Samba 3... yes!

It worked! :-) At least 95% worked, and the few problems could be easily fixed. Two notes:

1. We decided to skip domain mapping, since we don't have a group for all Samba users, and Samba 3 only maps one-to-one.

2. To convert the SIDs, I exported the smbpasswd to XML, added line breaks, ran this perl script, and imported into samtdb.

:
#!/usr/bin/perl
while (<>) {
if (/sid=/) {
/-(d+)"/;
my $oldrid=$1;
my $newrid= (($oldrid-1000)*2)+1000 ;
s/-d+"/-$newrid"/;
}
print;
}