samba - Nov 2018 - Internal DNS migrate to Bind9_DLZ

Hello,
sorry, but I cannot find start of this discussion thread, so my question may be
stupid.
Is your domain classicupgraded from Samba 3 or provisioned from scratch?

I have similar problem with our domain which is upgraded. If I provision the new
domain everything works, but in old domain there is something broken inside.

For Rowland:
Does exist utility with similar function as "net rpc vampire"? My idea
is to provision brand new domain with SIDs, RIDs and users/groups/passwords from
old (broken) Samba 4 AD domain. Because in bigger environments is practically
impossible to migrate all user accounts and rights. Maximum sacrifice is to
rejoin all Windows stations, but SIDs must be 1:1.

Jiri

On Thu, 01 Nov 2018 15:25:42 +0100
Jiří Černý via samba <samba at lists.samba.org> wrote:
> Hello,
> sorry, but I cannot find start of this discussion thread, so my
> question may be stupid. Is your domain classicupgraded from Samba 3
> or provisioned from scratch?
> 
> I have similar problem with our domain which is upgraded. If I
> provision the new domain everything works, but in old domain there is
> something broken inside.
I personally have never been a fan of the classicupgrade, it brings
along too much garbage.
> 
> For Rowland:
> Does exist utility with similar function as "net rpc vampire"? My
> idea is to provision brand new domain with SIDs, RIDs and
> users/groups/passwords from old (broken) Samba 4 AD domain. Because
> in bigger environments is practically impossible to migrate all user
> accounts and rights. Maximum sacrifice is to rejoin all Windows
> stations, but SIDs must be 1:1.
> 
The only way to upgrade is via the classicupgrade script, but if you
can dump everything into an ldif, you may be able to script around the
ldif and samba-tool domain provision --domain-sid=YOUR-SID

Rowland

Hello Everyone,

I managed to finally migrate from Internal DNS to Bind9_Dlz.
After updating samba from 4.8.4 to 4.8.9 the migrating still did not work.
I then continued and updated to 9.4.5 and tried to migrate again.
And voila, I could easily and seamlessly migrate from Internal DNS to
Bind9_Dlz.

Thanks for everyone input.

Kind Regards

On Thu, Nov 1, 2018 at 5:36 PM Rowland Penny via samba <
samba at lists.samba.org> wrote:
> On Thu, 01 Nov 2018 15:25:42 +0100
> Jiří Černý via samba <samba at lists.samba.org> wrote:
>
> > Hello,
> > sorry, but I cannot find start of this discussion thread, so my
> > question may be stupid. Is your domain classicupgraded from Samba 3
> > or provisioned from scratch?
> >
> > I have similar problem with our domain which is upgraded. If I
> > provision the new domain everything works, but in old domain there is
> > something broken inside.
>
> I personally have never been a fan of the classicupgrade, it brings
> along too much garbage.
>
> >
> > For Rowland:
> > Does exist utility with similar function as "net rpc
vampire"? My
> > idea is to provision brand new domain with SIDs, RIDs and
> > users/groups/passwords from old (broken) Samba 4 AD domain. Because
> > in bigger environments is practically impossible to migrate all user
> > accounts and rights. Maximum sacrifice is to rejoin all Windows
> > stations, but SIDs must be 1:1.
> >
>
> The only way to upgrade is via the classicupgrade script, but if you
> can dump everything into an ldif, you may be able to script around the
> ldif and samba-tool domain provision --domain-sid=YOUR-SID
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

-- 
Eben Victor
Cell:  +27 82 759 5266
Email: eben.victor at gmail.com