samba - Nov 2016 - Doubt about Global Catalog on Samba 4

Hi Rowland

I'm using Samba 4.2.1 on Debian 7

Regards,

Márcio

2016-11-15 20:30 GMT-02:00 Rowland Penny via samba <samba at
lists.samba.org>:
> On Tue, 15 Nov 2016 20:19:23 -0200
> Marcio Demetrio Bacci via samba <samba at lists.samba.org> wrote:
>
> > Hi
> >
> > When I work with RSAT on Samba4 appear the following message: "A
> > global catalog (GC) cannot be contacted. A GC is needed to list the
> > objects group memberships. ..."
> > Occur, for example, when I access properties about an user or
> > computer, as member of or Unix Attribute tab
> >
> > I have executed some tests, and for me looks like is healthy my DC.
> >
> > Is there another test to verify the health of the my DC/Domain ?
> >
> > samba-tool fsmo show
> > InfrastructureMasterRole owner: CN=NTDS
> > Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN>
Sites,CN=Configuration,DC=empresa,DC=com,DC=br
> > RidAllocationMasterRole owner: CN=NTDS
> > Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN>
Sites,CN=Configuration,DC=empresa,DC=com,DC=br
> > PdcEmulationMasterRole owner: CN=NTDS
> > Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN>
Sites,CN=Configuration,DC=empresa,DC=com,DC=br
> > DomainNamingMasterRole owner: CN=NTDS
> > Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN>
Sites,CN=Configuration,DC=empresa,DC=com,DC=br
> > SchemaMasterRole owner: CN=NTDS
> > Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN>
Sites,CN=Configuration,DC=empresa,DC=com,DC=br
> >
> >
> >
>
> You seem to be missing two FSMO roles:
>
> DomainDnsZonesMasterRole
> ForestDnsZonesMasterRole
>
> Just what version of Samba are you using ?
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

On Tue, 15 Nov 2016 22:40:29 -0200
Marcio Demetrio Bacci <marciobacci at gmail.com> wrote:
> Hi Rowland
> 
> I'm using Samba 4.2.1 on Debian 7
> 
That explains the missing FSMO roles, the code to show them went into
 version 4.3.0

Can I suggest you upgrade Samba.

Rowland

See inline comments:

On Wed, 16 Nov 2016 13:36:06 -0200
Marcio Demetrio Bacci <marciobacci at gmail.com> wrote:
> Hi,
> 
> Are the step the followings to upgrade samba 4.2.1 to 4.4.7,?
> 
> 1) Stop the Samba services and compile the new samba, first DC2 and
> after DC1 (FSMO):
> ./configure
> make
> make install
I normally do:
./configure
make
stop Samba
make install

I do of course back everything up first.

> 
> 2) Test the integrity of AD DC: samba-tool dbcheck --cross-ncs
>
You can run 'samba-tool dbcheck', but, as the database will not be
modified by the upgrade, there is no real need to.
 
> 
> 3) Restart the Samba services.
>
Yes, it won't work until you do LOL
 
> 
> 
> *I don't need run again "samba-tool domain provision --use-rfc2307
> --interactive" *
No, definitely no.
> Do I need to migrate FSMO functions to DC2 before update DC1,?
> 
Again No.

Rowland