samba - Jul 2016 - Migrate File Server MS for Samba

Dear,We are in MS migration phase to Samba 4.Besides replacing the AD MS by
Samba 4, we must also migrate the file server MS to Samba 4.
I have some doubts and I ask the opinion of you:
  1 - Is there any way to migrate MS folder permissions for Samba 4?  2 - We
will need a secondary domain control. Based on best practices in this Samba 4 is
that the file server, we can use it as a secondary DC? Or is it better to leave
the file server only as a domain member, and create server with Samba to be the
secondary DC?
Thank you!

Hello Ricardo,

if you want to migrate your whole environment to Samba without starting
from scratch, you have to go the following way:

- Check that you're not running a DC later than 2008R2 (we currently do
not support a later schema).
- Join a new Samba DC to the domain
- Set up and join a new Samba Domain Member to the domain
- Copy all files, verify ACLs, etc.
- Testing, testing, testing!
- Demote the old MS DC
- Remove the old MS file server from the domain



Am 18.07.2016 um 15:51 schrieb Ricardo Pardim Claus:
>   1 - Is there any way to migrate MS folder permissions for Samba 4?
You can try using robocopy. It work's as workaround to mirror the Sysvol
content from Samba to Windows, so it should work for your case, too.
https://wiki.samba.org/index.php/Robocopy_based_SysVol_replication_workaround


>  2 - We will need a secondary domain control. Based on best practices
> in this Samba 4 is that the file server, we can use it as a
> secondary DC? Or is it better to leave the file server only
> as a domain member, and create server with Samba to
> be the secondary DC?
It's no problem to use the DC as file server as well. However I would
make it conditional on your environment.

You may encounter some different behaviour: For example in the DC code,
the Windows ACL support enabled (hard coded).


Regards,
Marc

Dear Marc,
Thanks for initial contact.
The file server that need to migrate is a Windows 2012 R2. He's just a
domain member.
Being Win 2012, I can face any problems in the migration?

Once the shares are ready, I plan to use Robocopy to copy the files and also the
permissions of users and groups from Windows to Samba.


      De: Marc Muehlfeld <mmuehlfeld at samba.org>
 Para: Ricardo Pardim Claus <ricardo.claus at yahoo.com.br>; "samba
at lists.samba.org" <samba at lists.samba.org>
 Enviadas: Segunda-feira, 18 de Julho de 2016 13:27
 Assunto: Re: [Samba] Migrate File Server MS for Samba
   
Hello Ricardo,

if you want to migrate your whole environment to Samba without starting
from scratch, you have to go the following way:

- Check that you're not running a DC later than 2008R2 (we currently do
not support a later schema).
- Join a new Samba DC to the domain
- Set up and join a new Samba Domain Member to the domain
- Copy all files, verify ACLs, etc.
- Testing, testing, testing!
- Demote the old MS DC
- Remove the old MS file server from the domain



Am 18.07.2016 um 15:51 schrieb Ricardo Pardim Claus:
>  1 - Is there any way to migrate MS folder permissions for Samba 4?
You can try using robocopy. It work's as workaround to mirror the Sysvol
content from Samba to Windows, so it should work for your case, too.
https://wiki.samba.org/index.php/Robocopy_based_SysVol_replication_workaround


>  2 - We will need a secondary domain control. Based on best practices
> in this Samba 4 is that the file server, we can use it as a
> secondary DC? Or is it better to leave the file server only
> as a domain member, and create server with Samba to
> be the secondary DC?
It's no problem to use the DC as file server as well. However I would
make it conditional on your environment.

You may encounter some different behaviour: For example in the DC code,
the Windows ACL support enabled (hard coded).


Regards,
Marc