I am transfer using 'samba-tool fsmo transfer --role=all I am try demote Windows using DCPROMO.EXE on Windows Server The output of command, no errors. (CN=GTESTE2 = Samba DC) root at gteste2:/anderson# root at gteste2:/anderson# *samba-tool fsmo show* SchemaMasterRole owner: CN=NTDS Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com InfrastructureMasterRole owner: CN=NTDS Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com RidAllocationMasterRole owner: CN=NTDS Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com PdcEmulationMasterRole owner: CN=NTDS Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com DomainNamingMasterRole owner: CN=NTDS Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com DomainDnsZonesMasterRole owner: CN=NTDS Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com ForestDnsZonesMasterRole owner: CN=NTDS Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com root at gteste2:/anderson# Thanks, Anderson Hoffmann 2016-07-11 15:47 GMT-03:00 Rowland penny <rpenny at samba.org>:> On 11/07/16 19:26, Anderson Hoffmann do Carmo wrote: > >> Hi. >> >> I am using a Windows Server 2008R2 as primary DC and a Ubuntu Server 16.04 >> as secundary DC with Samba 4.3.9 (from repository/apt-get) >> I am transfered FSMO rules to Samba and I am try to demote Windows, but >> fail! >> > > How did you transfer the FSMO roles ? > What 'tool' did you use ? > > The error is: >> >> The operation failed: >> The active directory domain services could not find another domain >> controller to transfer the remaining data on the partition >> DC=DomainDnsZones,DC=testead,DC=minhaempresa,DC=com >> "the specified domain does not exist or can not be contacted" >> > > Have you tried running 'samba-tool fsmo show' in a terminal on the Samba > DC ? > If so, does it show all 7 FSMO role owners or does it end with an error > message ? > > Rowland > > Any ideia? >> >> The Samba DC it's OK and operational >> >> >> >> Anderson Hoffmann >> > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
So you transfer all the fsmo roles and then when you are running dcpromo on the 2008 DC it fails, correct? On Mon, Jul 11, 2016 at 3:04 PM, Anderson Hoffmann do Carmo < anderson.hoffmann at gsurfnet.com> wrote:> I am transfer using 'samba-tool fsmo transfer --role=all > I am try demote Windows using DCPROMO.EXE on Windows Server > The output of command, no errors. (CN=GTESTE2 = Samba DC) > > root at gteste2:/anderson# > root at gteste2:/anderson# *samba-tool fsmo show* > SchemaMasterRole owner: CN=NTDS > > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > InfrastructureMasterRole owner: CN=NTDS > > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > RidAllocationMasterRole owner: CN=NTDS > > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > PdcEmulationMasterRole owner: CN=NTDS > > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > DomainNamingMasterRole owner: CN=NTDS > > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > DomainDnsZonesMasterRole owner: CN=NTDS > > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > ForestDnsZonesMasterRole owner: CN=NTDS > > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > root at gteste2:/anderson# > > Thanks, > > Anderson Hoffmann > > > > 2016-07-11 15:47 GMT-03:00 Rowland penny <rpenny at samba.org>: > > > On 11/07/16 19:26, Anderson Hoffmann do Carmo wrote: > > > >> Hi. > >> > >> I am using a Windows Server 2008R2 as primary DC and a Ubuntu Server > 16.04 > >> as secundary DC with Samba 4.3.9 (from repository/apt-get) > >> I am transfered FSMO rules to Samba and I am try to demote Windows, but > >> fail! > >> > > > > How did you transfer the FSMO roles ? > > What 'tool' did you use ? > > > > The error is: > >> > >> The operation failed: > >> The active directory domain services could not find another domain > >> controller to transfer the remaining data on the partition > >> DC=DomainDnsZones,DC=testead,DC=minhaempresa,DC=com > >> "the specified domain does not exist or can not be contacted" > >> > > > > Have you tried running 'samba-tool fsmo show' in a terminal on the Samba > > DC ? > > If so, does it show all 7 FSMO role owners or does it end with an error > > message ? > > > > Rowland > > > > Any ideia? > >> > >> The Samba DC it's OK and operational > >> > >> > >> > >> Anderson Hoffmann > >> > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
Yes! exactly Anderson Hoffmann 2016-07-11 16:13 GMT-03:00 Jason Waters <jason at geeknocity.com>:> So you transfer all the fsmo roles and then when you are running dcpromo > on the 2008 DC it fails, correct? > > On Mon, Jul 11, 2016 at 3:04 PM, Anderson Hoffmann do Carmo < > anderson.hoffmann at gsurfnet.com> wrote: > >> I am transfer using 'samba-tool fsmo transfer --role=all >> I am try demote Windows using DCPROMO.EXE on Windows Server >> The output of command, no errors. (CN=GTESTE2 = Samba DC) >> >> root at gteste2:/anderson# >> root at gteste2:/anderson# *samba-tool fsmo show* >> SchemaMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> InfrastructureMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> RidAllocationMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> PdcEmulationMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> DomainNamingMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> DomainDnsZonesMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> ForestDnsZonesMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> root at gteste2:/anderson# >> >> Thanks, >> >> Anderson Hoffmann >> >> >> >> 2016-07-11 15:47 GMT-03:00 Rowland penny <rpenny at samba.org>: >> >> > On 11/07/16 19:26, Anderson Hoffmann do Carmo wrote: >> > >> >> Hi. >> >> >> >> I am using a Windows Server 2008R2 as primary DC and a Ubuntu Server >> 16.04 >> >> as secundary DC with Samba 4.3.9 (from repository/apt-get) >> >> I am transfered FSMO rules to Samba and I am try to demote Windows, but >> >> fail! >> >> >> > >> > How did you transfer the FSMO roles ? >> > What 'tool' did you use ? >> > >> > The error is: >> >> >> >> The operation failed: >> >> The active directory domain services could not find another domain >> >> controller to transfer the remaining data on the partition >> >> DC=DomainDnsZones,DC=testead,DC=minhaempresa,DC=com >> >> "the specified domain does not exist or can not be contacted" >> >> >> > >> > Have you tried running 'samba-tool fsmo show' in a terminal on the Samba >> > DC ? >> > If so, does it show all 7 FSMO role owners or does it end with an error >> > message ? >> > >> > Rowland >> > >> > Any ideia? >> >> >> >> The Samba DC it's OK and operational >> >> >> >> >> >> >> >> Anderson Hoffmann >> >> >> > >> > >> > -- >> > To unsubscribe from this list go to the following URL and read the >> > instructions: https://lists.samba.org/mailman/options/samba >> > >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> > >
On 11/07/16 20:04, Anderson Hoffmann do Carmo wrote:> I am transfer using 'samba-tool fsmo transfer --role=allUnless you added '-UAdministrator --password=PASSWORD' to the above command (or another user will the required permissions), you wouldn't have transferred the DNS roles.> I am try demote Windows using DCPROMO.EXE on Windows ServerHave you tried (once you are sure all 7 FSMO roles have been transferred) turning off the windows server and then running 'samba-tool domain demote --remove-other-dead-server=REMOVE_OTHER_DEAD_SERVER -UAdministrator --password=PASSWORD'. Before doing any of the above, I would check if everything is ok in the AD on your Samba 4 AD DC. You also didn't say if 'samba-tool fsmo show' shows all your 7 FSMO roles without errors. Rowland> The output of command, no errors. (CN=GTESTE2 = Samba DC) > > root at gteste2:/anderson# > root at gteste2:/anderson# *samba-tool fsmo show* > SchemaMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > InfrastructureMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > RidAllocationMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > PdcEmulationMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > DomainNamingMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > DomainDnsZonesMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > ForestDnsZonesMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > root at gteste2:/anderson# > > Thanks, > > Anderson Hoffmann > > > > 2016-07-11 15:47 GMT-03:00 Rowland penny <rpenny at samba.org > <mailto:rpenny at samba.org>>: > > On 11/07/16 19:26, Anderson Hoffmann do Carmo wrote: > > Hi. > > I am using a Windows Server 2008R2 as primary DC and a Ubuntu > Server 16.04 > as secundary DC with Samba 4.3.9 (from repository/apt-get) > I am transfered FSMO rules to Samba and I am try to demote > Windows, but > fail! > > > How did you transfer the FSMO roles ? > What 'tool' did you use ? > > The error is: > > The operation failed: > The active directory domain services could not find another domain > controller to transfer the remaining data on the partition > DC=DomainDnsZones,DC=testead,DC=minhaempresa,DC=com > "the specified domain does not exist or can not be contacted" > > > Have you tried running 'samba-tool fsmo show' in a terminal on the > Samba DC ? > If so, does it show all 7 FSMO role owners or does it end with an > error message ? > > Rowland > > Any ideia? > > The Samba DC it's OK and operational > > > > Anderson Hoffmann > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
It did show that he had all 7 but that is a good point. I would shutdown the 2008 server and make sure users can login, etc.... On Mon, Jul 11, 2016 at 3:50 PM, Rowland penny <rpenny at samba.org> wrote:> On 11/07/16 20:04, Anderson Hoffmann do Carmo wrote: > >> I am transfer using 'samba-tool fsmo transfer --role=all >> > > Unless you added '-UAdministrator --password=PASSWORD' to the above > command (or another user will the required permissions), you wouldn't have > transferred the DNS roles. > > I am try demote Windows using DCPROMO.EXE on Windows Server >> > > Have you tried (once you are sure all 7 FSMO roles have been transferred) > turning off the windows server and then running 'samba-tool domain demote > --remove-other-dead-server=REMOVE_OTHER_DEAD_SERVER -UAdministrator > --password=PASSWORD'. > > Before doing any of the above, I would check if everything is ok in the AD > on your Samba 4 AD DC. > > You also didn't say if 'samba-tool fsmo show' shows all your 7 FSMO roles > without