samba - Jun 2017 - Rename a Domain

Hi,

I have a problem.

My domain is EMPRESA.COM.BR and I need to rename to EMPRESA.GOV.BR.

Is it possible in Samba 4? How can I migrate users account?

I'm using Samba 4.6.3.

Regards,

Márcio Bacci

On Mon, 12 Jun 2017 15:02:54 -0300
Marcio Demetrio Bacci via samba <samba at lists.samba.org> wrote:
> Hi,
> 
> I have a problem.
> 
> My domain is EMPRESA.COM.BR and I need to rename to EMPRESA.GOV.BR.
> 
> Is it possible in Samba 4? How can I migrate users account?
> 
> I'm using Samba 4.6.3.
> 
> Regards,
> 
> Márcio Bacci
If you read the Samba wiki page on creating a new AD DC, see here:

https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller

You will find this:

Make sure that you provision the AD using a DNS domain that will not
need to be changed. Samba does not support renaming the AD DNS zone and
Kerberos realm.

So, no you cannot rename your dns domain or realm.

Rowland

Hi Marcio
>
> I have a problem.
>
> My domain is EMPRESA.COM.BR and I need to rename to EMPRESA.GOV.BR.
>
> Is it possible in Samba 4? How can I migrate users account?
>
> I'm using Samba 4.6.3.
there is no out of the box tool for domain renaming in Samba. However 
with python-ldb you can do about anything you can think of in an AD. You 
can recreate a new domain with the new name but same domain SID, then 
re-inject all the objects, sid and nt hashes with some python scripting. 
Once you have your new shiny AD, you just have to write a small script 
for windows desktops to join the new domain. If you have done everything 
right,user accounts, groups, profiles and acls should be kept altogether.

Cheers,

Denis
>
> Regards,
>
> Márcio Bacci
>
-- 
Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil-it-systems.fr