Have an NT4 PDC, Samba 3.0.21, LDAP 2.0.27, RH 8.0.
First I experimented with samba as PDC. Now I tried to go ahead
and migrate from the real PDC(FSERV/FYRPLUS).

/usr/local/samba/bin/net -d 0 rpc vampire -S fserv
Fetching DOMAIN database
Segmentation fault

/usr/local/samba/bin/net -d 200 rpc vampire -S fserv 2>&1 | tail -10
[2006/01/13 01:14:44, 5] rpc_parse/parse_prs.c:prs_uint32(703)
                  11458 uni_max_len: 00000030
[2006/01/13 01:14:44, 5] rpc_parse/parse_prs.c:prs_uint32(703)
                  1145c offset     : 00000000
[2006/01/13 01:14:44, 5] rpc_parse/parse_prs.c:prs_uint32(703)
                  11460 uni_str_len: 00000030
[2006/01/13 01:14:44, 5] rpc_parse/parse_prs.c:dbg_rw_punival(875)
                  11464 buffer     : m.:. . . . . . . . . . . . . . . . . . . . .d... . . . . . . . . . . . . . . . . . . . . . . . .
[2006/01/13 01:14:44, 5] rpc_parse/parse_prs.c:prs_uint32(703)
              114c4 pwd_len: 00000044

I have added my own traces and found out that the crash is due
to dereferencing a NULL pointer when dealing with the first accounts
password field;

parse_net.c: net_io_sam_account_info()
   if (!prs_hash1(ps, ps->data_offset, len))

parse_prs.c:prs_hash1()
    SamOEMhash((uchar *) q, (const unsigned char *)ps->sess_key, len);

I also found out that it is ps->sess_key that is 0 ==> Segmentation fault.

I have commented out the call to SamOEMhash() and the migration can complete.
The passords are not correct but all users, computers and groups are now in my LDAP server.

But then it would be nice to get all passwords as well, naturally.

regards Petter