samba - Nov 2022 - Migrate and Update (Samba 4.1 ADDC to Samba Latest Version on different Server).

Hi Rowland and Samba Team:

I finally had time to clone the old server with Debian 7 and Samba 4.1 to a
VM on proxmox and updated the Debian distro to Debian 10.

I think now its time to update the Samba installation, i have vm backups so
im secure right now.

What is the best procedure to start the update to the latest versi?n of
Samba, the server is a AD Samba 4.1 with 2 Linux Member Servers who work
like file servers.
Is using winbind and the all the needed packages, some webapps login the
users using this server.

The server now is connected to a different network with internet access,
because the old server still in production.

Any information to start the update on the VM is really appreciated.

Best Regards to everyone..



El jue, 19 ago 2021 a las 14:38, Rowland Penny (<rpenny at samba.org>)
escribi?:
> On Thu, 2021-08-19 at 14:20 -0300, Juan Ignacio wrote:
> > Awesome!!! thanks for your fast answer Rowland.
> >
> > If I understand correctly what you suggest is to make a VM with the
> > Version of Debian  'Wheezy' i have on the Samba 4.1 OLD Server
and
> > start to upgrade it, I suppose because of the libraries and packages.
> > Question:  In the new VM server with wheezy, before upgrading the
> > distro do I need to install the same version of Samba of the old
> > server "4.1"?  That installation was made from sources on
the old
> > one.
>
> You need to start with what you have now i.e. you need to clone what
> you have.
>
> You then need to upgrade the distro, this will also upgrade Samba and
> the packages that Samba relies on. If you attempt to go straight from
> 4.1.x to 4.14.6 on wheezy, I am sure this will not work because you
> will have to compile Samba yourself and the packages required on Wheezy
> will be too old.
>
> Rowland
>
>

On 16/11/2022 14:21, Juan Ignacio wrote:
> Hi Rowland and Samba Team:
> 
> I finally had time to clone the old server with Debian 7 and Samba 4.1 
> to a VM on proxmox and updated the Debian distro to Debian 10.
I would normally suggest you keep upgrading the distro to Bullseye (11), 
but in your case, I would pause here.
> 
> I think now its time to update the Samba installation, i have vm backups 
> so im secure right now.
> 
> What is the best procedure to start the update to the latest versi?n of 
> Samba, the server is a AD Samba 4.1 with 2 Linux Member Servers who work 
> like file servers.
Forget the Unix domain members in the short term, they are the least of 
your worries.

I would upgrade the DC's by adding a new DC on your new VM, once this 
has been joined and is running correctly, I would then transfer all the 
FSMO roles to the new DC.

Now demote every other DC, just leaving your new DC.

Create another VM, but this time use Bullseye and Samba from Debian 
backports, this will get 4.16.6. Repeat the procedure above, until you 
just have a DC running Samba 4.16.6 with all the FSMO roles.

You can now add further DC's and test the Unix domain members, they 
should still work.
> Is using winbind and the all the needed packages, some webapps login the 
> users using this server.
You may have to alter how the webapps login, but then you may not.

Rowland