Thanks for the feedback too Andrew!!! I will analyze and verify the least impactful way to try to solve this problem. On Wed, Nov 15, 2017 at 4:25 PM, Andrew Bartlett <abartlet at samba.org> wrote:> On Tue, 2017-11-14 at 16:05 -0200, Elias Pereira via samba wrote: > > Hello guys, > > > > I work at an institution where the domain is institute.edu.br. We have a > > main dns that answers for the internal and external services that we > have. > > > > Firstly the staff here configured samba as domain institute.edu.br, but > > this way it is conflicting in the resolution of internal and external > > service names, since samba wants to respond for all requests and, even > > inserting a forward zone, does not it works. > > > > I configured a new DC as a subdomain, because in this way samba only > > responds to your requests and forward all the rest to the main dns. It > > became addc.institute.edu.br > > > > My question is whether there is any impediment in joining the domindom to > > the domain, transferring the fsmo roles and then demote the old one? > > Sadly what you need is the ability to rename a Samba domain, and this > isn't something we support yet. > > Sorry, > > Andrew Bartlett > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/ > services/samba > >-- Elias Pereira
I'm going to redo my infra using the subdomain. As I've commented before, the file server is together with the DC. I'm going to separate it, because I think it's a good practice. My question is if I could re-use the old DC that already has an integrated file server for this purpose or is it still better to set up a new server, re-configure folders and shares, etc? On Wed, Nov 15, 2017 at 9:43 PM, Elias Pereira <empbilly at gmail.com> wrote:> Thanks for the feedback too Andrew!!! > > I will analyze and verify the least impactful way to try to solve this > problem. > > On Wed, Nov 15, 2017 at 4:25 PM, Andrew Bartlett <abartlet at samba.org> > wrote: > >> On Tue, 2017-11-14 at 16:05 -0200, Elias Pereira via samba wrote: >> > Hello guys, >> > >> > I work at an institution where the domain is institute.edu.br. We have >> a >> > main dns that answers for the internal and external services that we >> have. >> > >> > Firstly the staff here configured samba as domain institute.edu.br, but >> > this way it is conflicting in the resolution of internal and external >> > service names, since samba wants to respond for all requests and, even >> > inserting a forward zone, does not it works. >> > >> > I configured a new DC as a subdomain, because in this way samba only >> > responds to your requests and forward all the rest to the main dns. It >> > became addc.institute.edu.br >> > >> > My question is whether there is any impediment in joining the domindom >> to >> > the domain, transferring the fsmo roles and then demote the old one? >> >> Sadly what you need is the ability to rename a Samba domain, and this >> isn't something we support yet. >> >> Sorry, >> >> Andrew Bartlett >> -- >> Andrew Bartlett http://samba.org/~abartlet/ >> Authentication Developer, Samba Team http://samba.org >> Samba Developer, Catalyst IT http://catalyst.net.nz/service >> s/samba >> >> > > > -- > Elias Pereira >-- Elias Pereira
On Thu, 16 Nov 2017 16:59:13 -0200 Elias Pereira via samba <samba at lists.samba.org> wrote:> I'm going to redo my infra using the subdomain. > > As I've commented before, the file server is together with the DC. I'm > going to separate it, because I think it's a good practice. > > My question is if I could re-use the old DC that already has an > integrated file server for this purpose or is it still better to set > up a new server, re-configure folders and shares, etc? >Whilst you can re-use the old DC as a fileserver, you should be aware if you provision another DC using a new DNS domain, it will be precisely that, a new DC. This means that unless you have added RFC2307 attributes your users and groups in the old domain, they will not get the same IDs in the new one. You will have to change the old DNS domain to the new one. You will also have to remove every trace of the old DC Rowland