samba - Feb 2019 - Upgrading Samba

Hi Rowland,

On Wed, 6 Feb 2019, Rowland Penny via samba wrote:
> On Wed, 6 Feb 2019 15:20:56 +0400
> henri transfert via samba <samba at lists.samba.org> wrote:
>
>> Hello all,
>>
>> I've planned to upgrade a Samba DC from 4.6.7 to 4.9.4 .
>
> STOP!
>
> Do not do this directly, reports on here have shown that this will not
> work.
>
> You will have to 'walk' up the versions, it may work if you go to
> 4.8.3, then to 4.9.4, but you may have to go to 4.7.2 first.
If I have a domain running (2) 4.7.x DC's and I build 2 new DC's with
4.9.latest,
join the domain and make them DC's and then decommission the old DC's,
is that expected to work?

Regards,

-- 
Tom			me at tdiehl.org

On Wed, 6 Feb 2019 11:26:46 -0500 (EST)
me at tdiehl.org wrote:
> Hi Rowland,
> 
> On Wed, 6 Feb 2019, Rowland Penny via samba wrote:
> 
> > On Wed, 6 Feb 2019 15:20:56 +0400
> > henri transfert via samba <samba at lists.samba.org> wrote:
> >
> >> Hello all,
> >>
> >> I've planned to upgrade a Samba DC from 4.6.7 to 4.9.4 .
> >
> > STOP!
> >
> > Do not do this directly, reports on here have shown that this will
> > not work.
> >
> > You will have to 'walk' up the versions, it may work if you go
to
> > 4.8.3, then to 4.9.4, but you may have to go to 4.7.2 first.
> 
> If I have a domain running (2) 4.7.x DC's and I build 2 new DC's
with
> 4.9.latest, join the domain and make them DC's and then decommission
> the old DC's, is that expected to work?
> 
> Regards,
> 
Not entirely sure, but I think the answer is likely to be 'No'
I think the problem is the GUID Index mode introduced at 4.8.0, Your
4.7.x DC's will not have this, but the 4.9.x DC's will probably expect
this. Only way to find out, try it ;-)

Rowland

On 7/02/19 6:05 AM, Rowland Penny via samba wrote:
>> If I have a domain running (2) 4.7.x DC's and I build 2 new
DC's with
>> 4.9.latest, join the domain and make them DC's and then
decommission
>> the old DC's, is that expected to work?
>>
>> Regards,
>>
> 
> Not entirely sure, but I think the answer is likely to be 'No'
> I think the problem is the GUID Index mode introduced at 4.8.0, Your
> 4.7.x DC's will not have this, but the 4.9.x DC's will probably
expect
> this. Only way to find out, try it ;-)
Actually, yes it generally does work. The replication protocols don't
care about internal database details like indexes.

You can do this in-place if you stop a DC, upgrade Samba, then rejoin
the other DC.

cheers,
Douglas

On Wed, 6 Feb 2019, Rowland Penny via samba wrote:
> On Wed, 6 Feb 2019 11:26:46 -0500 (EST)
> me at tdiehl.org wrote:
>
>> Hi Rowland,
>>
>> On Wed, 6 Feb 2019, Rowland Penny via samba wrote:
>>
>>> On Wed, 6 Feb 2019 15:20:56 +0400
>>> henri transfert via samba <samba at lists.samba.org> wrote:
>>>
>>>> Hello all,
>>>>
>>>> I've planned to upgrade a Samba DC from 4.6.7 to 4.9.4 .
>>>
>>> STOP!
>>>
>>> Do not do this directly, reports on here have shown that this will
>>> not work.
>>>
>>> You will have to 'walk' up the versions, it may work if you
go to
>>> 4.8.3, then to 4.9.4, but you may have to go to 4.7.2 first.
>>
>> If I have a domain running (2) 4.7.x DC's and I build 2 new
DC's with
>> 4.9.latest, join the domain and make them DC's and then
decommission
>> the old DC's, is that expected to work?
>>
>> Regards,
>>
>
> Not entirely sure, but I think the answer is likely to be 'No'
> I think the problem is the GUID Index mode introduced at 4.8.0, Your
> 4.7.x DC's will not have this, but the 4.9.x DC's will probably
expect
> this. Only way to find out, try it ;-)
OK, so to be clear, If I do this does it only break the new DC or do I risk
breaking all of the DCs in the domain?

What exactly am I looking for? bind_dlz errors?

Assuming it will only break the new DC, I am willing to give it a try and
report back.

Regards,

-- 
Tom			me at tdiehl.org

Hi Rowland 

I read the threads suggested by Louis (thanks Louis ! ) . As far as I understand
, there could be a DNS issue between 4.8.x and 4.9.x.

I will try at least to add a new 4.7.12 DC to the domain (the only one current
DC is 4.6.7) and check everything is ok .
(I take the 4.7.12 because I guess It is the most stable in the 4.7.x branch ,
am I right ?) .

After that , I may try to upgrade progressively to 4.8 and 4.9 .

Is it correct to assume that if I have two DCs , DC1 working ok , and the other
one DC2 that I try to upgrade and this upgrade fails , I always could demote DC2
and keep the DC1 and the AD domain and clients safe ?

Henri 
> -----Message d'origine-----
> De : samba [mailto:samba-bounces at lists.samba.org] De la part de Rowland
> Penny via samba
> Envoyé : mercredi 6 février 2019 21:05
> À : samba at lists.samba.org
> Objet : Re: [Samba] Upgrading Samba
> 
> On Wed, 6 Feb 2019 11:26:46 -0500 (EST)
> me at tdiehl.org wrote:
> 
> > Hi Rowland,
> >
> > On Wed, 6 Feb 2019, Rowland Penny via samba wrote:
> >
> > > On Wed, 6 Feb 2019 15:20:56 +0400
> > > henri transfert via samba <samba at lists.samba.org> wrote:
> > >
> > >> Hello all,
> > >>
> > >> I've planned to upgrade a Samba DC from 4.6.7 to 4.9.4 .
> > >
> > > STOP!
> > >
> > > Do not do this directly, reports on here have shown that this
will
> > > not work.
> > >
> > > You will have to 'walk' up the versions, it may work if
you go to
> > > 4.8.3, then to 4.9.4, but you may have to go to 4.7.2 first.
> >
> > If I have a domain running (2) 4.7.x DC's and I build 2 new
DC's with
> > 4.9.latest, join the domain and make them DC's and then
decommission
> > the old DC's, is that expected to work?
> >
> > Regards,
> >
> 
> Not entirely sure, but I think the answer is likely to be 'No'
> I think the problem is the GUID Index mode introduced at 4.8.0, Your 4.7.x
> DC's will not have this, but the 4.9.x DC's will probably expect
this. Only way
> to find out, try it ;-)
> 
> Rowland
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba