[Samba] Demote Win2008R2 DC Fail

Anderson Hoffmann do Carmo
2016-07-11T19:04:02Z

I am transfer using 'samba-tool fsmo transfer --role=all
I am try demote Windows using DCPROMO.EXE on Windows Server
The output of command, no errors. (CN=GTESTE2 = Samba DC)

root at gteste2:/anderson#
root at gteste2:/anderson# *samba-tool fsmo show*
SchemaMasterRole owner: CN=NTDS
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
InfrastructureMasterRole owner: CN=NTDS
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
RidAllocationMasterRole owner: CN=NTDS
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
PdcEmulationMasterRole owner: CN=NTDS
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
DomainNamingMasterRole owner: CN=NTDS
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
DomainDnsZonesMasterRole owner: CN=NTDS
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
ForestDnsZonesMasterRole owner: CN=NTDS
Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com
root at gteste2:/anderson#

​Thanks,​

​Anderson Hoffmann



2016-07-11 15:47 GMT-03:00 Rowland penny <rpenny at samba.org>:

> On 11/07/16 19:26, Anderson Hoffmann do Carmo wrote:
>
>> Hi.
>>
>> I am using a Windows Server 2008R2 as primary DC and a Ubuntu Server
16.04
>> as secundary DC with Samba 4.3.9 (from repository/apt-get)
>> I am transfered FSMO rules to Samba and I am try to demote Windows, but
>> fail!
>>
>
> How did you transfer the FSMO roles ?
> What 'tool' did you use ?
>
> The error is:
>>
>> The operation failed:
>> The active directory domain services could not find another domain
>> controller to transfer the remaining data on the partition
>> DC=DomainDnsZones,DC=testead,DC=minhaempresa,DC=com
>> "the specified domain does not exist or can not be contacted"
>>
>
> Have you tried running 'samba-tool fsmo show' in a terminal on the
Samba
> DC ?
> If so, does it show all 7 FSMO role owners or does it end with an error
> message ?
>
> Rowland
>
> ​Any ideia?
>>
>> ​The Samba DC it's OK and operational
>>
>>
>>
>> Anderson Hoffmann