[Samba] Demote Win2008R2 DC Fail

Anderson Hoffmann do Carmo
2016-07-12T11:44:40Z

Hi!

I tried the following command, but it is not recognized. My Samba is 4.3.9
from Ubuntu Repository.
I need to update the Samba?

root at gteste2:~#
root at gteste2:~# samba-tool domain demote --remove-other-dead-server=GTESTE
-UAdministrador --password=*********
Usage: samba-tool domain demote [options]

samba-tool domain demote: error: *no such option:
--remove-other-dead-server*
root at gteste2:~#



Anderson Hoffmann do Carmo
MCP | MTA | MCDST | MCTS | MCSA | MS | MOS |
ITIL-F | ISFS | CLOUDF | CI-SCS | VCA-DCV |




2016-07-11 16:50 GMT-03:00 Rowland penny <rpenny at samba.org>:

> On 11/07/16 20:04, Anderson Hoffmann do Carmo wrote:
>
> I am transfer using 'samba-tool fsmo transfer --role=all
>
>
> Unless you added '-UAdministrator --password=PASSWORD' to the above
> command (or another user will the required permissions), you wouldn't
have
> transferred the DNS roles.
>
> I am try demote Windows using DCPROMO.EXE on Windows Server
>
>
> Have you tried (once you are sure all 7 FSMO roles have been transferred)
> turning off the windows server and then running 'samba-tool domain
demote
> --remove-other-dead-server=REMOVE_OTHER_DEAD_SERVER -UAdministrator
> --password=PASSWORD'.
>
> Before doing any of the above, I would check if everything is ok in the AD
> on your Samba 4 AD DC.
>
> You also didn't say if 'samba-tool fsmo show' shows all your 7
FSMO roles
> without errors.
>
> Rowland
>
> The output of command, no errors. (CN=GTESTE2 = Samba DC)
>
> root at gteste2:/anderson#
> root at gteste2:/anderson# *samba-tool fsmo show*
> SchemaMasterRole owner: CN=NTDS
>
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
> InfrastructureMasterRole owner: CN=NTDS
>
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
> RidAllocationMasterRole owner: CN=NTDS
>
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
> PdcEmulationMasterRole owner: CN=NTDS
>
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
> DomainNamingMasterRole owner: CN=NTDS
>
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
> DomainDnsZonesMasterRole owner: CN=NTDS
>
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
> ForestDnsZonesMasterRole owner: CN=NTDS
>
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
> root at gteste2:/anderson#
>
> ​ Thanks,​
>
> ​ Anderson Hoffmann
>
>
>
> 2016-07-11 15:47 GMT-03:00 Rowland penny <rpenny at samba.org>:
>
>> On 11/07/16 19:26, Anderson Hoffmann do Carmo wrote:
>>
>>> Hi.
>>>
>>> I am using a Windows Server 2008R2 as primary DC and a Ubuntu
Server
>>> 16.04
>>> as secundary DC with
>>> ​​
>>> Samba 4.3.9 (from repository/apt-get)
>>> I am transfered FSMO rules to Samba and I am try to demote Windows,
but
>>> fail!
>>>
>>
>> How did you transfer the FSMO roles ?
>> What 'tool' did you use ?
>>
>> The error is:
>>>
>>> The operation failed:
>>> The active directory domain services could not find another domain
>>> controller to transfer the remaining data on the partition
>>> DC=DomainDnsZones,DC=testead,DC=minhaempresa,DC=com
>>> "the specified domain does not exist or can not be
contacted"
>>>
>>
>> Have you tried running 'samba-tool fsmo show' in a terminal on
the Samba
>> DC ?
>> If so, does it show all 7 FSMO role owners or does it end with an error
>> message ?
>>
>> Rowland
>>
>> ​Any ideia?
>>>
>>> ​The Samba DC it's OK and operational
>>>
>>>
>>>
>>> Anderson Hoffmann
>>>
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the