Hai Marco. Just upgrade it. ;-) It's not needed to move FSMO roles, in the last 4 years of upgradeing.. I did that exactly... 0 times. Steps shown work fine. ;-) Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Marco Gaiarin via samba > Verzonden: woensdag 2 oktober 2019 11:29 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Upgrade DC 4.5 -> 4.8, timings? > > Mandi! L.P.H. van Belle via samba > In chel di` si favelave... > > > > You can start upgrading the FSMO (transferring roles in samba > > > now is simple even with the FSMO offline) but you avoid > > > potential extra work starting on other DCs. Check > > > replication, let sit for a while, check some more. If all is > > > well, time to upgrade another DC. > > Exactly ;-), it should not be very exiting here. > > If you hit things, just post it on the list, i'll help out. > > Ok, so if i've understood well: > > a) keeping DC with (not too) different samba versions it is not a > problem. > > b) upgrade the DC with FSMO roles last, not first. > > > Considering that to upgrade a container with the DC i need 15-20 > minutes, it is really needed to trasfer FSMO roles? > > My FSMO roles DC have also the 'samba-tool user syncpasswords' script > that run, and really i don't want to move to a different dc, or loss > some password change... > > > Thanks. > > -- > dott. Marco Gaiarin GNUPG > Key ID: 240A3D66 > Associazione ``La Nostra Famiglia'' > http://www.lanostrafamiglia.it/ > Polo FVG - Via della Bont?, 7 - 33078 - San Vito al > Tagliamento (PN) > marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 > f +39-0434-842797 > > Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! > http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 > (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA) > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
Well, if you want Rowland to hear us.. You should have send this one to the list. ;-) On the "which first" here there are different opinions. My opinion is, if you systems is running correctly, it does not matter if you start with the DC with FSMO or not. But Note, this is my opinion and base on my experience. I've always done the server with FSMO first, why? .. Ough.. Thats something that goes back years, which i cant recall why.. I also must say why this does not matter to me. If i start to upgrade my DC's, i follow these exact steps. - pick DC1. 1- clear logs. 2- reboot, check logs, fix everthing i see. 3- reboot, verify everything again, repeat above untill there are 0 errors (or warnings). 4- ok? Then 5- down all of the AD-DC 6- snapshot all AD-DC's 7- start all AD-DC's ( this take me about 3-5 min for all my DC's. ) 8- And i start upgrading, one DC at at time. 9- If first DC is upgraded, goto 1- again. 10- if -1 checks ok, next server, if not goto 2- - If the first DC fails, i revert back to the first snapshot. And find the source of the upgrade problem fix in in advance, then goto 1- - If the second DC fails, then that systems is off with its settings, goto 1- for DC2. And repeat per DC. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: Marco Gaiarin [mailto:marco.gaiarin at lanostrafamiglia.it] > Verzonden: woensdag 2 oktober 2019 14:04 > Aan: L.P.H. van Belle > Onderwerp: Re: [Samba] Upgrade DC 4.5 -> 4.8, timings? > > Riprendo quanto scritto nel suo messaggio del 02/10/2019... > > > Steps shown work fine. ;-) > > Good! ;-) > > I really supposed that was betetr to upgrade DC with FSMOroles, and > then the other... probably because is the 'PRIMARY'... ouch! > If Rowland > hear us! ;-) > > -- > dott. Marco Gaiarin GNUPG > Key ID: 240A3D66 > Associazione ``La Nostra Famiglia'' > http://www.lanostrafamiglia.it/ > Polo FVG - Via della Bont?, 7 - 33078 - San Vito al > Tagliamento (PN) > marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 > f +39-0434-842797 > > Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! > http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 > (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA) > > -- > >
On 02/10/2019 13:42, L.P.H. van Belle via samba wrote:> Well, if you want Rowland to hear us.. > You should have send this one to the list. ;-)You rang ;-)> > On the "which first" here there are different opinions.Oh yes, there are most definitely different options.> > My opinion is, if you systems is running correctly, > it does not matter if you start with the DC with FSMO or not. > > But Note, this is my opinion and base on my experience.And mine> > I've always done the server with FSMO first, why? .. Ough.. > Thats something that goes back years, which i cant recall why.. > I also must say why this does not matter to me. > If i start to upgrade my DC's, i follow these exact steps. > > - pick DC1. > 1- clear logs. > 2- reboot, check logs, fix everthing i see. > 3- reboot, verify everything again, repeat above untill there are 0 errors (or warnings).Yes, you must start with zero errors before the upgrade, garbage in, garbage out.> 4- ok? Then > 5- down all of the AD-DC > 6- snapshot all AD-DC's > 7- start all AD-DC's > ( this take me about 3-5 min for all my DC's. ) > 8- And i start upgrading, one DC at at time. > 9- If first DC is upgraded, goto 1- again. > 10- if -1 checks ok, next server, if not goto 2- > - If the first DC fails, i revert back to the first snapshot. > And find the source of the upgrade problem fix in in advance, then goto 1- > - If the second DC fails, then that systems is off with its settings, goto 1- for DC2. > > And repeat per DC.Sounds like a good plan to me ;-) Rowland
Mandi! L.P.H. van Belle via samba In chel di` si favelave...> My opinion is, if you systems is running correctly, > it does not matter if you start with the DC with FSMO or not. > But Note, this is my opinion and base on my experience.Your (and Rowland) opinion normally matters. ;-) Thanks. Only a little note.> 1- clear logs. > 2- reboot, check logs, fix everthing i see. > 3- reboot, verify everything again, repeat above untill there are 0 errors (or warnings).'logs' mean 'samba logs', or loosely you are speaking about 'samba logs and consistency tools' like 'samba-tool dbcheck' and your script samba-check-db-repl.sh? -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bont?, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)