errors. > > Rowland > > The output of command, no errors. (CN=GTESTE2 = Samba DC) >> >> root at gteste2:/anderson# >> root at gteste2:/anderson# *samba-tool fsmo show* >> SchemaMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> InfrastructureMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> RidAllocationMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> PdcEmulationMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> DomainNamingMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> DomainDnsZonesMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> ForestDnsZonesMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> root at gteste2:/anderson# >> >> Thanks, >> >> Anderson Hoffmann >> >> >> >> 2016-07-11 15:47 GMT-03:00 Rowland penny <rpenny at samba.org <mailto: >> rpenny at samba.org>>: >> >> >> On 11/07/16 19:26, Anderson Hoffmann do Carmo wrote: >> >> Hi. >> >> I am using a Windows Server 2008R2 as primary DC and a Ubuntu >> Server 16.04 >> as secundary DC with Samba 4.3.9 (from repository/apt-get) >> I am transfered FSMO rules to Samba and I am try to demote >> Windows, but >> fail! >> >> >> How did you transfer the FSMO roles ? >> What 'tool' did you use ? >> >> The error is: >> >> The operation failed: >> The active directory domain services could not find another domain >> controller to transfer the remaining data on the partition >> DC=DomainDnsZones,DC=testead,DC=minhaempresa,DC=com >> "the specified domain does not exist or can not be contacted" >> >> >> Have you tried running 'samba-tool fsmo show' in a terminal on the >> Samba DC ? >> If so, does it show all 7 FSMO role owners or does it end with an >> error message ? >> >> Rowland >> >> Any ideia? >> >> The Samba DC it's OK and operational >> >> >> >> Anderson Hoffmann >> >> >> >> -- To unsubscribe from this list go to the following URL and read >> the >> instructions: https://lists.samba.org/mailman/options/samba >> >> >> > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
Hi! I tried the following command, but it is not recognized. My Samba is 4.3.9 from Ubuntu Repository. I need to update the Samba? root at gteste2:~# root at gteste2:~# samba-tool domain demote --remove-other-dead-server=GTESTE -UAdministrador --password=********* Usage: samba-tool domain demote [options] samba-tool domain demote: error: *no such option: --remove-other-dead-server* root at gteste2:~# Anderson Hoffmann do Carmo MCP | MTA | MCDST | MCTS | MCSA | MS | MOS | ITIL-F | ISFS | CLOUDF | CI-SCS | VCA-DCV | 2016-07-11 16:50 GMT-03:00 Rowland penny <rpenny at samba.org>:> On 11/07/16 20:04, Anderson Hoffmann do Carmo wrote: > > I am transfer using 'samba-tool fsmo transfer --role=all > > > Unless you added '-UAdministrator --password=PASSWORD' to the above > command (or another user will the required permissions), you wouldn't have > transferred the DNS roles. > > I am try demote Windows using DCPROMO.EXE on Windows Server > > > Have you tried (once you are sure all 7 FSMO roles have been transferred) > turning off the windows server and then running 'samba-tool domain demote > --remove-other-dead-server=REMOVE_OTHER_DEAD_SERVER -UAdministrator > --password=PASSWORD'. > > Before doing any of the above, I would check if everything is ok in the AD > on your Samba 4 AD DC. > > You also didn't say if 'samba-tool fsmo show' shows all your 7 FSMO roles > without errors. > > Rowland > > The output of command, no errors. (CN=GTESTE2 = Samba DC) > > root at gteste2:/anderson# > root at gteste2:/anderson# *samba-tool fsmo show* > SchemaMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > InfrastructureMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > RidAllocationMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > PdcEmulationMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > DomainNamingMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > DomainDnsZonesMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > ForestDnsZonesMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > root at gteste2:/anderson# > > Thanks, > > Anderson Hoffmann > > > > 2016-07-11 15:47 GMT-03:00 Rowland penny <rpenny at samba.org>: > >> On 11/07/16 19:26, Anderson Hoffmann do Carmo wrote: >> >>> Hi. >>> >>> I am using a Windows Server 2008R2 as primary DC and a Ubuntu Server >>> 16.04 >>> as secundary DC with >>> >>> Samba 4.3.9 (from repository/apt-get) >>> I am transfered FSMO rules to Samba and I am try to demote Windows, but >>> fail! >>> >> >> How did you transfer the FSMO roles ? >> What 'tool' did you use ? >> >> The error is: >>> >>> The operation failed: >>> The active directory domain services could not find another domain >>> controller to transfer the remaining data on the partition >>> DC=DomainDnsZones,DC=testead,DC=minhaempresa,DC=com >>> "the specified domain does not exist or can not be contacted" >>> >> >> Have you tried running 'samba-tool fsmo show' in a terminal on the Samba >> DC ? >> If so, does it show all 7 FSMO role owners or does it end with an error >> message ? >> >> Rowland >> >> Any ideia? >>> >>> The Samba DC it's OK and operational >>> >>> >>> >>> Anderson Hoffmann >>> >> >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> > > >