samba - Aug 2018 - samba-tool dbcheck "Indexed and full searches both failed"

On Tue, 31 Jul 2018 10:04:37 -0500
Denis Morejon via samba <samba at lists.samba.org> wrote:

> 
> Ok. When renaming DC1 could it keep its IP address?  All my clients
> have fixed IP configuration (No DHCP) and they are configured to IP1:
> DNS1 (DC1) and IP2: DNS2 (DC2). So I need to keep the IP of DC1. Is
> It a problem ?
This shouldn't be a problem, what has been a problem was using the
original DC name.
> 
> Another question:
> When you said clean out samba records, what files should I delete?
> (/usr/local/samba/private/sam.ldb.d/*   ?)
> >
>
Ah, you are using a self compiled Samba, this is even easier,
move /usr/local/samba to /usr/local/oldsamba , then run 'make install
again. You will get a perfectly new /usr/local/samba again ;-)

Rowland

On Wed, 1 Aug 2018 11:17:03 -0500
Denis Morejon via samba <samba at lists.samba.org> wrote:
> Rowland thank you very much! The procedure you gave me was ok:
> 
> 1- Seize the all roles to dc2
> 
> 2- Demote dc1
> 
> 3- change hostname of dc1
> 
> 4- Clean samba files of dc1: mv /usr/local/samba /usr/local/samba-old
> 
> 5- Install samba on dc1: make install
> 
> 6- Join to the domain (Using dns ip of dc2)
> 
> 7- Fix any samba db problem (samba-tool dbcheck --fix) (Both dc ok
> and with the same number of objects)
> 
> Almost everything was right but the relationship between Linux 
> workstations and the domain. So I had to
> 
> re-join almost each linux pc to the domain using this command:
> 
> /opt/pbis/bin/domainjoin-cli join ...
You never said that you were using an unsupported (as in, by Samba)
software, I personally would have just used 'net ads join -U
Administrator'
> 
> This is not the first time it happends to me. I mean...the lost of 
> relationship. Last year I had to
> 
> restore both the virtual machines, dc1 and dc2, with a backup done a 
> month before at the same time. In this case I lost the relationship
> too!
> 
> I found a Windows group policy to delay the exchange of pc account 
> passwords for a year or two, So that I could restore samba DCs
> anytime.
> 
> I wonder if there is a method to prevent the expiration of the pc 
> account delaying the exchange of pc account passwords ????
Well, a PC is just a user with an extra objectclass ;-)

Rowland
> 
> 
> 
> 
>

Rowland thank you very much! The procedure you gave me was ok:

1- Seize the all roles to dc2

2- Demote dc1

3- change hostname of dc1

4- Clean samba files of dc1: mv /usr/local/samba /usr/local/samba-old

5- Install samba on dc1: make install

6- Join to the domain (Using dns ip of dc2)

7- Fix any samba db problem (samba-tool dbcheck --fix) (Both dc ok and 
with the same number of objects)

Almost everything was right but the relationship between Linux 
workstations and the domain. So I had to

re-join almost each linux pc to the domain using this command:

/opt/pbis/bin/domainjoin-cli join ...

This is not the first time it happends to me. I mean...the lost of 
relationship. Last year I had to

restore both the virtual machines, dc1 and dc2, with a backup done a 
month before at the same time. In this case I lost the relationship too!

I found a Windows group policy to delay the exchange of pc account 
passwords for a year or two, So that I could restore samba DCs anytime.

I wonder if there is a method to prevent the expiration of the pc 
account delaying the exchange of pc account passwords ????





El 31/07/18 a las 09:54, Rowland Penny via samba
escribió:
> On Tue, 31 Jul 2018 10:04:37 -0500
> Denis Morejon via samba <samba at lists.samba.org> wrote:
>
>
>> Ok. When renaming DC1 could it keep its IP address?  All my clients
>> have fixed IP configuration (No DHCP) and they are configured to IP1:
>> DNS1 (DC1) and IP2: DNS2 (DC2). So I need to keep the IP of DC1. Is
>> It a problem ?
> This shouldn't be a problem, what has been a problem was using the
> original DC name.
>
>> Another question:
>> When you said clean out samba records, what files should I delete?
>> (/usr/local/samba/private/sam.ldb.d/*   ?)
> Ah, you are using a self compiled Samba, this is even easier,
> move /usr/local/samba to /usr/local/oldsamba , then run 'make install
> again. You will get a perfectly new /usr/local/samba again ;-)
>
> Rowland
>   
>
>

El 01/08/18 a las 11:17, Denis Morejon via samba
escribió:
> Rowland thank you very much! The procedure you gave me was ok:
>
> 1- Seize the all roles to dc2
>
> 2- Demote dc1
>
> 3- change hostname of dc1
>
> 4- Clean samba files of dc1: mv /usr/local/samba /usr/local/samba-old
>
> 5- Install samba on dc1: make install
>
> 6- Join to the domain (Using dns ip of dc2)
>
> 7- Fix any samba db problem (samba-tool dbcheck --fix) (Both dc ok and 
> with the same number of objects)
>
> Almost everything was right but the relationship between Linux 
> workstations and the domain. So I had to
>
> re-join almost each linux pc to the domain using this command:
>
> /opt/pbis/bin/domainjoin-cli join ...
>
> This is not the first time it happends to me. I mean...the lost of 
> relationship. Last year I had to
>
> restore both the virtual machines, dc1 and dc2, with a backup done a 
> month before at the same time. In this case I lost the relationship too!
>
> I found a Windows group policy to delay the exchange of pc account 
> passwords for a year or two, So that I could restore samba DCs anytime.
I could not solve the problem of relationship between pcs and DCs with 
this group policy (In case of DCs restoration). So I need a method to 
keep the pc account passwords equals a long time in samba db, in such a 
way that I could restore samba DCs anytime.
>
> I wonder if there is a method to prevent the expiration of the pc 
> account delaying the exchange of pc account passwords ????
>
>
>
>
>
> El 31/07/18 a las 09:54, Rowland Penny via samba escribió:
>> On Tue, 31 Jul 2018 10:04:37 -0500
>> Denis Morejon via samba <samba at lists.samba.org> wrote:
>>
>>
>>> Ok. When renaming DC1 could it keep its IP address?  All my clients
>>> have fixed IP configuration (No DHCP) and they are configured to
IP1:
>>> DNS1 (DC1) and IP2: DNS2 (DC2). So I need to keep the IP of DC1. Is
>>> It a problem ?
>> This shouldn't be a problem, what has been a problem was using the
>> original DC name.
>>
>>> Another question:
>>> When you said clean out samba records, what files should I delete?
>>> (/usr/local/samba/private/sam.ldb.d/*   ?)
>> Ah, you are using a self compiled Samba, this is even easier,
>> move /usr/local/samba to /usr/local/oldsamba , then run 'make
install
>> again. You will get a perfectly new /usr/local/samba again ;-)
>>
>> Rowland
>>
>>
>
>