samba - Apr 2015 - Migrate w2k3 single label to samba4

Hello thank you for you response:

I would not like to give up.I'll try to see if I can change my domain
to the correct dns structure , maybe then I could be migrated to
samba4


2015-04-07 13:48 GMT-04:00 Marcel de Reuver <marcel at de.reuver.org>:
> Looks like Windows also does not support single label dc's anymore, see
> http://support.microsoft.com/en-us/kb/300684 for the details.
> So Samba will also not and will give errors......
>
> Regards, Marcel
>
> 2015-04-07 17:15 GMT+02:00 Dania Ramirez Moya <dania181087 at
gmail.com>:
>
>> Hello list
>> Has someone migrated w2k3 single label dc to samba4?
>> I am trying but i get  several errores
>> I would appreciate any help
>> Best regards
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>
>

Hi Dania,
> Hello thank you for you response:
>
> I would not like to give up.I'll try to see if I can change my domain
> to the correct dns structure , maybe then I could be migrated to
> samba4
you can do a domain rename on the win2k3 before switching to samba. But 
then you will have an issue with the AD Epoch [1] as it will be 
incremented to 1, and that is not supported either by samba4 AD right now.

I had that issue once too. You can fiddle with the 
ms-DS-ReplicationEpoch attribute and switch it back to 0 manually after 
domain rename, and samba4 will happily join the domain as a DC. But as 
Andrew Bartlett pointed in a previous post, you may/will run into issues 
with replication. You may check the quote from Andrew in the bugzilla [2]:

"The initial reaction of my contacts at Microsoft is that removing this 
value would be "catastrophic".  I strongly urge users of Samba and of 
Microsoft AD not to do this.  The reason is that this is a fundamental 
part of the replication state. "

If you really don't want to give up, and you don't have/need replication
now and in the future, and your network is not mission critical, and you 
are ready to reprovision the domain and rejoin all the workstation in 
case of issue, then you may try to fiddle with the 
ms-DS-ReplicationEpoch attribute. I once did a win2k3 single label 
domain rename on a simple public library network with 20 workstations 
before switching to samba4, and the samba DC has been running fine for 
two years. You've been be warned :-)

Cheers,

Denis

[1] 
https://technet.microsoft.com/en-us/library/aa996670%28v=exchg.80%29.aspx
[2] https://bugzilla.samba.org/show_bug.cgi?id=9500
>
>
> 2015-04-07 13:48 GMT-04:00 Marcel de Reuver <marcel at
de.reuver.org>:
>
>> Looks like Windows also does not support single label dc's anymore,
see
>> http://support.microsoft.com/en-us/kb/300684 for the details.
>> So Samba will also not and will give errors......
>>
>> Regards, Marcel
>>
>> 2015-04-07 17:15 GMT+02:00 Dania Ramirez Moya <dania181087 at
gmail.com>:
>>
>>> Hello list
>>> Has someone migrated w2k3 single label dc to samba4?
>>> I am trying but i get  several errores
>>> I would appreciate any help
>>> Best regards
>>> --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>
>>
>>
-- 
Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, b?timent A
12 avenue Jules Verne
44230 Saint S?bastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil-it-systems.fr

Hi denis:
First of all thank you very much for warning me .I am very grateful that I
did not know these issues.

I will test in a test environment and according to the results 'll
take a decision.
Once again thanks

Best regards


2015-04-08 5:46 GMT-04:00 Denis Cardon <denis.cardon at
tranquil-it-systems.fr>
:
> Hi Dania,
>
>  Hello thank you for you response:
>>
>> I would not like to give up.I'll try to see if I can change my
domain
>> to the correct dns structure , maybe then I could be migrated to
>> samba4
>>
>
> you can do a domain rename on the win2k3 before switching to samba. But
> then you will have an issue with the AD Epoch [1] as it will be incremented
> to 1, and that is not supported either by samba4 AD right now.
>
> I had that issue once too. You can fiddle with the ms-DS-ReplicationEpoch
> attribute and switch it back to 0 manually after domain rename, and samba4
> will happily join the domain as a DC. But as Andrew Bartlett pointed in a
> previous post, you may/will run into issues with replication. You may check
> the quote from Andrew in the bugzilla [2]:
>
> "The initial reaction of my contacts at Microsoft is that removing
this
> value would be "catastrophic".  I strongly urge users of Samba
and of
> Microsoft AD not to do this.  The reason is that this is a fundamental part
> of the replication state. "
>
> If you really don't want to give up, and you don't have/need
replication
> now and in the future, and your network is not mission critical, and you
> are ready to reprovision the domain and rejoin all the workstation in case
> of issue, then you may try to fiddle with the ms-DS-ReplicationEpoch
> attribute. I once did a win2k3 single label domain rename on a simple
> public library network with 20 workstations before switching to samba4, and
> the samba DC has been running fine for two years. You've been be warned
:-)
>
> Cheers,
>
> Denis
>
> [1] https://technet.microsoft.com/en-us/library/aa996670%28v>
exchg.80%29.aspx
> [2] https://bugzilla.samba.org/show_bug.cgi?id=9500
>
>
>
>>
>> 2015-04-07 13:48 GMT-04:00 Marcel de Reuver <marcel at
de.reuver.org>:
>>
>>  Looks like Windows also does not support single label dc's
anymore, see
>>> http://support.microsoft.com/en-us/kb/300684 for the details.
>>> So Samba will also not and will give errors......
>>>
>>> Regards, Marcel
>>>
>>> 2015-04-07 17:15 GMT+02:00 Dania Ramirez Moya <dania181087 at
gmail.com>:
>>>
>>>  Hello list
>>>> Has someone migrated w2k3 single label dc to samba4?
>>>> I am trying but i get  several errores
>>>> I would appreciate any help
>>>> Best regards
>>>> --
>>>> To unsubscribe from this list go to the following URL and read
the
>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>
>>>>
>>>
>>>
> --
> Denis Cardon
> Tranquil IT Systems
> Les Espaces Jules Verne, b?timent A
> 12 avenue Jules Verne
> 44230 Saint S?bastien sur Loire
> tel : +33 (0) 2.40.97.57.55
> http://www.tranquil-it-systems.fr
>
>