search for: karypidi

I connected to LDAP via Apache Directory Studio and it seems that the child node under the computer account is an RID set: ????????CN=RID Set,CN=DC2,CN=Computers,DC=ad,DC=home,DC=lan Is this an omission of the demotion process? Should this havfe been removed? Is it safe for me to delete this and try the "sambal-tool computer delete DC2" again?

On 29/05/2023 11:12, Alexandros Karypidis via samba wrote: > I connected to LDAP via Apache Directory Studio and it seems that the child node under the computer account is an RID set: > > ????????CN=RID Set,CN=DC2,CN=Computers,DC=ad,DC=home,DC=lan > > Is this an omission of the demotion process? Should this havfe been re...

I used Apache Directory Studio to remove the "RID Set" node and after that a simple "samba-tool computer delete DC2" worked just fine. Perhaps the version of Samba in TurnKey Linux V16.1 has a bug (4.9.5-Debian)? Likely demotion should remove leaf nodes from domain controllers as part of the process. I have now recreated DC2 using TurnKey Linux V17.1 (4.17.6-Debian) and so

Hello, I have a domain with three controllers (DC1/DC2/DC3). One is completely non-existent and offline (DC3). I am trying to remove the online controller completely from the domain. The Samba wiki is currently offline, but from recollection I did the following to remove DC2: - transferred all FSMO to DC1 - demoted DC2 The demotion part seems to have succeeded: --- root at dc2 ~# samba-tool