windows Domain-target

4.- Unjoin the existing CIFS server from Windows domain-source)

5.- Remove the cifs server configuration from the Celerra Data Mover.

6.- Recreate the CIFS server on the Data Mover specifying the Windows domain-target and the same interface "192.168.x.158"

(To update the security IDs)
7.- We tried to use the commands:
" server_cifs server_2 -Migrate fs_desarrollo -acl domainA.es:nb=cifs001:if=interface_device domainB.local:nb=cifs001:if=interface_device".
But this command failed.

Is there any way to update the security IDs? We need the permissions of the shared resources are maintained.

Do you know of any similar case?

Thanks,
Regards,


Rich_Bai

25 Posts

August 16th, 2010 19:00

First of all, after step 6, you had the newly created cifs server joined the target domain, right?

Secondly,  what error or log we got after running the command in step 7?

Anyone from EMC is helping on this or you performed the migration yourself?

EEHO

35 Posts

August 17th, 2010 02:00

Hi Rich,

I will try to answer your questions:
After step 6, you had the newly created cifs server joined the target domain, right?
R: Yes it is correct.
What error or log we got after running the command in step 7?
R: This is a problem detected on a customer. We look for the error to update the forum.
Anyone from EMC is helping on this or you performed the migration yourself?
R: EMC provides documentation only. The migration we are doing ourselves as Partner.
Do you think our procedure is correct?
Rich, Thanks for your collaboration

EEHO

35 Posts

August 18th, 2010 04:00


Hi Rich,
These are the errors obtained after running the command in step 7.
2010-08-10 17:37:44: ADMIN: 3: Command failed:  cifs aclmigrate 36 domsrc=forcendm.es nbsrc=asfearc001 domdst=fundacion.local nbdst=asfearc001
2010-08-10 17:39:02: SMB: 3: acl database migdom cannot get sid of the source domain forcendm.es
2010-08-10 17:39:02: SMB: 3: Command failed
2010-08-10 17:39:02: ADMIN: 3: Command failed:  cifs aclmigrate 36 domsrc=forcendm.es nbsrc=asfearc001 domdst=fundacion.local nbdst=asfearc001

2010-08-10 17:41:38: SMB: 3: NT_Access_Credential::RequestFromSID:usr=FUNDACION\wsscf23674$ primary nt group not mapped, use unix primary

2010-08-10 17:47:11: ADMIN: 3: Command failed:  cifs aclmigrate 36 domsrc=forcendm.es nbsrc=asfearc001 domdst=fundacion.local nbdst=asfearc001
2010-08-10 17:49:41: SMB: 3: LsarOpenPolicy2::Request failed=0xc0000022
2010-08-10 17:49:41: SMB: 3: lookupSIDs:no reply
2010-08-10 17:49:41: SMB: 3: NT_Access_Credential::RequestFromSID:usr=FUNDACION\wsscf23674$ primary nt group not mapped, use unix primary
2010-08-10 17:49:41: SMB: 3: LsarOpenPolicy2::Request failed=0xc0000022
2010-08-10 17:49:41: SMB: 3: lookupSIDs:no reply
2010-08-10 17:49:41: SMB: 3: NT_Access_Credential::RequestFromSID:usr=FUNDACION\wsscf23674$ primary nt group not mapped, use unix primary

2010-08-10 17:50:31: SMB: 3: Domain='FORCENDM' trusted DC='-': ignored errorFlags=0x0 DCStatus=0x547,5

Do you Know any similar case?

Thanks,

Regards,

Rich_Bai

25 Posts

August 26th, 2010 22:00

The error indicates that SID is not able to be query from the source domain. The reason is kind of difficult to tell from here.

I would suggest you either engage EMC Professional Service for this as migration is typical their task or open a service request to support to see whether they are able to help you, which I think you may be told to get EMC field for assistance. 

View More

View All

No Events found!

Top