samba - Dec 2021 - ODP: Primary DC migration / upgrade

Thanks for the reply,
I considered Rasberry Pi, but I want this box to also keep a backup hdd that
will rsync from a NAS box that I have that runs network shares among lots of
other things (the primary dc VM as well which is a bit problematic). Gearing a
Pi4b to do that will cost me a fair bit more than the simplest AMD SoC mobo with
a few required gizmos, and arguably it will be less customizable.

So You're saying there'd be no harm keeping the VM aside but pointing
all members at the physical box as primary destination?
Cheers,
Chris
________________________________
Od: samba <samba-bounces at lists.samba.org> w imieniu u?ytkownika Rowland
Penny via samba <samba at lists.samba.org>
Wys?ane: wtorek, 7 grudnia 2021 17:24
Do: samba at lists.samba.org <samba at lists.samba.org>
Temat: Re: [Samba] Primary DC migration / upgrade

On Tue, 2021-12-07 at 16:02 +0000, Krzysztof Kucyba?a via samba
wrote:
> Hi all,
> I'm contemplating a possible change to my home domain that currently
> spins off a primary dc running on a virtualbox VM. I want to buy a
> very simple set of components to build a cheap tiny yet physical
> server to host the dc.
You could do what I do, run your Samba AD DC's on raspberry pi 4b's and
use Louis Van Belle's Samba repo, see here:

https://apt.van-belle.nl/
>  When that happens, what would the correct approach be towards
> migrating? Does the below make any sense assuming the new physical
> will run Debian Bullseye which has a slightly newer samba version
> compared to the current VM running Debian Buster:
>
>   1.  connect the new physical box as secondary domain controller ->
> I would assume this will cause it to replicate whatever is in the
> primary
Correct.
>   2.  switch their roles so that vm becomes secondary, physical
> becomes primary
Nearly, except there are no primary or secondary DC's in AD, they are
all just DC's and any DC can hold the FSMO roles. In fact, if you have
seven DC's, they could each hold an FSMO role. So which would be the
'primary' ??
>   3.  turn off the VM leaving just one DC in the domain (or not, not
> sure if it's worthwhile to keep a secondary DC in a domain as small
> as mine)
You would have to demote the old DC, not just turn it off and it is
always better to have more than one DC.
>
> Is this going to work, and if so - is this the recommended approach?
Yes and yes.

Rowland



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

On Tue, 2021-12-07 at 16:37 +0000, Krzysztof Kucyba?a
wrote:
> Thanks for the reply,
> I considered Rasberry Pi, but I want this box to also keep a backup
> hdd that will rsync from a NAS box that I have that runs network
> shares among lots of other things (the primary dc VM as well which is
> a bit problematic).
A Samba AD DC (like a normal Windows AD DC) should only be used for
authentication, but it isn't unknown for one to be used for other
purposes.
>  Gearing a Pi4b to do that will cost me a fair bit more than the
> simplest AMD SoC mobo with a few required gizmos, and arguably it
> will be less customizable.
Are you sure about that ? You can get an rpi4, case, power supply and
ssd for circa ?150.
 
> 
> So You're saying there'd be no harm keeping the VM aside but
pointing
> all members at the physical box as primary destination?
There would be no problem with using a VM as another DC (though I would
update the OS and Samba) and you could point your clients to both for
DNS.

Rowland
>