samba - Apr 2015 - Migration of 2 samba3 PDC+OpenLDAP in one new Samba4 AD

Hello Pierre,

Am 09.04.2015 um 10:27 schrieb BRIEC, Pierre:
 > The current samba3 domains doesn't have the same name, is it a
 > problem? Do you know when this functionnality will be implemented?

It doesn't matter, because in my suggestion, one domain would die and 
you re-create all users in the other and join all machines to the new one.




 > I'm not really aware with AD stuff so could you explain me how the
 > different sites could communicate themselves if AD Trust is not
 > implemented? The Inter-Sites functionnality is not working atm?

You need of course a connection between the two sites (LAN, VPN, etc.). 
Depending on the changes that happen in AD, a small bandwidth can be 
sufficient. AD sites work great with Samba.

In AD you setup sites and configure replication between them. I 
described it here:
https://wiki.samba.org/index.php/Active_Directory_Sites





 > the main problem is not the Users, as i will delete them and only
 > keep the Teachers after July.

About how many user accounts and groups are we talking in the smaller 
domain? And about how many workstations?



 > I want to be sure that i can have the following functionalities with
 > Samba4 AD:
 > - intersites communications
 > - DC replication between the two sites.
 > - only one domain

Is all possible with Samba in it's current state.



Regards,
Marc

Hello Pierre,

please reply to the list and not (only) to my address, so everyone can 
read the full thread.



Am 10.04.2015 um 08:51 schrieb BRIEC, Pierre:
 > The global number of accounts is around 1200 Users (~600 on each site)
 > The first site have 200 computers and the other one 300 computers

I would migrate the domain with more computer account to AD, join all 
machines of the smaller one to it and then drop it. And of course 
re-create the users/groups, too. samba-tool of 4.2 has some more options 
to set more details on account. If you script a bit, this should be easy 
to do.



 > nice, perhaps, i will make a clean install of Samba4 instead a
 > migration.
 > If i don't do the classicupgrade on both sites, can I build a new
 > domain Samba4 without interferences with the actual Samba3?

Sure you can, but you must not use one of the existing domain names! If 
you start a new AD installation, then you have to join all 200 + 300 
computers to the domain. And you have to re-create all users of both 
domain. It's much more work.



Regards,
Marc

2015-04-10 22:05 GMT+02:00 Marc Muehlfeld <mmuehlfeld at samba.org>:
> Hello Pierre,
>
> please reply to the list and not (only) to my address, so everyone can
> read the full thread.

Oups sorry for that. I've noticed after
>
>
>
> Am 10.04.2015 um 08:51 schrieb BRIEC, Pierre:
> > The global number of accounts is around 1200 Users (~600 on each site)
> > The first site have 200 computers and the other one 300 computers
>
> I would migrate the domain with more computer account to AD, join all
> machines of the smaller one to it and then drop it. And of course re-create
> the users/groups, too. samba-tool of 4.2 has some more options to set more
> details on account. If you script a bit, this should be easy to do.

Ok, i've already use script to create users for my samba3, so it should not
be too difficult.
Do you know if it is possible to script a windows task that:
- leave the domain
- reboot
- join the new AD domain
>
>
>
>
> > nice, perhaps, i will make a clean install of Samba4 instead a
> > migration.
> > If i don't do the classicupgrade on both sites, can I build a new
> > domain Samba4 without interferences with the actual Samba3?
>
> Sure you can, but you must not use one of the existing domain names! If
> you start a new AD installation, then you have to join all 200 + 300
> computers to the domain. And you have to re-create all users of both
> domain. It's much more work.
>
Yes of course, it's much work, but i can prepare the new samba4 without
stress :-)
>
>
> Regards,
> Marc
>
BR,
Pierre

--